diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md new file mode 100644 index 00000000..0f93b5b8 --- /dev/null +++ b/.github/pull_request_template.md @@ -0,0 +1,18 @@ +## Goal + + +## Changes + + +## Testing + + +## Artifacts & Screenshots + + +--- + +### Checklist +- [ ] Clear and descriptive PR title +- [ ] Documentation updated if needed +- [ ] No secrets or large temporary files included \ No newline at end of file diff --git a/labs/lab10/imports/import-grype-vuln-results.json.json b/labs/lab10/imports/import-grype-vuln-results.json.json new file mode 100644 index 00000000..db5e70f1 --- /dev/null +++ b/labs/lab10/imports/import-grype-vuln-results.json.json @@ -0,0 +1 @@ +{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":5,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":12,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":12},"low":{"active":3,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":3},"medium":{"active":31,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":31},"high":{"active":52,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":52},"critical":{"active":11,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":11},"total":{"active":109,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":109}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Anchore Grype","close_old_findings":false,"close_old_findings_product_scope":false,"test":5} \ No newline at end of file diff --git a/labs/lab10/imports/import-nuclei-results.json.json b/labs/lab10/imports/import-nuclei-results.json.json new file mode 100644 index 00000000..c2d82681 --- /dev/null +++ b/labs/lab10/imports/import-nuclei-results.json.json @@ -0,0 +1 @@ +{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":4,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":23,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":23},"low":{"active":1,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":1},"medium":{"active":1,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":1},"high":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":25,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":25}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Nuclei Scan","close_old_findings":false,"close_old_findings_product_scope":false,"test":4} \ No newline at end of file diff --git a/labs/lab10/imports/import-semgrep-results.json.json b/labs/lab10/imports/import-semgrep-results.json.json new file mode 100644 index 00000000..759d255d --- /dev/null +++ b/labs/lab10/imports/import-semgrep-results.json.json @@ -0,0 +1 @@ +{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":2,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"low":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"medium":{"active":18,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":18},"high":{"active":7,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":7},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":25,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":25}}},"pro":["Did you know, Pro has an automated no-code connector for Semgrep JSON Report? Try today for free or email us at hello@defectdojo.com"],"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Semgrep JSON Report","close_old_findings":false,"close_old_findings_product_scope":false,"test":2} \ No newline at end of file diff --git a/labs/lab10/imports/import-trivy-vuln-detailed.json.json b/labs/lab10/imports/import-trivy-vuln-detailed.json.json new file mode 100644 index 00000000..fe94e116 --- /dev/null +++ b/labs/lab10/imports/import-trivy-vuln-detailed.json.json @@ -0,0 +1 @@ +{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":3,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"low":{"active":4,"verified":4,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":4},"medium":{"active":33,"verified":31,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":33},"high":{"active":28,"verified":26,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":28},"critical":{"active":9,"verified":9,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":9},"total":{"active":74,"verified":70,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":74}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Trivy Scan","close_old_findings":false,"close_old_findings_product_scope":false,"test":3} \ No newline at end of file diff --git a/labs/lab10/imports/import-zap-report-noauth.json.json b/labs/lab10/imports/import-zap-report-noauth.json.json new file mode 100644 index 00000000..207345f6 --- /dev/null +++ b/labs/lab10/imports/import-zap-report-noauth.json.json @@ -0,0 +1 @@ +{"message":"['Internal error: Wrong file format, please use xml.']","pro":["Pro comes with support. Try today for free or email us at hello@defectdojo.com"]} \ No newline at end of file diff --git a/labs/lab10/report/dojo-report.pdf b/labs/lab10/report/dojo-report.pdf new file mode 100644 index 00000000..43819a25 Binary files /dev/null and b/labs/lab10/report/dojo-report.pdf differ diff --git a/labs/lab10/report/findings.csv b/labs/lab10/report/findings.csv new file mode 100644 index 00000000..3f3c603e --- /dev/null +++ b/labs/lab10/report/findings.csv @@ -0,0 +1,160 @@ +active,active_endpoint_count,active_endpoints,component_name,component_version,created,cvssv3,cvssv3_score,cvssv4,cvssv4_score,cwe,date,defect_review_requested_by,defect_review_requested_by_id,description,duplicate,duplicate_finding,duplicate_finding_id,dynamic_finding,effort_for_fixing,epss_percentile,epss_score,false_p,file_path,finding_group,fix_available,fix_version,has_endpoints,has_finding_group,has_jira_configured,has_jira_group_issue,has_jira_issue,hash_code,id,impact,is_mitigated,kev_date,known_exploited,last_reviewed,last_reviewed_by,last_reviewed_by_id,last_status_update,line,mitigated,mitigated_by,mitigated_by_id,mitigated_endpoint_count,mitigated_endpoints,mitigation,nb_occurences,numerical_severity,out_of_scope,param,payload,pgh_event_models,pk,planned_remediation_date,planned_remediation_version,publish_date,ransomware_used,references,reporter,reporter_id,review_requested_by,review_requested_by_id,risk_accepted,sast_sink_object,sast_source_file_path,sast_source_line,sast_source_object,scanner_confidence,service,severity,severity_justification,sla_age,sla_age_days,sla_days_remaining,sla_deadline,sla_expiration_date,sla_start_date,sonarqube_issue,sonarqube_issue_id,static_finding,steps_to_reproduce,test,test_id,thread_id,title,under_defect_review,under_review,unique_id_from_tool,updated,url,verified,violates_sla,vuln_id_from_tool,test,found_by,engagement_id,engagement,product_id,product,endpoints,vulnerability_ids,tags,status,notes +True,0,[],node,22.18.0,2026-03-21 08:52:52.097849+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N,9.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** nvd:cpe NEWLINE **Vulnerability Description:** A flaw in Node.jsтАЩs Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise. NEWLINE This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25. NEWLINE **Matcher:** stock-matcher NEWLINE **Package URL:** pkg:generic/node@22.18.0",False,,,False,,0.01618,0.00012,False,/nodejs/bin/node,,True,25.3.0,True,False,,False,,1184280b03d9b8f4de5d21588a6c960514567de368cc739ea9cb9160b2708707,126,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.097971+00:00,,,,,0,[],Upgrade to version: NEWLINE - 20.20.0 NEWLINE - 22.22.0 NEWLINE - 24.13.0 NEWLINE - 25.3.0,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-55130 NEWLINE **Vulnerability URL:** https://nodejs.org/en/blog/vulnerability/december-2025-security-releases,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,CVE-2025-55130 in node:22.18.0,False,False,,2026-03-21 08:52:52.097866+00:00,,False,,CVE-2025-55130,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-55130,,Active, +True,0,[],vm2,3.9.17,2026-03-21 08:52:50.561085+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** vm2 Sandbox Escape vulnerability NEWLINE **Related Vulnerability Description:** vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to and including 3.9.17. It abuses an unexpected creation of a host object based on the specification of `Proxy`. As a result a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.18` of `vm2`. Users are advised to upgrade. There are no known workarounds for this vulnerability. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/vm2@3.9.17,False,,,False,,0.98634,0.69875,False,/juice-shop/node_modules/vm2/package.json,,True,3.9.18,True,False,,False,,f44df2da924687df4a5dcf933a4e7df5c0b1aad02b92274b61cb5cbb8bab3fa1,52,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.561143+00:00,,,,,0,[],Upgrade to version: 3.9.18,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-whpj-8f3w-67p5 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-whpj-8f3w-67p5 NEWLINE - https://github.com/patriksimek/vm2/commit/d88105f99752305c5b8a77b63ddee3ec86912daf NEWLINE - https://github.com/patriksimek/vm2/releases/tag/3.9.18 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2023-32314 NEWLINE - https://gist.github.com/arkark/e9f5cf5782dec8321095be3e52acf5ac NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2023-32314 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://gist.github.com/arkark/e9f5cf5782dec8321095be3e52acf5ac NEWLINE - https://github.com/patriksimek/vm2/commit/d88105f99752305c5b8a77b63ddee3ec86912daf NEWLINE - https://github.com/patriksimek/vm2/releases/tag/3.9.18 NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-whpj-8f3w-67p5,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-whpj-8f3w-67p5 in vm2:3.9.17,False,False,,2026-03-21 08:52:50.561094+00:00,,False,,GHSA-whpj-8f3w-67p5,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-whpj-8f3w-67p5; CVE-2023-32314,,Active, +True,0,[],crypto-js,3.3.0,2026-03-21 08:52:50.732952+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N,9.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard NEWLINE **Related Vulnerability Description:** crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a workaround, configure crypto-js to use SHA256 with at least 250,000 iterations. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/crypto-js@3.3.0",False,,,False,,0.74108,0.00823,False,/juice-shop/node_modules/crypto-js/package.json,,True,4.2.0,True,False,,False,,cc8a900b6a7aa0953913a16e1e3f4b8b0ee095353015c8addffe296e48d984f4,62,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.733011+00:00,,,,,0,[],Upgrade to version: 4.2.0,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-xwcq-pm8m-c4vf NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf NEWLINE - https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2023-46233 NEWLINE - https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2023-46233 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a NEWLINE - https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf NEWLINE - https://lists.debian.org/debian-lts-announce/2023/11/msg00025.html,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-xwcq-pm8m-c4vf in crypto-js:3.3.0,False,False,,2026-03-21 08:52:50.732961+00:00,,False,,GHSA-xwcq-pm8m-c4vf,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-xwcq-pm8m-c4vf; CVE-2023-46233,,Active, +True,0,[],vm2,3.9.17,2026-03-21 08:52:50.580549+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** vm2 Sandbox Escape vulnerability NEWLINE **Related Vulnerability Description:** vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. This may result in Remote Code Execution, assuming the attacker has arbitrary code execution primitive inside the context of vm2 sandbox. There are no patches and no known workarounds. Users are advised to find an alternative software. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/vm2@3.9.17",False,,,False,,0.97193,0.39234,False,/juice-shop/node_modules/vm2/package.json,,False,,True,False,,False,,c2a7f41be9b517290410d2bb29352182dbd157a58de3c9d90003bb5eaecf96f9,53,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.580646+00:00,,,,,0,[],,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-g644-9gfx-q4q4 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-g644-9gfx-q4q4 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2023-37903 NEWLINE - https://security.netapp.com/advisory/ntap-20230831-0007 NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2023-37903 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-g644-9gfx-q4q4 NEWLINE - https://security.netapp.com/advisory/ntap-20230831-0007/ NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002/,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-g644-9gfx-q4q4 in vm2:3.9.17,False,False,,2026-03-21 08:52:50.580567+00:00,,False,,GHSA-g644-9gfx-q4q4,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-g644-9gfx-q4q4; CVE-2023-37903,,Active, +True,0,[],libssl3,3.0.17-1~deb12u2,2026-03-21 08:52:50.767075+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. NEWLINE **Related Vulnerability Description:** Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with NEWLINE maliciously crafted AEAD parameters can trigger a stack buffer overflow. NEWLINE NEWLINE Impact summary: A stack buffer overflow may lead to a crash, causing Denial NEWLINE of Service, or potentially remote code execution. NEWLINE NEWLINE When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as NEWLINE AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is NEWLINE copied into a fixed-size stack buffer without verifying that its length fits NEWLINE the destination. An attacker can supply a crafted CMS message with an NEWLINE oversized IV, causing a stack-based out-of-bounds write before any NEWLINE authentication or tag verification occurs. NEWLINE NEWLINE Applications and services that parse untrusted CMS or PKCS#7 content using NEWLINE AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. NEWLINE Because the overflow occurs prior to authentication, no valid key material NEWLINE is required to trigger it. While exploitability to remote code execution NEWLINE depends on platform and toolchain mitigations, the stack-based write NEWLINE primitive represents a severe risk. NEWLINE NEWLINE The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this NEWLINE issue, as the CMS implementation is outside the OpenSSL FIPS module NEWLINE boundary. NEWLINE NEWLINE OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. NEWLINE NEWLINE OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl",False,,,False,,0.7101,0.00672,False,/var/lib/dpkg/status.d/libssl3,,True,3.0.18-1~deb12u2,True,False,,False,,9acd88a86c062cb2efbc6f863ec08abd341d446de9e6b4b1f15e58e1ec575493,64,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.767152+00:00,,,,,0,[],Upgrade to version: 3.0.18-1~deb12u2,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-15467 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-15467 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703 NEWLINE - https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9 NEWLINE - https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3 NEWLINE - https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e NEWLINE - https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc NEWLINE - https://openssl-library.org/news/secadv/20260127.txt NEWLINE - http://www.openwall.com/lists/oss-security/2026/01/27/10 NEWLINE - http://www.openwall.com/lists/oss-security/2026/02/25/6,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,CVE-2025-15467 in libssl3:3.0.17-1~deb12u2,False,False,,2026-03-21 08:52:50.767089+00:00,,False,,CVE-2025-15467,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-15467,,Active, +True,0,[],jsonwebtoken,0.1.0,2026-03-21 08:52:50.597123+00:00,CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Verification Bypass in jsonwebtoken NEWLINE **Related Vulnerability Description:** In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family). NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jsonwebtoken@0.1.0,False,,,False,,0.96753,0.3247,False,/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json,,True,4.2.2,True,False,,False,,f94a8c9e391d3ea7af36b9c6e4229d9e367b033b77ca154d8087c9e3fbfbf179,54,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.597181+00:00,,,,,0,[],Upgrade to version: 4.2.2,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-c7hr-j4mj-j2w6 NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2015-9235 NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 NEWLINE - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ NEWLINE - https://www.npmjs.com/advisories/17 NEWLINE - https://www.timmclean.net/2015/02/25/jwt-alg-none.html NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2015-9235 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 NEWLINE - https://nodesecurity.io/advisories/17 NEWLINE - https://www.timmclean.net/2015/02/25/jwt-alg-none.html,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-c7hr-j4mj-j2w6 in jsonwebtoken:0.1.0,False,False,,2026-03-21 08:52:50.597133+00:00,,False,,GHSA-c7hr-j4mj-j2w6,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-c7hr-j4mj-j2w6; CVE-2015-9235,,Active, +True,0,[],jsonwebtoken,0.4.0,2026-03-21 08:52:50.612954+00:00,CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Verification Bypass in jsonwebtoken NEWLINE **Related Vulnerability Description:** In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family). NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jsonwebtoken@0.4.0,False,,,False,,0.96753,0.3247,False,/juice-shop/node_modules/jsonwebtoken/package.json,,True,4.2.2,True,False,,False,,446bfdd26d4b103b1c77eac0d511bf530c5932fe3a97dd64ec2fe2b30109f371,55,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.613016+00:00,,,,,0,[],Upgrade to version: 4.2.2,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-c7hr-j4mj-j2w6 NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2015-9235 NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 NEWLINE - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ NEWLINE - https://www.npmjs.com/advisories/17 NEWLINE - https://www.timmclean.net/2015/02/25/jwt-alg-none.html NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2015-9235 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 NEWLINE - https://nodesecurity.io/advisories/17 NEWLINE - https://www.timmclean.net/2015/02/25/jwt-alg-none.html,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-c7hr-j4mj-j2w6 in jsonwebtoken:0.4.0,False,False,,2026-03-21 08:52:50.612965+00:00,,False,,GHSA-c7hr-j4mj-j2w6,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-c7hr-j4mj-j2w6; CVE-2015-9235,,Active, +True,0,[],vm2,3.9.17,2026-03-21 08:52:50.630108+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** vm2 Sandbox Escape vulnerability NEWLINE **Related Vulnerability Description:** vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, `Promise` handler sanitization can be bypassed with the `@@species` accessor property allowing attackers to escape the sandbox and run arbitrary code, potentially allowing remote code execution inside the context of vm2 sandbox. Version 3.10.0 contains a patch for the issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/vm2@3.9.17",False,,,False,,0.89498,0.04997,False,/juice-shop/node_modules/vm2/package.json,,True,3.10.0,True,False,,False,,6b89c2767f3e1463b4e4fdc1cfa645a357987377771ad170bf58f06ddfd91fbc,56,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.630172+00:00,,,,,0,[],Upgrade to version: 3.10.0,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-cchq-frgv-rjh5 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2023-37466 NEWLINE - https://gist.github.com/leesh3288/f693061e6523c97274ad5298eb2c74e9 NEWLINE - https://security.netapp.com/advisory/ntap-20230831-0007 NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002 NEWLINE - https://github.com/patriksimek/vm2/commit/d9a1fde8ec5a5a9c9e5a69bf91d703950859d744 NEWLINE - https://github.com/patriksimek/vm2/releases/tag/v3.10.0 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2023-37466 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/commit/d9a1fde8ec5a5a9c9e5a69bf91d703950859d744 NEWLINE - https://github.com/patriksimek/vm2/releases/tag/v3.10.0 NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5 NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002/,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-cchq-frgv-rjh5 in vm2:3.9.17,False,False,,2026-03-21 08:52:50.630119+00:00,,False,,GHSA-cchq-frgv-rjh5,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-cchq-frgv-rjh5; CVE-2023-37466,,Active, +True,0,[],marsdb,0.6.11,2026-03-21 08:52:52.717400+00:00,,,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Command Injection in marsdb NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/marsdb@0.6.11,False,,,False,,,,False,/juice-shop/node_modules/marsdb/package.json,,False,,True,False,,False,,8796fc2d3932e13a71e854cdeb047fcdb4052b454be7db1661f84ead38fe0097,157,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.717496+00:00,,,,,0,[],,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-5mrr-rgp6-x4gr NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/bkimminich/juice-shop/issues/1173 NEWLINE - https://www.npmjs.com/advisories/1122,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-5mrr-rgp6-x4gr in marsdb:0.6.11,False,False,,2026-03-21 08:52:52.717417+00:00,,False,,GHSA-5mrr-rgp6-x4gr,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-5mrr-rgp6-x4gr,,Active, +True,0,[],lodash,2.4.2,2026-03-21 08:52:50.666997+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H,9.1,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Prototype Pollution in lodash NEWLINE **Related Vulnerability Description:** Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/lodash@2.4.2,False,,,False,,0.84908,0.02441,False,/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json,,True,4.17.12,True,False,,False,,3b1d8d89bee38ea43fa9b863ba5448343af024aca9dbd41387eff36cf1658e3b,58,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.667076+00:00,,,,,0,[],Upgrade to version: 4.17.12,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-jf85-cpcp-j695 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/lodash/lodash/pull/4336 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2019-10744 NEWLINE - https://snyk.io/vuln/SNYK-JS-LODASH-450202 NEWLINE - https://access.redhat.com/errata/RHSA-2019:3024 NEWLINE - https://support.f5.com/csp/article/K47105354?utm_source=f5support&utm_medium=RSS NEWLINE - https://www.oracle.com/security-alerts/cpujan2021.html NEWLINE - https://www.oracle.com/security-alerts/cpuoct2020.html NEWLINE - https://support.f5.com/csp/article/K47105354?utm_source=f5support&%3Butm_medium=RSS NEWLINE - https://security.netapp.com/advisory/ntap-20191004-0005 NEWLINE - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2019-10744.yml NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2019-10744 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://access.redhat.com/errata/RHSA-2019:3024 NEWLINE - https://security.netapp.com/advisory/ntap-20191004-0005/ NEWLINE - https://snyk.io/vuln/SNYK-JS-LODASH-450202 NEWLINE - https://support.f5.com/csp/article/K47105354?utm_source=f5support&%3Butm_medium=RSS NEWLINE - https://www.oracle.com/security-alerts/cpujan2021.html NEWLINE - https://www.oracle.com/security-alerts/cpuoct2020.html,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-jf85-cpcp-j695 in lodash:2.4.2,False,False,,2026-03-21 08:52:50.667007+00:00,,False,,GHSA-jf85-cpcp-j695,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-jf85-cpcp-j695; CVE-2019-10744,,Active, +True,0,[],vm2,3.9.17,2026-03-21 08:52:51.800574+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,9.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** vm2 has a Sandbox Escape NEWLINE **Related Vulnerability Description:** vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, `Promise.prototype.then` `Promise.prototype.catch` callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of `localPromise.prototype.then` is sanitized, but `globalPromise.prototype.then` is not sanitized. The return value of async functions is `globalPromise` object. Version 3.10.2 fixes the issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/vm2@3.9.17",False,,,False,,0.08411,0.0003,False,/juice-shop/node_modules/vm2/package.json,,True,3.10.2,True,False,,False,,97dbdc3469a3d24809f591f2b1baf3e1f92928c9e62741e760451f7c0ff0422d,111,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.800662+00:00,,,,,0,[],Upgrade to version: 3.10.2,1,S0,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-99p7-6v5w-7xg8 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-99p7-6v5w-7xg8 NEWLINE - https://github.com/patriksimek/vm2/commit/4b009c2d4b1131c01810c1205e641d614c322a29 NEWLINE - https://github.com/patriksimek/vm2/releases/tag/v3.10.2 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-22709 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-22709 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/patriksimek/vm2/commit/4b009c2d4b1131c01810c1205e641d614c322a29 NEWLINE - https://github.com/patriksimek/vm2/releases/tag/v3.10.2 NEWLINE - https://github.com/patriksimek/vm2/security/advisories/GHSA-99p7-6v5w-7xg8,Admin User (admin),1,,,False,,,,,,,Critical,,,7,7,2026-03-28,2026-03-28,,,,True,,Anchore Grype,5,0,GHSA-99p7-6v5w-7xg8 in vm2:3.9.17,False,False,,2026-03-21 08:52:51.800588+00:00,,False,,GHSA-99p7-6v5w-7xg8,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-99p7-6v5w-7xg8; CVE-2026-22709,,Active, +True,0,[],tar-fs,2.1.3,2026-03-21 08:52:51.886486+00:00,,,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball NEWLINE **Related Vulnerability Description:** tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves using the ignore option on non files/directories. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar-fs@2.1.3",False,,,False,,0.07174,0.00027,False,/juice-shop/node_modules/tar-fs/package.json,,True,2.1.4,True,False,,False,,63114de3e5ad3029495344b7d2ed142e2ef46604b9767b35b9700cf0f13065a8,115,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.886585+00:00,,,,,0,[],Upgrade to version: 2.1.4,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-vj76-c3g6-qr5v NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-59343 NEWLINE - https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09 NEWLINE - https://lists.debian.org/debian-lts-announce/2025/09/msg00028.html NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-59343 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09 NEWLINE - https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v NEWLINE - https://lists.debian.org/debian-lts-announce/2025/09/msg00028.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-vj76-c3g6-qr5v in tar-fs:2.1.3,False,False,,2026-03-21 08:52:51.886503+00:00,,False,,GHSA-vj76-c3g6-qr5v,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-vj76-c3g6-qr5v; CVE-2025-59343,,Active, +True,0,[],,,2026-03-21 08:52:46.353765+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/data/static/codefixes/unionSqlInjectionChallenge_3.ts,,,,True,False,,False,,e4cf67f59b27847f530768137bbd364d0adffc5f43d4e2faeb22d829b39d7ab7,4,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.353906+00:00,10,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.353782+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],qs,6.13.0,2026-03-21 08:52:51.233841+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion NEWLINE **Related Vulnerability Description:** Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1. NEWLINE NEWLINE NEWLINE Summary NEWLINE NEWLINE The arrayLimit┬аoption in qs did not enforce limits for bracket notation (a[]=1&a[]=2), only for indexed notation (a[0]=1). This is a consistency bug; arrayLimit┬аshould apply uniformly across all array notations. NEWLINE NEWLINE Note:┬аThe default parameterLimit┬аof 1000 effectively mitigates the DoS scenario originally described. With default options, bracket notation cannot produce arrays larger than parameterLimit┬аregardless of arrayLimit, because each a[]=valueconsumes one parameter slot. The severity has been reduced accordingly. NEWLINE NEWLINE Details NEWLINE NEWLINE The arrayLimit┬аoption only checked limits for indexed notation (a[0]=1&a[1]=2) but did not enforce it for bracket notation (a[]=1&a[]=2). NEWLINE NEWLINE Vulnerable code┬а(lib/parse.js:159-162): NEWLINE NEWLINE if (root === '[]' && options.parseArrays) { NEWLINE obj = utils.combine([], leaf); // No arrayLimit check NEWLINE } NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE Working code┬а(lib/parse.js:175): NEWLINE NEWLINE else if (index <= options.arrayLimit) { // Limit checked here NEWLINE obj = []; NEWLINE obj[index] = leaf; NEWLINE } NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE The bracket notation handler at line 159 uses utils.combine([], leaf)┬аwithout validating against options.arrayLimit, while indexed notation at line 175 checks index <= options.arrayLimit┬аbefore creating arrays. NEWLINE NEWLINE NEWLINE NEWLINE PoC NEWLINE NEWLINE const qs = require('qs'); NEWLINE const result = qs.parse('a[]=1&a[]=2&a[]=3&a[]=4&a[]=5&a[]=6', { arrayLimit: 5 }); NEWLINE console.log(result.a.length); // Output: 6 (should be max 5) NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE NEWLINE Note on parameterLimit interaction:┬аThe original advisory's ""DoS demonstration"" claimed a length of 10,000, but parameterLimit┬а(default: 1000) caps parsing to 1,000 parameters. With default options, the actual output is 1,000, not 10,000. NEWLINE NEWLINE Impact NEWLINE NEWLINE Consistency bug in arrayLimit┬аenforcement. With default parameterLimit, the practical DoS risk is negligible since parameterLimit┬аalready caps the total number of parsed parameters (and thus array elements from bracket notation). The risk increases only when parameterLimit┬аis explicitly set to a very high value. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/qs@6.13.0",False,,,False,,0.24566,0.00085,False,/juice-shop/node_modules/qs/package.json,,True,6.14.1,True,False,,False,,e4804749d3e23d298d9e155f7ae25e3b883d6ce4b8cf80b43805680ad8c60784,85,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.233946+00:00,,,,,0,[],Upgrade to version: 6.14.1,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-6rw7-vpxm-498p NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-15284 NEWLINE - https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-15284 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9 NEWLINE - https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-6rw7-vpxm-498p in qs:6.13.0,False,False,,2026-03-21 08:52:51.233857+00:00,,False,,GHSA-6rw7-vpxm-498p,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-6rw7-vpxm-498p; CVE-2025-15284,,Active, +True,0,[],multer,1.4.5-lts.2,2026-03-21 08:52:51.261468+00:00,,,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Multer vulnerable to Denial of Service via unhandled exception NEWLINE **Related Vulnerability Description:** Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to `2.0.1` to receive a patch. No known workarounds are available. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/multer@1.4.5-lts.2",False,,,False,,0.23694,0.00081,False,/juice-shop/node_modules/multer/package.json,,True,2.0.1,True,False,,False,,1e5ac0766778aa0d3a4699d7268057da55a62c2387e15f1fc058232ed67b49d9,86,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.261575+00:00,,,,,0,[],Upgrade to version: 2.0.1,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-g5hg-p3ph-g8qg NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-g5hg-p3ph-g8qg NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-48997 NEWLINE - https://github.com/expressjs/multer/issues/1233 NEWLINE - https://github.com/expressjs/multer/pull/1256 NEWLINE - https://github.com/expressjs/multer/commit/35a3272b611945155e046dd5cef11088587635e9 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-48997 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/commit/35a3272b611945155e046dd5cef11088587635e9 NEWLINE - https://github.com/expressjs/multer/issues/1233 NEWLINE - https://github.com/expressjs/multer/pull/1256 NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-g5hg-p3ph-g8qg,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-g5hg-p3ph-g8qg in multer:1.4.5-lts.2,False,False,,2026-03-21 08:52:51.261483+00:00,,False,,GHSA-g5hg-p3ph-g8qg,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-g5hg-p3ph-g8qg; CVE-2025-48997,,Active, +True,0,[],libc6,2.36-9+deb12u10,2026-03-21 08:52:52.390911+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,8.4,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments. NEWLINE **Related Vulnerability Description:** Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. NEWLINE NEWLINE Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. NEWLINE NEWLINE Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&upstream=glibc",False,,,False,,0.00637,8e-05,False,/var/lib/dpkg/status.d/libc6,,False,,True,False,,False,,e48cdfc118a8e8bc5993e7a4e150bb3a81bda792c3d86c9feb01866b460f8ae8,141,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.390995+00:00,,,,,0,[],,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2026-0861 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-0861 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://sourceware.org/bugzilla/show_bug.cgi?id=33796 NEWLINE - https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001 NEWLINE - http://www.openwall.com/lists/oss-security/2026/01/16/5,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2026-0861 in libc6:2.36-9+deb12u10,False,False,,2026-03-21 08:52:52.390927+00:00,,False,,CVE-2026-0861,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2026-0861,,Active, +True,0,[],libssl3,3.0.17-1~deb12u2,2026-03-21 08:52:51.842883+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. NEWLINE **Related Vulnerability Description:** Issue summary: An application trying to decrypt CMS messages encrypted using NEWLINE password based encryption can trigger an out-of-bounds read and write. NEWLINE NEWLINE Impact summary: This out-of-bounds read may trigger a crash which leads to NEWLINE Denial of Service for an application. The out-of-bounds write can cause NEWLINE a memory corruption which can have various consequences including NEWLINE a Denial of Service or Execution of attacker-supplied code. NEWLINE NEWLINE Although the consequences of a successful exploit of this vulnerability NEWLINE could be severe, the probability that the attacker would be able to NEWLINE perform it is low. Besides, password based (PWRI) encryption support in CMS NEWLINE messages is very rarely used. For that reason the issue was assessed as NEWLINE Moderate severity according to our Security Policy. NEWLINE NEWLINE The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this NEWLINE issue, as the CMS implementation is outside the OpenSSL FIPS module NEWLINE boundary. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl",False,,,False,,0.08788,0.00031,False,/var/lib/dpkg/status.d/libssl3,,True,3.0.17-1~deb12u3,True,False,,False,,f4cb2fddbd9d2fc604794fd241d7dbb67e76d6847c860cb3b2c0c71a8a494918,113,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.842957+00:00,,,,,0,[],Upgrade to version: 3.0.17-1~deb12u3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-9230 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-9230 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45 NEWLINE - https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280 NEWLINE - https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def NEWLINE - https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd NEWLINE - https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482 NEWLINE - https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3 NEWLINE - https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba NEWLINE - https://openssl-library.org/news/secadv/20250930.txt NEWLINE - http://www.openwall.com/lists/oss-security/2025/09/30/5 NEWLINE - https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-9230 in libssl3:3.0.17-1~deb12u2,False,False,,2026-03-21 08:52:51.842897+00:00,,False,,CVE-2025-9230,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-9230,,Active, +True,0,[],jsonwebtoken,0.1.0,2026-03-21 08:52:51.330690+00:00,CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N,8.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** jsonwebtoken unrestricted key type could lead to legacy keys usage NEWLINE **Related Vulnerability Description:** Versions `<=8.5.1` of `jsonwebtoken` library could be misconfigured so that legacy, insecure key types are used for signature verification. For example, DSA keys could be used with the RS256 algorithm. You are affected if you are using an algorithm and a key type other than a combination listed in the GitHub Security Advisory as unaffected. This issue has been fixed, please update to version 9.0.0. This version validates for asymmetric key type and algorithm combinations. Please refer to the above mentioned algorithm / key type combinations for the valid secure configuration. After updating to version 9.0.0, if you still intend to continue with signing or verifying tokens using invalid key type/algorithm value combinations, youтАЩll need to set the `allowInvalidAsymmetricKeyTypes` option to `true` in the `sign()` and/or `verify()` functions. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jsonwebtoken@0.1.0",False,,,False,,0.21933,0.00072,False,/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json,,True,9.0.0,True,False,,False,,f4b13e22a9423c9079edd385f97d089591ca74e670390e8050c1269fbbf58164,89,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.330774+00:00,,,,,0,[],Upgrade to version: 9.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8cf7-32gw-wr33 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-8cf7-32gw-wr33 NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2022-23539 NEWLINE - https://security.netapp.com/advisory/ntap-20240621-0007 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2022-23539 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 NEWLINE - https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-8cf7-32gw-wr33 NEWLINE - https://security.netapp.com/advisory/ntap-20240621-0007/,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8cf7-32gw-wr33 in jsonwebtoken:0.1.0,False,False,,2026-03-21 08:52:51.330704+00:00,,False,,GHSA-8cf7-32gw-wr33,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8cf7-32gw-wr33; CVE-2022-23539,,Active, +True,0,[],jsonwebtoken,0.4.0,2026-03-21 08:52:51.352608+00:00,CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N,8.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** jsonwebtoken unrestricted key type could lead to legacy keys usage NEWLINE **Related Vulnerability Description:** Versions `<=8.5.1` of `jsonwebtoken` library could be misconfigured so that legacy, insecure key types are used for signature verification. For example, DSA keys could be used with the RS256 algorithm. You are affected if you are using an algorithm and a key type other than a combination listed in the GitHub Security Advisory as unaffected. This issue has been fixed, please update to version 9.0.0. This version validates for asymmetric key type and algorithm combinations. Please refer to the above mentioned algorithm / key type combinations for the valid secure configuration. After updating to version 9.0.0, if you still intend to continue with signing or verifying tokens using invalid key type/algorithm value combinations, youтАЩll need to set the `allowInvalidAsymmetricKeyTypes` option to `true` in the `sign()` and/or `verify()` functions. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jsonwebtoken@0.4.0",False,,,False,,0.21933,0.00072,False,/juice-shop/node_modules/jsonwebtoken/package.json,,True,9.0.0,True,False,,False,,3bd54fac91d21dd767b765f463851f70d3fc5f8bf558ba67e2c406532a9d079a,90,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.352693+00:00,,,,,0,[],Upgrade to version: 9.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8cf7-32gw-wr33 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-8cf7-32gw-wr33 NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2022-23539 NEWLINE - https://security.netapp.com/advisory/ntap-20240621-0007 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2022-23539 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 NEWLINE - https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-8cf7-32gw-wr33 NEWLINE - https://security.netapp.com/advisory/ntap-20240621-0007/,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8cf7-32gw-wr33 in jsonwebtoken:0.4.0,False,False,,2026-03-21 08:52:51.352623+00:00,,False,,GHSA-8cf7-32gw-wr33,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8cf7-32gw-wr33; CVE-2022-23539,,Active, +True,0,[],validator,13.15.15,2026-03-21 08:52:51.375159+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements NEWLINE **Related Vulnerability Description:** Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequence which lead to improper string length calculation. This can lead to an application using isLength for input validation accepting strings significantly longer than intended, resulting in issues like data truncation in databases, buffer overflows in other system components, or denial-of-service. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/validator@13.15.15",False,,,False,,0.2231,0.00074,False,/juice-shop/node_modules/validator/package.json,,True,13.15.22,True,False,,False,,f6cff0eea0533092e89194bd4ebc756ef174f5ec7308631511a4879168b0ebb8,91,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.375251+00:00,,,,,0,[],Upgrade to version: 13.15.22,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-vghf-hv5q-vc2g NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-12758 NEWLINE - https://github.com/validatorjs/validator.js/pull/2616 NEWLINE - https://gist.github.com/koral--/ad31208b25b9e3d1e2e35f1d4d72572e NEWLINE - https://security.snyk.io/vuln/SNYK-JS-VALIDATOR-13653476 NEWLINE - https://github.com/validatorjs/validator.js/commit/d457ecaf55b0f3d8bd379d82757425d0d13dd382 NEWLINE - http://seclists.org/fulldisclosure/2026/Jan/27 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-12758 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://gist.github.com/koral--/ad31208b25b9e3d1e2e35f1d4d72572e NEWLINE - https://github.com/validatorjs/validator.js/pull/2616 NEWLINE - https://security.snyk.io/vuln/SNYK-JS-VALIDATOR-13653476 NEWLINE - http://seclists.org/fulldisclosure/2026/Jan/27,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-vghf-hv5q-vc2g in validator:13.15.15,False,False,,2026-03-21 08:52:51.375176+00:00,,False,,GHSA-vghf-hv5q-vc2g,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-vghf-hv5q-vc2g; CVE-2025-12758,,Active, +True,0,[],libssl3,3.0.17-1~deb12u2,2026-03-21 08:52:51.396898+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. NEWLINE **Related Vulnerability Description:** Issue summary: A type confusion vulnerability exists in the TimeStamp Response NEWLINE verification code where an ASN1_TYPE union member is accessed without first NEWLINE validating the type, causing an invalid or NULL pointer dereference when NEWLINE processing a malformed TimeStamp Response file. NEWLINE NEWLINE Impact summary: An application calling TS_RESP_verify_response() with a NEWLINE malformed TimeStamp Response can be caused to dereference an invalid or NEWLINE NULL pointer when reading, resulting in a Denial of Service. NEWLINE NEWLINE The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() NEWLINE access the signing cert attribute value without validating its type. NEWLINE When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory NEWLINE through the ASN1_TYPE union, causing a crash. NEWLINE NEWLINE Exploiting this vulnerability requires an attacker to provide a malformed NEWLINE TimeStamp Response to an application that verifies timestamp responses. The NEWLINE TimeStamp protocol (RFC 3161) is not widely used and the impact of the NEWLINE exploit is just a Denial of Service. For these reasons the issue was NEWLINE assessed as Low severity. NEWLINE NEWLINE The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, NEWLINE as the TimeStamp Response implementation is outside the OpenSSL FIPS module NEWLINE boundary. NEWLINE NEWLINE OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. NEWLINE NEWLINE OpenSSL 1.0.2 is not affected by this issue. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl",False,,,False,,0.21282,0.0007,False,/var/lib/dpkg/status.d/libssl3,,True,3.0.18-1~deb12u2,True,False,,False,,06183c82da8b14515aef91f7e11c47d9da7f6be33a5f50cd26019fde20217a7e,92,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.396975+00:00,,,,,0,[],Upgrade to version: 3.0.18-1~deb12u2,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-69420 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-69420 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9 NEWLINE - https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a NEWLINE - https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e NEWLINE - https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b NEWLINE - https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085 NEWLINE - https://openssl-library.org/news/secadv/20260127.txt,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-69420 in libssl3:3.0.17-1~deb12u2,False,False,,2026-03-21 08:52:51.396912+00:00,,False,,CVE-2025-69420,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-69420,,Active, +True,0,[],node,22.18.0,2026-03-21 08:52:51.413746+00:00,CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** nvd:cpe NEWLINE **Vulnerability Description:** A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: NEWLINE ``` NEWLINE server.on('secureConnection', socket => { NEWLINE socket.on('error', err => { NEWLINE console.log(err) NEWLINE }) NEWLINE }) NEWLINE ``` NEWLINE **Matcher:** stock-matcher NEWLINE **Package URL:** pkg:generic/node@22.18.0",False,,,False,,0.21022,0.00069,False,/nodejs/bin/node,,True,25.3.0,True,False,,False,,a81fbef2f8f05dff6e570431d1033551b15afa26702c35df7371358fa219f4aa,93,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.413825+00:00,,,,,0,[],Upgrade to version: NEWLINE - 20.20.0 NEWLINE - 22.22.0 NEWLINE - 24.13.0 NEWLINE - 25.3.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-59465 NEWLINE **Vulnerability URL:** https://nodejs.org/en/blog/vulnerability/december-2025-security-releases,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-59465 in node:22.18.0,False,False,,2026-03-21 08:52:51.413760+00:00,,False,,CVE-2025-59465,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-59465,,Active, +True,0,[],libssl3,3.0.17-1~deb12u2,2026-03-21 08:52:51.431722+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. NEWLINE **Related Vulnerability Description:** Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer NEWLINE dereference in the PKCS12_item_decrypt_d2i_ex() function. NEWLINE NEWLINE Impact summary: A NULL pointer dereference can trigger a crash which leads to NEWLINE Denial of Service for an application processing PKCS#12 files. NEWLINE NEWLINE The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct NEWLINE parameter is NULL before dereferencing it. When called from NEWLINE PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can NEWLINE be NULL, causing a crash. The vulnerability is limited to Denial of Service NEWLINE and cannot be escalated to achieve code execution or memory disclosure. NEWLINE NEWLINE Exploiting this issue requires an attacker to provide a malformed PKCS#12 file NEWLINE to an application that processes it. For that reason the issue was assessed as NEWLINE Low severity according to our Security Policy. NEWLINE NEWLINE The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, NEWLINE as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. NEWLINE NEWLINE OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl",False,,,False,,0.18453,0.00059,False,/var/lib/dpkg/status.d/libssl3,,True,3.0.18-1~deb12u2,True,False,,False,,fd24d80ca2cdc880b879c6356ba728d4b619cf24aa0535b91df1506a7cf76b95,94,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.431807+00:00,,,,,0,[],Upgrade to version: 3.0.18-1~deb12u2,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-69421 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-69421 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b NEWLINE - https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7 NEWLINE - https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd NEWLINE - https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3 NEWLINE - https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c NEWLINE - https://openssl-library.org/news/secadv/20260127.txt,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-69421 in libssl3:3.0.17-1~deb12u2,False,False,,2026-03-21 08:52:51.431736+00:00,,False,,CVE-2025-69421,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-69421,,Active, +True,0,[],node,22.18.0,2026-03-21 08:52:51.824552+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** nvd:cpe NEWLINE **Vulnerability Description:** A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped. NEWLINE **Matcher:** stock-matcher NEWLINE **Package URL:** pkg:generic/node@22.18.0",False,,,False,,0.1027,0.00035,False,/nodejs/bin/node,,True,25.3.0,True,False,,False,,7a06c71e47da443366b60e34c12aa69cf93d28bc85b50d41eab254267b9e01a6,112,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.824633+00:00,,,,,0,[],Upgrade to version: NEWLINE - 20.20.0 NEWLINE - 22.22.0 NEWLINE - 24.13.0 NEWLINE - 25.3.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-21637 NEWLINE **Vulnerability URL:** https://nodejs.org/en/blog/vulnerability/december-2025-security-releases,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2026-21637 in node:22.18.0,False,False,,2026-03-21 08:52:51.824565+00:00,,False,,CVE-2026-21637,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2026-21637,,Active, +True,0,[],libssl3,3.0.17-1~deb12u2,2026-03-21 08:52:51.486228+00:00,CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N,7.4,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. NEWLINE **Related Vulnerability Description:** Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously NEWLINE crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing NEWLINE non-ASCII BMP code point can trigger a one byte write before the allocated NEWLINE buffer. NEWLINE NEWLINE Impact summary: The out-of-bounds write can cause a memory corruption NEWLINE which can have various consequences including a Denial of Service. NEWLINE NEWLINE The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 NEWLINE BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, NEWLINE the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 NEWLINE source byte count as the destination buffer capacity to UTF8_putc(). For BMP NEWLINE code points above U+07FF, UTF-8 requires three bytes, but the forwarded NEWLINE capacity can be just two bytes. UTF8_putc() then returns -1, and this negative NEWLINE value is added to the output length without validation, causing the NEWLINE length to become negative. The subsequent trailing NUL byte is then written NEWLINE at a negative offset, causing write outside of heap allocated buffer. NEWLINE NEWLINE The vulnerability is reachable via the public PKCS12_get_friendlyname() API NEWLINE when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a NEWLINE different code path that avoids this issue, PKCS12_get_friendlyname() directly NEWLINE invokes the vulnerable function. Exploitation requires an attacker to provide NEWLINE a malicious PKCS#12 file to be parsed by the application and the attacker NEWLINE can just trigger a one zero byte write before the allocated buffer. NEWLINE For that reason the issue was assessed as Low severity according to our NEWLINE Security Policy. NEWLINE NEWLINE The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, NEWLINE as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. NEWLINE NEWLINE OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. NEWLINE NEWLINE OpenSSL 1.0.2 is not affected by this issue. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl",False,,,False,,0.17424,0.00056,False,/var/lib/dpkg/status.d/libssl3,,True,3.0.18-1~deb12u2,True,False,,False,,992f43a4c7a40e6c35027fcefdcdc43c290be08e6dd5d565532f9116d5d2f7a8,97,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.486310+00:00,,,,,0,[],Upgrade to version: 3.0.18-1~deb12u2,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-69419 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-69419 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296 NEWLINE - https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb NEWLINE - https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2 NEWLINE - https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015 NEWLINE - https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535 NEWLINE - https://openssl-library.org/news/secadv/20260127.txt,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-69419 in libssl3:3.0.17-1~deb12u2,False,False,,2026-03-21 08:52:51.486240+00:00,,False,,CVE-2025-69419,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-69419,,Active, +True,0,[],jws,0.2.6,2026-03-21 08:52:52.358067+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** auth0/node-jws Improperly Verifies HMAC Signature NEWLINE **Related Vulnerability Description:** auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jws@0.2.6",False,,,False,,0.009,9e-05,False,/juice-shop/node_modules/jws/package.json,,True,3.2.3,True,False,,False,,dfe2f28ff7fb299086ffa9541269f2ec2232e1d78b0c48df509ef2efe1c15665,139,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.358136+00:00,,,,,0,[],Upgrade to version: 3.2.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-869p-cjfg-cm3x NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x NEWLINE - https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e NEWLINE - https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6 NEWLINE - https://github.com/auth0/node-jws/releases/tag/v3.2.3 NEWLINE - https://github.com/auth0/node-jws/releases/tag/v4.0.1 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-65945 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-65945 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e NEWLINE - https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-869p-cjfg-cm3x in jws:0.2.6,False,False,,2026-03-21 08:52:52.358079+00:00,,False,,GHSA-869p-cjfg-cm3x,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-869p-cjfg-cm3x; CVE-2025-65945,,Active, +True,0,[],libc6,2.36-9+deb12u10,2026-03-21 08:52:51.526326+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&upstream=glibc",False,,,False,,0.16562,0.00053,False,/var/lib/dpkg/status.d/libc6,,False,,True,False,,False,,2194a78d0d10eb7273bc856d9d1f2346a420e49e32b98c182ebe9869a0244ee8,99,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.526403+00:00,,,,,0,[],,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-15281 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-15281 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://sourceware.org/bugzilla/show_bug.cgi?id=33814 NEWLINE - http://www.openwall.com/lists/oss-security/2026/01/20/3,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-15281 in libc6:2.36-9+deb12u10,False,False,,2026-03-21 08:52:51.526339+00:00,,False,,CVE-2025-15281,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-15281,,Active, +True,0,[],multer,1.4.5-lts.2,2026-03-21 08:52:52.308179+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Multer vulnerable to Denial of Service from maliciously crafted requests NEWLINE **Related Vulnerability Description:** Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.0 to receive a patch. No known workarounds are available. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/multer@1.4.5-lts.2",False,,,False,,0.01389,0.00011,False,/juice-shop/node_modules/multer/package.json,,True,2.0.0,True,False,,False,,e361ef84b7e55dd3b2c90b9d8fb942526c15c129d1f901c7d3c7bc176d1f7764,136,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.308243+00:00,,,,,0,[],Upgrade to version: 2.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-4pg4-qvpc-4q3h NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-4pg4-qvpc-4q3h NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-47944 NEWLINE - https://github.com/expressjs/multer/issues/1176 NEWLINE - https://github.com/expressjs/multer/commit/2c8505f207d923dd8de13a9f93a4563e59933665 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-47944 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/commit/2c8505f207d923dd8de13a9f93a4563e59933665 NEWLINE - https://github.com/expressjs/multer/issues/1176 NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-4pg4-qvpc-4q3h,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-4pg4-qvpc-4q3h in multer:1.4.5-lts.2,False,False,,2026-03-21 08:52:52.308191+00:00,,False,,GHSA-4pg4-qvpc-4q3h,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-4pg4-qvpc-4q3h; CVE-2025-47944,,Active, +True,0,[],multer,1.4.5-lts.2,2026-03-21 08:52:51.566685+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Multer vulnerable to Denial of Service via memory leaks from unclosed streams NEWLINE **Related Vulnerability Description:** Multer is a node.js middleware for handling `multipart/form-data`. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request stream emits an error, the internal `busboy` stream is not closed, violating Node.js stream safety guidance. This leads to unclosed streams accumulating over time, consuming memory and file descriptors. Under sustained or repeated failure conditions, this can result in denial of service, requiring manual server restarts to recover. All users of Multer handling file uploads are potentially impacted. Users should upgrade to 2.0.0 to receive a patch. No known workarounds are available. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/multer@1.4.5-lts.2",False,,,False,,0.14903,0.00048,False,/juice-shop/node_modules/multer/package.json,,True,2.0.0,True,False,,False,,84a56017a0139fedea9c251e5bade937c762aedd44bf54aa2ccba8a4353e44c6,101,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.566774+00:00,,,,,0,[],Upgrade to version: 2.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-44fp-w29j-9vj5 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-44fp-w29j-9vj5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-47935 NEWLINE - https://github.com/expressjs/multer/pull/1120 NEWLINE - https://github.com/expressjs/multer/commit/2c8505f207d923dd8de13a9f93a4563e59933665 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-47935 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/commit/2c8505f207d923dd8de13a9f93a4563e59933665 NEWLINE - https://github.com/expressjs/multer/pull/1120 NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-44fp-w29j-9vj5,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-44fp-w29j-9vj5 in multer:1.4.5-lts.2,False,False,,2026-03-21 08:52:51.566699+00:00,,False,,GHSA-44fp-w29j-9vj5,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-44fp-w29j-9vj5; CVE-2025-47935,,Active, +True,0,[],minimatch,3.0.5,2026-03-21 08:52:51.592246+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern NEWLINE **Related Vulnerability Description:** minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/minimatch@3.0.5",False,,,False,,0.1193,0.0004,False,/juice-shop/node_modules/replace/node_modules/minimatch/package.json,,True,3.1.3,True,False,,False,,feddd4ea027a972a1214b94ca3a85148ce2a0ae9e701173828dae32ac68affa0,102,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.592341+00:00,,,,,0,[],Upgrade to version: 3.1.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3ppc-4f35-3m26 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3ppc-4f35-3m26 in minimatch:3.0.5,False,False,,2026-03-21 08:52:51.592261+00:00,,False,,GHSA-3ppc-4f35-3m26,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3ppc-4f35-3m26; CVE-2026-26996,,Active, +True,0,[],minimatch,3.0.8,2026-03-21 08:52:51.617105+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern NEWLINE **Related Vulnerability Description:** minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/minimatch@3.0.8",False,,,False,,0.1193,0.0004,False,/juice-shop/node_modules/grunt/node_modules/minimatch/package.json,,True,3.1.3,True,False,,False,,bf1f1ff25c433948898f6b15c4b7d984f3625c269937b465347e31e1696ab3d5,103,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.617197+00:00,,,,,0,[],Upgrade to version: 3.1.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3ppc-4f35-3m26 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3ppc-4f35-3m26 in minimatch:3.0.8,False,False,,2026-03-21 08:52:51.617119+00:00,,False,,GHSA-3ppc-4f35-3m26,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3ppc-4f35-3m26; CVE-2026-26996,,Active, +True,0,[],minimatch,3.1.2,2026-03-21 08:52:51.640928+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern NEWLINE **Related Vulnerability Description:** minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/minimatch@3.1.2",False,,,False,,0.1193,0.0004,False,/juice-shop/node_modules/ignore-walk/node_modules/minimatch/package.json,,True,3.1.3,True,False,,False,,f417dd8546dde8e47ebaa2a2dcaee4307bf8dfc9e5b76e7544d40a21eeab5fde,104,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.641015+00:00,,,,,0,[],Upgrade to version: 3.1.3,9,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3ppc-4f35-3m26 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3ppc-4f35-3m26 in minimatch:3.1.2,False,False,,2026-03-21 08:52:51.640942+00:00,,False,,GHSA-3ppc-4f35-3m26,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3ppc-4f35-3m26; CVE-2026-26996,,Active, +True,0,[],minimatch,5.1.6,2026-03-21 08:52:51.663648+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern NEWLINE **Related Vulnerability Description:** minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/minimatch@5.1.6",False,,,False,,0.1193,0.0004,False,/juice-shop/node_modules/filehound/node_modules/minimatch/package.json,,True,5.1.7,True,False,,False,,1d27ac5578988fc6cd58b3db85dc87b6fb1b91928419357c3a005c9b10971f4e,105,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.663755+00:00,,,,,0,[],Upgrade to version: 5.1.7,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3ppc-4f35-3m26 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3ppc-4f35-3m26 in minimatch:5.1.6,False,False,,2026-03-21 08:52:51.663666+00:00,,False,,GHSA-3ppc-4f35-3m26,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3ppc-4f35-3m26; CVE-2026-26996,,Active, +True,0,[],minimatch,9.0.5,2026-03-21 08:52:51.684157+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern NEWLINE **Related Vulnerability Description:** minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/minimatch@9.0.5",False,,,False,,0.1193,0.0004,False,/juice-shop/node_modules/glob/node_modules/minimatch/package.json,,True,9.0.6,True,False,,False,,46d561799313e6ea0c8b5c763e5a2a53b0dd62eb616a86ea0eb7e806ed07cc5c,106,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.684226+00:00,,,,,0,[],Upgrade to version: 9.0.6,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3ppc-4f35-3m26 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26 NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26996 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 NEWLINE - https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3ppc-4f35-3m26 in minimatch:9.0.5,False,False,,2026-03-21 08:52:51.684167+00:00,,False,,GHSA-3ppc-4f35-3m26,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3ppc-4f35-3m26; CVE-2026-26996,,Active, +True,0,[],glob,10.4.5,2026-03-21 08:52:51.776702+00:00,CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** glob CLI: Command injection via -c/--cmd executes matches with shell:true NEWLINE **Related Vulnerability Description:** Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/glob@10.4.5",False,,,False,,0.11378,0.00038,False,/juice-shop/node_modules/glob/package.json,,True,10.5.0,True,False,,False,,9ca97bed7efd0c469177f7e5834a6aa2946463393c92366984d8f031962ca33b,110,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.776795+00:00,,,,,0,[],Upgrade to version: 10.5.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-5j98-mcp5-4vw2 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2 NEWLINE - https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-64756 NEWLINE - https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-64756 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f NEWLINE - https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146 NEWLINE - https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-5j98-mcp5-4vw2 in glob:10.4.5,False,False,,2026-03-21 08:52:51.776717+00:00,,False,,GHSA-5j98-mcp5-4vw2,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-5j98-mcp5-4vw2; CVE-2025-64756,,Active, +True,0,[],multer,1.4.5-lts.2,2026-03-21 08:52:52.289460+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Multer vulnerable to Denial of Service via unhandled exception from malformed request NEWLINE **Related Vulnerability Description:** Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/multer@1.4.5-lts.2",False,,,False,,0.01449,0.00012,False,/juice-shop/node_modules/multer/package.json,,True,2.0.2,True,False,,False,,aeeed161b43b47649735bd042aa9e630e5f28c400c888417fc0720be9c2e7a7e,135,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.289561+00:00,,,,,0,[],Upgrade to version: 2.0.2,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-fjgf-rc76-4x9p NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-fjgf-rc76-4x9p NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-7338 NEWLINE - https://github.com/expressjs/multer/commit/adfeaf669f0e7fe953eab191a762164a452d143b NEWLINE - https://cna.openjsf.org/security-advisories.html NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-7338 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://cna.openjsf.org/security-advisories.html NEWLINE - https://github.com/expressjs/multer/commit/adfeaf669f0e7fe953eab191a762164a452d143b NEWLINE - https://github.com/expressjs/multer/security/advisories/GHSA-fjgf-rc76-4x9p,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-fjgf-rc76-4x9p in multer:1.4.5-lts.2,False,False,,2026-03-21 08:52:52.289477+00:00,,False,,GHSA-fjgf-rc76-4x9p,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-fjgf-rc76-4x9p; CVE-2025-7338,,Active, +True,0,[],tar,7.4.3,2026-03-21 08:52:52.267200+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N,8.2,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@7.4.3",False,,,False,,0.01804,0.00012,False,/juice-shop/node_modules/tar/package.json,,True,7.5.7,True,False,,False,,5f3e4d28569b979cdb52f1f75996dd7caf79fc90c381d064837ea289e72c30d0,134,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.267267+00:00,,,,,0,[],Upgrade to version: 7.5.7,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-34x7-hfp2-rc4v NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-34x7-hfp2-rc4v in tar:7.4.3,False,False,,2026-03-21 08:52:52.267212+00:00,,False,,GHSA-34x7-hfp2-rc4v,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-34x7-hfp2-rc4v; CVE-2026-24842,,Active, +True,0,[],tar,6.2.1,2026-03-21 08:52:52.246302+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N,8.2,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@6.2.1",False,,,False,,0.01804,0.00012,False,/juice-shop/node_modules/sqlite3/node_modules/tar/package.json,,True,7.5.7,True,False,,False,,8b5ae5ab055bc6565ff4914f00116bb4600a78e77846f6ec062a884c2051fda1,133,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.246371+00:00,,,,,0,[],Upgrade to version: 7.5.7,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-34x7-hfp2-rc4v NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-34x7-hfp2-rc4v in tar:6.2.1,False,False,,2026-03-21 08:52:52.246314+00:00,,False,,GHSA-34x7-hfp2-rc4v,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-34x7-hfp2-rc4v; CVE-2026-24842,,Active, +True,0,[],tar,4.4.19,2026-03-21 08:52:52.224500+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N,8.2,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@4.4.19",False,,,False,,0.01804,0.00012,False,/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json,,True,7.5.7,True,False,,False,,5f048978793933567b9f47c2a1cda291cffc0fc85e54ca1dafe8f4c847729c66,132,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.224575+00:00,,,,,0,[],Upgrade to version: 7.5.7,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-34x7-hfp2-rc4v NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-24842 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-34x7-hfp2-rc4v in tar:4.4.19,False,False,,2026-03-21 08:52:52.224515+00:00,,False,,GHSA-34x7-hfp2-rc4v,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-34x7-hfp2-rc4v; CVE-2026-24842,,Active, +True,0,[],tar,7.4.3,2026-03-21 08:52:52.200661+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N,7.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction NEWLINE **Related Vulnerability Description:** node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@7.4.3",False,,,False,,0.02088,0.00013,False,/juice-shop/node_modules/tar/package.json,,True,7.5.8,True,False,,False,,a81b38af54627aafa053e4918b0505b7e3a152c1f389094c928913ca5c1cbaf4,131,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.200764+00:00,,,,,0,[],Upgrade to version: 7.5.8,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-83g3-92jg-28cx NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-83g3-92jg-28cx in tar:7.4.3,False,False,,2026-03-21 08:52:52.200680+00:00,,False,,GHSA-83g3-92jg-28cx,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-83g3-92jg-28cx; CVE-2026-26960,,Active, +True,0,[],tar,6.2.1,2026-03-21 08:52:52.181408+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N,7.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction NEWLINE **Related Vulnerability Description:** node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@6.2.1",False,,,False,,0.02088,0.00013,False,/juice-shop/node_modules/sqlite3/node_modules/tar/package.json,,True,7.5.8,True,False,,False,,5b009b1c09dc40fb58075fee7a6ee82594a2ded6cbde39fff38ebb43a9ebe031,130,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.181507+00:00,,,,,0,[],Upgrade to version: 7.5.8,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-83g3-92jg-28cx NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-83g3-92jg-28cx in tar:6.2.1,False,False,,2026-03-21 08:52:52.181424+00:00,,False,,GHSA-83g3-92jg-28cx,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-83g3-92jg-28cx; CVE-2026-26960,,Active, +True,0,[],jws,0.2.6,2026-03-21 08:52:52.736887+00:00,CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N,8.7,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Forgeable Public/Private Tokens in jws NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/jws@0.2.6,False,,,False,,,,False,/juice-shop/node_modules/jws/package.json,,True,3.0.0,True,False,,False,,65de452ff5969c58a4dbdae5d7b9d35bd7ea1e4a29b62c6e76049be787e9c04d,158,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.736998+00:00,,,,,0,[],Upgrade to version: 3.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-gjcw-v447-2w7q NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/brianloveswords/node-jws/commit/585d0e1e97b6747c10cf5b7689ccc5618a89b299#diff-4ac32a78649ca5bdd8e0ba38b7006a1e NEWLINE - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ NEWLINE - https://www.npmjs.com/advisories/88 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2016-1000223 NEWLINE - https://snyk.io/vuln/npm:jws:20160726 NEWLINE **Related Vulnerability Datasource:** nvd,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-gjcw-v447-2w7q in jws:0.2.6,False,False,,2026-03-21 08:52:52.736904+00:00,,False,,GHSA-gjcw-v447-2w7q,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-gjcw-v447-2w7q; CVE-2016-1000223,,Active, +True,0,[],libc6,2.36-9+deb12u10,2026-03-21 08:52:52.057549+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H,7.8,,,0,2026-03-21,,,**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&upstream=glibc,False,,,False,,0.03373,0.00016,False,/var/lib/dpkg/status.d/libc6,,True,2.36-9+deb12u11,True,False,,False,,896756e9b5609418a794af6ff0d230e96a44a877d620bdea454cf1d30e61e6bd,124,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.057647+00:00,,,,,0,[],Upgrade to version: 2.36-9+deb12u11,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2025-4802 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-4802 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://sourceware.org/bugzilla/show_bug.cgi?id=32976 NEWLINE - https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e NEWLINE - http://www.openwall.com/lists/oss-security/2025/05/16/7 NEWLINE - http://www.openwall.com/lists/oss-security/2025/05/17/2 NEWLINE - https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-4802 in libc6:2.36-9+deb12u10,False,False,,2026-03-21 08:52:52.057565+00:00,,False,,CVE-2025-4802,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-4802,,Active, +True,0,[],libc6,2.36-9+deb12u10,2026-03-21 08:52:52.017363+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N,7.5,,,0,2026-03-21,,,**Vulnerability Namespace:** debian:distro:debian:12 NEWLINE **Vulnerability Description:** Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver. NEWLINE **Matcher:** dpkg-matcher NEWLINE **Package URL:** pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&upstream=glibc,False,,,False,,0.04614,0.00019,False,/var/lib/dpkg/status.d/libc6,,False,,True,False,,False,,49b3f2051b4822f78a671f94c2f8aaec296a9f21378bfc5f9986204b7a4195c5,122,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.017439+00:00,,,,,0,[],,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://security-tracker.debian.org/tracker/CVE-2026-0915 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-0915 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://sourceware.org/bugzilla/show_bug.cgi?id=33802 NEWLINE - http://www.openwall.com/lists/oss-security/2026/01/16/6,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2026-0915 in libc6:2.36-9+deb12u10,False,False,,2026-03-21 08:52:52.017375+00:00,,False,,CVE-2026-0915,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2026-0915,,Active, +True,0,[],,,2026-03-21 08:52:46.305669+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/data/static/codefixes/dbSchemaChallenge_1.ts,,,,True,False,,False,,96a782d96c35b919a694819c27defa3d6eb3fc5847c30a720c626174c484f036,1,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.305759+00:00,5,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.305682+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],node,22.18.0,2026-03-21 08:52:51.963460+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** nvd:cpe NEWLINE **Vulnerability Description:** We have identified a bug in Node.js error handling where ""Maximum call stack size exceeded"" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions. NEWLINE **Matcher:** stock-matcher NEWLINE **Package URL:** pkg:generic/node@22.18.0",False,,,False,,0.06873,0.00026,False,/nodejs/bin/node,,True,25.3.0,True,False,,False,,898b921913549296fb403942e41b6ed8d2178126bed5348a6fc4cc23a0a1b30c,119,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.963533+00:00,,,,,0,[],Upgrade to version: NEWLINE - 20.20.0 NEWLINE - 22.22.0 NEWLINE - 24.13.0 NEWLINE - 25.3.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-59466 NEWLINE **Vulnerability URL:** https://nodejs.org/en/blog/vulnerability/december-2025-security-releases,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-59466 in node:22.18.0,False,False,,2026-03-21 08:52:51.963473+00:00,,False,,CVE-2025-59466,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-59466,,Active, +True,0,[],node,22.18.0,2026-03-21 08:52:51.929295+00:00,CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L,7.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** nvd:cpe NEWLINE **Vulnerability Description:** A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact. NEWLINE **Matcher:** stock-matcher NEWLINE **Package URL:** pkg:generic/node@22.18.0",False,,,False,,0.07432,0.00027,False,/nodejs/bin/node,,True,25.3.0,True,False,,False,,41c091fef9ec829cc138b26cb052e44805834ea16a909be3afdf2a9ab7ca4e81,117,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.929364+00:00,,,,,0,[],Upgrade to version: NEWLINE - 20.20.0 NEWLINE - 22.22.0 NEWLINE - 24.13.0 NEWLINE - 25.3.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-55131 NEWLINE **Vulnerability URL:** https://nodejs.org/en/blog/vulnerability/december-2025-security-releases,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,CVE-2025-55131 in node:22.18.0,False,False,,2026-03-21 08:52:51.929306+00:00,,False,,CVE-2025-55131,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,CVE-2025-55131,,Active, +True,0,[],ip,2.0.1,2026-03-21 08:52:50.529473+00:00,CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H,8.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** ip SSRF improper categorization in isPublic NEWLINE **Related Vulnerability Description:** The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/ip@2.0.1",False,,,False,,0.99396,0.86505,False,/juice-shop/node_modules/ip/package.json,,False,,True,False,,False,,e5cb954c35f339e0ca01a801f94a10426da4986a4003f83ee1f3c10d9261e959,51,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.529531+00:00,,,,,0,[],,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-2p57-rm9w-gvfp NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2024-29415 NEWLINE - https://github.com/indutny/node-ip/issues/150 NEWLINE - https://github.com/indutny/node-ip/pull/143 NEWLINE - https://github.com/indutny/node-ip/pull/144 NEWLINE - https://security.netapp.com/advisory/ntap-20250117-0010 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2024-29415 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/indutny/node-ip/issues/150 NEWLINE - https://github.com/indutny/node-ip/pull/143 NEWLINE - https://github.com/indutny/node-ip/pull/144 NEWLINE - https://security.netapp.com/advisory/ntap-20250117-0010/,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-2p57-rm9w-gvfp in ip:2.0.1,False,False,,2026-03-21 08:52:50.529483+00:00,,False,,GHSA-2p57-rm9w-gvfp,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-2p57-rm9w-gvfp; CVE-2024-29415,,Active, +True,0,[],,,2026-03-21 08:52:46.329165+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/data/static/codefixes/dbSchemaChallenge_3.ts,,,,True,False,,False,,01082c2e3b0d087751b2b5a5de33426a8c955da41140cd6cc549631147555033,2,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.329279+00:00,11,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.329184+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],lodash.set,4.3.2,2026-03-21 08:52:50.684083+00:00,CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H,7.4,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Prototype Pollution in lodash NEWLINE **Related Vulnerability Description:** Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/lodash.set@4.3.2,False,,,False,,0.85216,0.02546,False,/juice-shop/node_modules/lodash.set/package.json,,False,,True,False,,False,,4329c773eea03faf09868de96a1232ec6a258d90a3252d5c9852bd2503e3011d,59,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.684142+00:00,,,,,0,[],,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-p6mc-m468-83gw NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/lodash/lodash/issues/4744 NEWLINE - https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2020-8203 NEWLINE - https://hackerone.com/reports/712065 NEWLINE - https://github.com/lodash/lodash/issues/4874 NEWLINE - https://github.com/github/advisory-database/pull/2884 NEWLINE - https://hackerone.com/reports/864701 NEWLINE - https://github.com/lodash/lodash/wiki/Changelog#v41719 NEWLINE - https://web.archive.org/web/20210914001339/https://github.com/lodash/lodash/issues/4744 NEWLINE - https://security.netapp.com/advisory/ntap-20200724-0006 NEWLINE - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2020-8203.yml NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2020-8203 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/lodash/lodash/issues/4874 NEWLINE - https://hackerone.com/reports/712065 NEWLINE - https://security.netapp.com/advisory/ntap-20200724-0006/ NEWLINE - https://www.oracle.com//security-alerts/cpujul2021.html NEWLINE - https://www.oracle.com/security-alerts/cpuApr2021.html NEWLINE - https://www.oracle.com/security-alerts/cpuapr2022.html NEWLINE - https://www.oracle.com/security-alerts/cpujan2022.html NEWLINE - https://www.oracle.com/security-alerts/cpuoct2021.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-p6mc-m468-83gw in lodash.set:4.3.2,False,False,,2026-03-21 08:52:50.684093+00:00,,False,,GHSA-p6mc-m468-83gw,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-p6mc-m468-83gw; CVE-2020-8203,,Active, +True,0,[],moment,2.0.0,2026-03-21 08:52:50.699982+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Path Traversal: 'dir/../../filename' in moment.locale NEWLINE **Related Vulnerability Description:** Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/moment@2.0.0",False,,,False,,0.81866,0.01673,False,/juice-shop/node_modules/express-jwt/node_modules/moment/package.json,,True,2.29.2,True,False,,False,,e7f093b631db3bc800325fb2f6024d2ef72c40edf63cd9ae8af290300a55a993,60,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.700037+00:00,,,,,0,[],Upgrade to version: 2.29.2,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8hfj-j24r-96c4 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4 NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2022-24785 NEWLINE - https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5 NEWLINE - https://www.tenable.com/security/tns-2022-09 NEWLINE - https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5 NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5 NEWLINE - https://security.netapp.com/advisory/ntap-20220513-0006 NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2022-24785 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5 NEWLINE - https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4 NEWLINE - https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/ NEWLINE - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/ NEWLINE - https://security.netapp.com/advisory/ntap-20220513-0006/ NEWLINE - https://www.tenable.com/security/tns-2022-09 NEWLINE - https://security.netapp.com/advisory/ntap-20241108-0002/,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8hfj-j24r-96c4 in moment:2.0.0,False,False,,2026-03-21 08:52:50.699991+00:00,,False,,GHSA-8hfj-j24r-96c4,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8hfj-j24r-96c4; CVE-2022-24785,,Active, +True,0,[],,,2026-03-21 08:52:46.342472+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/data/static/codefixes/unionSqlInjectionChallenge_1.ts,,,,True,False,,False,,ff96577206ffc5ef88468f2a16d9dec6744398620a4a59c51ecfb7d5e984a12e,3,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.342543+00:00,6,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.342485+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.499411+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/routes/search.ts,,,,True,False,,False,,1bf0b263903752029aa809a978cd26d8d2a2bf32c9585422c88e70e7a3a6947a,17,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.499497+00:00,23,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.499427+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],lodash,2.4.2,2026-03-21 08:52:50.783370+00:00,CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H,7.2,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Command Injection in lodash NEWLINE **Related Vulnerability Description:** Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/lodash@2.4.2,False,,,False,,0.7261,0.00741,False,/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json,,True,4.17.21,True,False,,False,,869a7ec9777c876bef49b8a242706d066e27f30637bcd64513a7cb9f8fe567fd,65,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.783442+00:00,,,,,0,[],Upgrade to version: 4.17.21,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-35jh-r3h4-6jhm NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2021-23337 NEWLINE - https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c NEWLINE - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 NEWLINE - https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js#L14851 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929 NEWLINE - https://www.oracle.com//security-alerts/cpujul2021.html NEWLINE - https://www.oracle.com/security-alerts/cpuoct2021.html NEWLINE - https://www.oracle.com/security-alerts/cpujan2022.html NEWLINE - https://www.oracle.com/security-alerts/cpujul2022.html NEWLINE - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf NEWLINE - https://security.netapp.com/advisory/ntap-20210312-0006 NEWLINE - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2021-23337.yml NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2021-23337 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf NEWLINE - https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851 NEWLINE - https://security.netapp.com/advisory/ntap-20210312-0006/ NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931 NEWLINE - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929 NEWLINE - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 NEWLINE - https://www.oracle.com//security-alerts/cpujul2021.html NEWLINE - https://www.oracle.com/security-alerts/cpujan2022.html NEWLINE - https://www.oracle.com/security-alerts/cpujul2022.html NEWLINE - https://www.oracle.com/security-alerts/cpuoct2021.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-35jh-r3h4-6jhm in lodash:2.4.2,False,False,,2026-03-21 08:52:50.783384+00:00,,False,,GHSA-35jh-r3h4-6jhm,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-35jh-r3h4-6jhm; CVE-2021-23337,,Active, +True,0,[],ws,7.4.6,2026-03-21 08:52:50.803525+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** ws affected by a DoS when handling a request with many HTTP headers NEWLINE **Related Vulnerability Description:** ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/ws@7.4.6",False,,,False,,0.67216,0.00541,False,/juice-shop/node_modules/engine.io/node_modules/ws/package.json,,True,7.5.10,True,False,,False,,74033f3e158481bfea901d95193a59e2e8802a843bfa6b734b22d06ee7d95a7d,66,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.803596+00:00,,,,,0,[],Upgrade to version: 7.5.10,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-3h5v-q93c-6h6q NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q NEWLINE - https://github.com/websockets/ws/issues/2230 NEWLINE - https://github.com/websockets/ws/pull/2231 NEWLINE - https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f NEWLINE - https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e NEWLINE - https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c NEWLINE - https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2024-37890 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f NEWLINE - https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e NEWLINE - https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c NEWLINE - https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63 NEWLINE - https://github.com/websockets/ws/issues/2230 NEWLINE - https://github.com/websockets/ws/pull/2231 NEWLINE - https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q NEWLINE - https://nodejs.org/api/http.html#servermaxheaderscount,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-3h5v-q93c-6h6q in ws:7.4.6,False,False,,2026-03-21 08:52:50.803538+00:00,,False,,GHSA-3h5v-q93c-6h6q,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-3h5v-q93c-6h6q; CVE-2024-37890,,Active, +True,0,[],,,2026-03-21 08:52:46.510656+00:00,,,,,95,2026-03-21,,,**Result message:** Found data from an Express or Next web request flowing to `eval`. If this data is user-controllable this can lead to execution of arbitrary system commands in the context of your application process. Avoid `eval` whenever possible. NEWLINE ,False,,,False,,,,False,/src/routes/userProfile.ts,,,,True,False,,False,,eb9f5c7fbc7059d112c8d40c166d5378cfdea907628e793c1172ee4e7828fb4e,18,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.510730+00:00,62,,,,0,[],,1,S1,False,,,,,,,,False,https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/eval NEWLINE https://nodejs.org/api/child_process.html#child_processexeccommand-options-callback NEWLINE https://www.stackhawk.com/blog/nodejs-command-injection-examples-and-prevention/ NEWLINE https://ckarande.gitbooks.io/owasp-nodegoat-tutorial/content/tutorial/a1_-_server_side_js_injection.html,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.lang.security.audit.code-string-concat.code-string-concat,False,False,,2026-03-21 08:52:46.510668+00:00,,False,,javascript.lang.security.audit.code-string-concat.code-string-concat,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],sanitize-html,1.4.2,2026-03-21 08:52:50.850197+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Sanitize-html Vulnerable To REDoS Attacks NEWLINE **Related Vulnerability Description:** The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/sanitize-html@1.4.2,False,,,False,,0.63116,0.00447,False,/juice-shop/node_modules/sanitize-html/package.json,,True,2.7.1,True,False,,False,,e90ee5d49e22d940fba380eab58f54bc2a72f71ef85a214ee4f3b1fde805f262,68,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.850284+00:00,,,,,0,[],Upgrade to version: 2.7.1,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-cgfm-xwp7-2cvr NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2022-25887 NEWLINE - https://github.com/apostrophecms/sanitize-html/pull/557 NEWLINE - https://github.com/apostrophecms/sanitize-html/commit/b4682c12fd30e12e82fa2d9b766de91d7d2cd23c NEWLINE - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3008102 NEWLINE - https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-2957526 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2022-25887 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/apostrophecms/sanitize-html/commit/b4682c12fd30e12e82fa2d9b766de91d7d2cd23c NEWLINE - https://github.com/apostrophecms/sanitize-html/pull/557 NEWLINE - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3008102 NEWLINE - https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-2957526,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-cgfm-xwp7-2cvr in sanitize-html:1.4.2,False,False,,2026-03-21 08:52:50.850211+00:00,,False,,GHSA-cgfm-xwp7-2cvr,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-cgfm-xwp7-2cvr; CVE-2022-25887,,Active, +True,0,[],,,2026-03-21 08:52:46.452618+00:00,,,,,89,2026-03-21,,,"**Result message:** Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements. NEWLINE ",False,,,False,,,,False,/src/routes/login.ts,,,,True,False,,False,,18cf39067c5c99611bd071fc090cc6ab2730c0b342ddb473583abbf12fa8d8d0,13,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.452702+00:00,34,,,,0,[],,1,S1,False,,,,,,,,False,https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Semgrep JSON Report,2,0,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,False,False,,2026-03-21 08:52:46.452629+00:00,,False,,javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],lodash,2.4.2,2026-03-21 08:52:50.897470+00:00,CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L,5.6,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Prototype Pollution in lodash NEWLINE **Related Vulnerability Description:** A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/lodash@2.4.2",False,,,False,,0.5661,0.00345,False,/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json,,True,4.17.11,True,False,,False,,988db307fc5bb30445f19dbafd9fb489dbda51fe10ecf5f2412b07c45f0c3d96,70,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.897548+00:00,,,,,0,[],Upgrade to version: 4.17.11,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-4xc9-xhrj-v574 NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2018-16487 NEWLINE - https://hackerone.com/reports/380873 NEWLINE - https://github.com/lodash/lodash/commit/90e6199a161b6445b01454517b40ef65ebecd2ad NEWLINE - https://security.netapp.com/advisory/ntap-20190919-0004 NEWLINE - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2018-16487.yml NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2018-16487 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://hackerone.com/reports/380873 NEWLINE - https://security.netapp.com/advisory/ntap-20190919-0004/,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-4xc9-xhrj-v574 in lodash:2.4.2,False,False,,2026-03-21 08:52:50.897483+00:00,,False,,GHSA-4xc9-xhrj-v574,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-4xc9-xhrj-v574; CVE-2018-16487,,Active, +True,0,[],tar,4.4.19,2026-03-21 08:52:52.160052+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N,7.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction NEWLINE **Related Vulnerability Description:** node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@4.4.19",False,,,False,,0.02088,0.00013,False,/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json,,True,7.5.8,True,False,,False,,5da9434579ed088d96926e5ad9683f3a35f6b09c0dae2eeebb5b6cd8a0713022,129,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.160116+00:00,,,,,0,[],Upgrade to version: 7.5.8,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-83g3-92jg-28cx NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-26960 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384 NEWLINE - https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-83g3-92jg-28cx in tar:4.4.19,False,False,,2026-03-21 08:52:52.160062+00:00,,False,,GHSA-83g3-92jg-28cx,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-83g3-92jg-28cx; CVE-2026-26960,,Active, +True,0,[],moment,2.0.0,2026-03-21 08:52:50.942827+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Regular Expression Denial of Service in moment NEWLINE **Related Vulnerability Description:** The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/moment@2.0.0",False,,,False,,0.53912,0.00311,False,/juice-shop/node_modules/express-jwt/node_modules/moment/package.json,,True,2.19.3,True,False,,False,,630b663e09ac33c8e15851db186780e54d8ac1cdbb41e507e2edac1841a90ca6,72,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:50.942902+00:00,,,,,0,[],Upgrade to version: 2.19.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-446m-mv8f-q348 NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2017-18214 NEWLINE - https://github.com/moment/moment/issues/4163 NEWLINE - https://github.com/moment/moment/pull/4326 NEWLINE - https://www.npmjs.com/advisories/532 NEWLINE - https://www.tenable.com/security/tns-2019-02 NEWLINE - https://github.com/moment/moment/commit/69ed9d44957fa6ab12b73d2ae29d286a857b80eb NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2017-18214 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/moment/moment/issues/4163 NEWLINE - https://nodesecurity.io/advisories/532 NEWLINE - https://www.tenable.com/security/tns-2019-02,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-446m-mv8f-q348 in moment:2.0.0,False,False,,2026-03-21 08:52:50.942841+00:00,,False,,GHSA-446m-mv8f-q348,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-446m-mv8f-q348; CVE-2017-18214,,Active, +True,0,[],tar,7.4.3,2026-03-21 08:52:52.548205+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N,6.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization NEWLINE **Related Vulnerability Description:** node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@7.4.3",False,,,False,,0.0028,6e-05,False,/juice-shop/node_modules/tar/package.json,,True,7.5.3,True,False,,False,,01e64f091e772f110a466a9aed4840fb28cf79765564b2effb654fa41080d4c7,148,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.548282+00:00,,,,,0,[],Upgrade to version: 7.5.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8qq5-rm4j-mr97 in tar:7.4.3,False,False,,2026-03-21 08:52:52.548217+00:00,,False,,GHSA-8qq5-rm4j-mr97,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8qq5-rm4j-mr97; CVE-2026-23745,,Active, +True,0,[],braces,2.3.2,2026-03-21 08:52:51.008700+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Uncontrolled resource consumption in braces NEWLINE **Related Vulnerability Description:** The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends ""imbalanced braces"" as input, the parsing will enter a loop, which will cause the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/braces@2.3.2",False,,,False,,0.44899,0.00225,False,/juice-shop/node_modules/braces/package.json,,True,3.0.3,True,False,,False,,fee295670b576e697ddfcadd99d548c93389309dbcff631ab8a8555c55261a43,75,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.008799+00:00,,,,,0,[],Upgrade to version: 3.0.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-grv7-fg5c-xmjg NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2024-4068 NEWLINE - https://github.com/micromatch/braces/issues/35 NEWLINE - https://devhub.checkmarx.com/cve-details/CVE-2024-4068 NEWLINE - https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308 NEWLINE - https://github.com/micromatch/braces/pull/37 NEWLINE - https://github.com/micromatch/braces/pull/40 NEWLINE - https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2024-4068 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://devhub.checkmarx.com/cve-details/CVE-2024-4068/ NEWLINE - https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff NEWLINE - https://github.com/micromatch/braces/issues/35 NEWLINE - https://github.com/micromatch/braces/pull/37 NEWLINE - https://github.com/micromatch/braces/pull/40,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-grv7-fg5c-xmjg in braces:2.3.2,False,False,,2026-03-21 08:52:51.008717+00:00,,False,,GHSA-grv7-fg5c-xmjg,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-grv7-fg5c-xmjg; CVE-2024-4068,,Active, +True,0,[],express-jwt,0.1.3,2026-03-21 08:52:51.030540+00:00,CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N,7.7,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Authorization bypass in express-jwt NEWLINE **Related Vulnerability Description:** In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this vulnerability if all of the following conditions apply: - You are using express-jwt - You do not have **algorithms** configured in your express-jwt configuration. - You are using libraries such as jwks-rsa as the **secret**. You can fix this by specifying **algorithms** in the express-jwt configuration. See linked GHSA for example. This is also fixed in version 6.0.0. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/express-jwt@0.1.3",False,,,False,,0.4458,0.00222,False,/juice-shop/node_modules/express-jwt/package.json,,True,6.0.0,True,False,,False,,7f3fb4c083bdd0071807f8e4598997fb90839244312b3bf1a0d9b9b1d8f3b891,76,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.030628+00:00,,,,,0,[],Upgrade to version: 6.0.0,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-6g6m-m6h5-w9gf NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/auth0/express-jwt/security/advisories/GHSA-6g6m-m6h5-w9gf NEWLINE - https://github.com/auth0/express-jwt/commit/7ecab5f8f0cab5297c2b863596566eb0c019cdef NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2020-15084 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2020-15084 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/auth0/express-jwt/commit/7ecab5f8f0cab5297c2b863596566eb0c019cdef NEWLINE - https://github.com/auth0/express-jwt/security/advisories/GHSA-6g6m-m6h5-w9gf,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-6g6m-m6h5-w9gf in express-jwt:0.1.3,False,False,,2026-03-21 08:52:51.030555+00:00,,False,,GHSA-6g6m-m6h5-w9gf,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-6g6m-m6h5-w9gf; CVE-2020-15084,,Active, +True,0,[],tar,6.2.1,2026-03-21 08:52:52.527012+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N,6.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization NEWLINE **Related Vulnerability Description:** node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@6.2.1",False,,,False,,0.0028,6e-05,False,/juice-shop/node_modules/sqlite3/node_modules/tar/package.json,,True,7.5.3,True,False,,False,,eac03633475d6b574c002438b16cba1778f03f0e53a6b7cd71355c2dedb6591e,147,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.527160+00:00,,,,,0,[],Upgrade to version: 7.5.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8qq5-rm4j-mr97 in tar:6.2.1,False,False,,2026-03-21 08:52:52.527032+00:00,,False,,GHSA-8qq5-rm4j-mr97,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8qq5-rm4j-mr97; CVE-2026-23745,,Active, +True,0,[],tar,4.4.19,2026-03-21 08:52:52.503998+00:00,CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N,6.1,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization NEWLINE **Related Vulnerability Description:** node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@4.4.19",False,,,False,,0.0028,6e-05,False,/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json,,True,7.5.3,True,False,,False,,ad8e7502ade60b404318ab7165a4a0e1e1680659427c422c134df7263ff9bd9a,146,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.504084+00:00,,,,,0,[],Upgrade to version: 7.5.3,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97 NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23745 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-8qq5-rm4j-mr97 in tar:4.4.19,False,False,,2026-03-21 08:52:52.504012+00:00,,False,,GHSA-8qq5-rm4j-mr97,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-8qq5-rm4j-mr97; CVE-2026-23745,,Active, +True,0,[],http-cache-semantics,3.8.1,2026-03-21 08:52:51.101237+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H,7.5,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** http-cache-semantics vulnerable to Regular Expression Denial of Service NEWLINE **Related Vulnerability Description:** This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/http-cache-semantics@3.8.1",False,,,False,,0.41453,0.00196,False,/juice-shop/node_modules/http-cache-semantics/package.json,,True,4.1.1,True,False,,False,,e662b0400bb9af0286dd74ea110d9ae3b4b1c7dfbfc06e21a1c9d03859782b21,79,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.101390+00:00,,,,,0,[],Upgrade to version: 4.1.1,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-rc47-6667-2j5j NEWLINE **Vulnerability URLs:** NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2022-25881 NEWLINE - https://github.com/kornelski/http-cache-semantics/blob/master/index.js%23L83 NEWLINE - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253332 NEWLINE - https://security.snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783 NEWLINE - https://github.com/kornelski/http-cache-semantics/commit/560b2d8ef452bbba20ffed69dc155d63ac757b74 NEWLINE - https://security.netapp.com/advisory/ntap-20230622-0008 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2022-25881 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/kornelski/http-cache-semantics/blob/master/index.js%23L83 NEWLINE - https://security.netapp.com/advisory/ntap-20230622-0008/ NEWLINE - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253332 NEWLINE - https://security.snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-rc47-6667-2j5j in http-cache-semantics:3.8.1,False,False,,2026-03-21 08:52:51.101256+00:00,,False,,GHSA-rc47-6667-2j5j,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-rc47-6667-2j5j; CVE-2022-25881,,Active, +True,0,[],tar,7.4.3,2026-03-21 08:52:52.479637+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L,8.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `├Я` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `├Я` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `├Я` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@7.4.3",False,,,False,,0.00304,6e-05,False,/juice-shop/node_modules/tar/package.json,,True,7.5.4,True,False,,False,,2e1f1d1a6433c7cf374fe5026aad7a61612352d2abba5856acf85e9a354165fe,145,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.479714+00:00,,,,,0,[],Upgrade to version: 7.5.4,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-r6q2-hw4h-h46w NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-r6q2-hw4h-h46w in tar:7.4.3,False,False,,2026-03-21 08:52:52.479651+00:00,,False,,GHSA-r6q2-hw4h-h46w,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-r6q2-hw4h-h46w; CVE-2026-23950,,Active, +True,0,[],tar,6.2.1,2026-03-21 08:52:52.457543+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L,8.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `├Я` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `├Я` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `├Я` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@6.2.1",False,,,False,,0.00304,6e-05,False,/juice-shop/node_modules/sqlite3/node_modules/tar/package.json,,True,7.5.4,True,False,,False,,94f59c723d8aec5741a0b8f70ca74c1a206755d843633cf5b6dcba3032347c0f,144,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.457615+00:00,,,,,0,[],Upgrade to version: 7.5.4,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-r6q2-hw4h-h46w NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-r6q2-hw4h-h46w in tar:6.2.1,False,False,,2026-03-21 08:52:52.457556+00:00,,False,,GHSA-r6q2-hw4h-h46w,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-r6q2-hw4h-h46w; CVE-2026-23950,,Active, +True,0,[],tar,4.4.19,2026-03-21 08:52:52.435005+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L,8.8,,,0,2026-03-21,,,"**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS NEWLINE **Related Vulnerability Description:** node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `├Я` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `├Я` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `├Я` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue. NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/tar@4.4.19",False,,,False,,0.00304,6e-05,False,/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json,,True,7.5.4,True,False,,False,,2ed1efb9df4bedea88b2e627e0130174bd343fe820b8fad3a39264e21c48fad8,143,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:52.435102+00:00,,,,,0,[],Upgrade to version: 7.5.4,1,S1,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-r6q2-hw4h-h46w NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2026-23950 NEWLINE **Related Vulnerability URLs:** NEWLINE - https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6 NEWLINE - https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w,Admin User (admin),1,,,False,,,,,,,High,,,30,30,2026-04-20,2026-04-20,,,,True,,Anchore Grype,5,0,GHSA-r6q2-hw4h-h46w in tar:4.4.19,False,False,,2026-03-21 08:52:52.435026+00:00,,False,,GHSA-r6q2-hw4h-h46w,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-r6q2-hw4h-h46w; CVE-2026-23950,,Active, +True,0,[],lodash,4.17.21,2026-03-21 08:52:51.996768+00:00,CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L,6.5,,,0,2026-03-21,,,**Vulnerability Namespace:** github:language:javascript NEWLINE **Vulnerability Description:** Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions NEWLINE **Related Vulnerability Description:** Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset┬аand _.omit┬аfunctions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. NEWLINE NEWLINE The issue permits deletion of properties but does not allow overwriting their original behavior. NEWLINE NEWLINE This issue is patched on 4.17.23 NEWLINE **Matcher:** javascript-matcher NEWLINE **Package URL:** pkg:npm/lodash@4.17.21,False,,,False,,0.06732,0.00025,False,/juice-shop/node_modules/lodash/package.json,,True,4.17.23,True,False,,False,,7b54053c836c8720cf13c23c343ae814f9746209465270487e7e86716a3a3777,121,,False,,False,2026-03-21 08:52:50.407095+00:00,Admin User (admin),1,2026-03-21 08:52:51.996840+00:00,,,,,0,[],Upgrade to version: 4.17.23,1,S2,False,,,,,,,,False,**Vulnerability Datasource:** https://github.com/advisories/GHSA-xxjr-mmjv-4gpg NEWLINE **Vulnerability URLs:** NEWLINE - https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg NEWLINE - https://nvd.nist.gov/vuln/detail/CVE-2025-13465 NEWLINE - https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81 NEWLINE **Related Vulnerability Datasource:** https://nvd.nist.gov/vuln/detail/CVE-2025-13465 NEWLINE **Related Vulnerability URL:** https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Anchore Grype,5,0,GHSA-xxjr-mmjv-4gpg in lodash:4.17.21,False,False,,2026-03-21 08:52:51.996781+00:00,,False,,GHSA-xxjr-mmjv-4gpg,,Anchore Grype,1,Labs Security Testing,1,Juice Shop,,GHSA-xxjr-mmjv-4gpg; CVE-2025-13465,,Active, +True,0,[],,,2026-03-21 08:52:46.364313+00:00,,,,,79,2026-03-21,,,"**Result message:** Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: ""{{ expr }}"". NEWLINE ",False,,,False,,,,False,/src/frontend/src/app/navbar/navbar.component.html,,,,True,False,,False,,fbc2121d22e6d92272ae7ab2621272590d4c7ed87c1abb31fecf21e0dbf0ee65,5,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.364388+00:00,17,,,,0,[],,1,S2,False,,,,,,,,False,https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,False,False,,2026-03-21 08:52:46.364326+00:00,,False,,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.375490+00:00,,,,,79,2026-03-21,,,"**Result message:** Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: ""{{ expr }}"". NEWLINE ",False,,,False,,,,False,/src/frontend/src/app/purchase-basket/purchase-basket.component.html,,,,True,False,,False,,25ddc4aba2ab39b0f8b123aff5efde8dbf706a0a80234006894223b6362f28d2,6,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.375577+00:00,15,,,,0,[],,1,S2,False,,,,,,,,False,https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,False,False,,2026-03-21 08:52:46.375505+00:00,,False,,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.387430+00:00,,,,,79,2026-03-21,,,"**Result message:** Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: ""{{ expr }}"". NEWLINE ",False,,,False,,,,False,/src/frontend/src/app/search-result/search-result.component.html,,,,True,False,,False,,da4d380dafe7a95f30947b223244cb51a686574c7e816de2c6c0c88685619803,7,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.387508+00:00,40,,,,0,[],,1,S2,False,,,,,,,,False,https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,False,False,,2026-03-21 08:52:46.387444+00:00,,False,,generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.398574+00:00,,,,,798,2026-03-21,,,"**Result message:** A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module). NEWLINE ",False,,,False,,,,False,/src/lib/insecurity.ts,,,,True,False,,False,,336c04ba579d98f1cbd843dec07351d03b9ed6fe11f5c2642269dd2f2b597ca2,8,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.398639+00:00,56,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret,False,False,,2026-03-21 08:52:46.398585+00:00,,False,,javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.409244+00:00,,,,,79,2026-03-21,,,**Result message:** User data flows into the host portion of this manually-constructed HTML. This can introduce a Cross-Site-Scripting (XSS) vulnerability if this comes from user-provided input. Consider using a sanitization library such as DOMPurify to sanitize the HTML within. NEWLINE ,False,,,False,,,,False,/src/routes/chatbot.ts,,,,True,False,,False,,2da08eee2cae8d5a4c40ff22ebd6e1b771acf48bbab5635c2facc17ad30aff2e,9,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.409322+00:00,197,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.injection.raw-html-format.raw-html-format,False,False,,2026-03-21 08:52:46.409258+00:00,,False,,javascript.express.security.injection.raw-html-format.raw-html-format,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.419211+00:00,,,,,73,2026-03-21,,,"**Result message:** The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing. NEWLINE ",False,,,False,,,,False,/src/routes/fileServer.ts,,,,True,False,,False,,730127e56b626e43913d00326470199b3fe58308c46ed1f752cdcf55116f0924,10,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.419276+00:00,33,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,False,False,,2026-03-21 08:52:46.419222+00:00,,False,,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.430444+00:00,,,,,73,2026-03-21,,,"**Result message:** The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing. NEWLINE ",False,,,False,,,,False,/src/routes/keyServer.ts,,,,True,False,,False,,4dc4ded60b0a833d49b01c2aa3ed19e1d3d800efc8c4951d7e22c61af3182247,11,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.430515+00:00,14,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,False,False,,2026-03-21 08:52:46.430457+00:00,,False,,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.441521+00:00,,,,,73,2026-03-21,,,"**Result message:** The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing. NEWLINE ",False,,,False,,,,False,/src/routes/logfileServer.ts,,,,True,False,,False,,b3ca11f8dac4967975a1496a32c7d38dd9dd5a0c04f35c04c32c2c28ae9a6223,12,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.441588+00:00,14,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,False,False,,2026-03-21 08:52:46.441533+00:00,,False,,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.465314+00:00,,,,,73,2026-03-21,,,"**Result message:** The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing. NEWLINE ",False,,,False,,,,False,/src/routes/quarantineServer.ts,,,,True,False,,False,,7b377f19cbc2f96c874065754ed333f0c1da7f5c030cd6b6c2ffedf6c5f26cff,14,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.465404+00:00,14,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,False,False,,2026-03-21 08:52:46.465330+00:00,,False,,javascript.express.security.audit.express-res-sendfile.express-res-sendfile,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.476591+00:00,,,,,601,2026-03-21,,,"**Result message:** It looks like 'toUrl' is read from user input and it is used to as a redirect. Ensure 'toUrl' is not externally controlled, otherwise this is an open redirect. NEWLINE ",False,,,False,,,,False,/src/routes/redirect.ts,,,,True,False,,False,,6d87215e82bf602b7db608e037398fa9328dfbf4fa4634ca81ab65f9bbc56a35,15,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.476692+00:00,19,,,,0,[],,1,S2,False,,,,,,,,False,https://owasp.org/Top10/A01_2021-Broken_Access_Control,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.possible-user-input-redirect.unknown-value-in-redirect,False,False,,2026-03-21 08:52:46.476607+00:00,,False,,javascript.express.security.audit.possible-user-input-redirect.unknown-value-in-redirect,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.488326+00:00,,,,,601,2026-03-21,,,"**Result message:** The application redirects to a URL specified by user-supplied input `query` that is not validated. This could redirect users to malicious locations. Consider using an allow-list approach to validate URLs, or warn users they are being redirected to a third-party website. NEWLINE ",False,,,False,,,,False,/src/routes/redirect.ts,,,,True,False,,False,,a07b144e5ae8c6f65c5a69b2fc91dd3a60f6bc861168ae8f5d4ce874c5e63d3a,16,,False,,False,2026-03-21 08:52:46.278498+00:00,Admin User (admin),1,2026-03-21 08:52:46.488426+00:00,19,,,,0,[],,1,S2,False,,,,,,,,False,https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html,Admin User (admin),1,,,False,,,,,,,Medium,,,90,90,2026-06-19,2026-06-19,,,,True,,Semgrep JSON Report,2,0,javascript.express.security.audit.express-open-redirect.express-open-redirect,False,False,,2026-03-21 08:52:46.488342+00:00,,False,,javascript.express.security.audit.express-open-redirect.express-open-redirect,,Semgrep JSON Report,1,Labs Security Testing,1,Juice Shop,,,,Active, +True,0,[],,,2026-03-21 08:52:46.522457+00:00,,,,,79,2026-03-21,,,"**Result message:** Cannot determine what 'subs' is and it is used with a '') }) + ⋮┆---------------------------------------- + 71┆ compiledTemplate = compiledTemplate.replace('', '') + + /src/server.ts + ❯❱ javascript.express.security.audit.express-check-directory-listing.express-check-directory-listing + ❰❰ Blocking ❱❱ + Directory listing/indexing is enabled, which may lead to disclosure of sensitive directories and + files. It is recommended to disable directory listing unless it is a public resource. If you need + directory listing, ensure that sensitive files are inaccessible when querying the resource. + Details: https://sg.run/DX2G + + 269┆ app.use('/ftp', serveIndexMiddleware, serveIndex('ftp', { icons: true })) // vuln-code- + snippet vuln-line directoryListingChallenge + ⋮┆---------------------------------------- + 273┆ app.use('/.well-known', serveIndexMiddleware, serveIndex('.well-known', { icons: true, + view: 'details' })) + ⋮┆---------------------------------------- + 277┆ app.use('/encryptionkeys', serveIndexMiddleware, serveIndex('encryptionkeys', { icons: + true, view: 'details' })) + ⋮┆---------------------------------------- + 281┆ app.use('/support/logs', serveIndexMiddleware, serveIndex('logs', { icons: true, view: + 'details' })) // vuln-code-snippet vuln-line accessLogDisclosureChallenge + + /src/views/dataErasureForm.hbs + ❯❱ generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var + ❰❰ Blocking ❱❱ + Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject + custom JavaScript handlers. To fix this, add quotes around the template expression, like this: "{{ + expr }}". + Details: https://sg.run/weNX + + 21┆ diff --git a/labs/lab5/semgrep/semgrep-results.json b/labs/lab5/semgrep/semgrep-results.json new file mode 100644 index 00000000..3c560b8c --- /dev/null +++ b/labs/lab5/semgrep/semgrep-results.json @@ -0,0 +1 @@ +{"version":"1.153.1","results":[{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/data/static/codefixes/dbSchemaChallenge_1.ts","start":{"line":5,"col":28,"offset":288},"end":{"line":5,"col":162,"offset":422},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/data/static/codefixes/dbSchemaChallenge_3.ts","start":{"line":11,"col":28,"offset":429},"end":{"line":11,"col":159,"offset":560},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/data/static/codefixes/unionSqlInjectionChallenge_1.ts","start":{"line":6,"col":28,"offset":331},"end":{"line":6,"col":159,"offset":462},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/data/static/codefixes/unionSqlInjectionChallenge_3.ts","start":{"line":10,"col":28,"offset":467},"end":{"line":10,"col":159,"offset":598},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","path":"/src/frontend/src/app/navbar/navbar.component.html","start":{"line":17,"col":47,"offset":681},"end":{"line":17,"col":66,"offset":700},"extra":{"message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"{{ expr }}\".","metadata":{"cwe":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"owasp":["A07:2017 - Cross-Site Scripting (XSS)","A03:2021 - Injection","A05:2025 - Injection"],"references":["https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss"],"category":"security","technology":["html-templates"],"confidence":"LOW","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cross-Site-Scripting (XSS)"],"source":"https://semgrep.dev/r/generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","shortlink":"https://sg.run/weNX"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","path":"/src/frontend/src/app/purchase-basket/purchase-basket.component.html","start":{"line":15,"col":71,"offset":505},"end":{"line":15,"col":87,"offset":521},"extra":{"message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"{{ expr }}\".","metadata":{"cwe":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"owasp":["A07:2017 - Cross-Site Scripting (XSS)","A03:2021 - Injection","A05:2025 - Injection"],"references":["https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss"],"category":"security","technology":["html-templates"],"confidence":"LOW","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cross-Site-Scripting (XSS)"],"source":"https://semgrep.dev/r/generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","shortlink":"https://sg.run/weNX"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","path":"/src/frontend/src/app/search-result/search-result.component.html","start":{"line":40,"col":97,"offset":1804},"end":{"line":40,"col":110,"offset":1817},"extra":{"message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"{{ expr }}\".","metadata":{"cwe":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"owasp":["A07:2017 - Cross-Site Scripting (XSS)","A03:2021 - Injection","A05:2025 - Injection"],"references":["https://flask.palletsprojects.com/en/1.1.x/security/#cross-site-scripting-xss"],"category":"security","technology":["html-templates"],"confidence":"LOW","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["audit"],"likelihood":"LOW","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cross-Site-Scripting (XSS)"],"source":"https://semgrep.dev/r/generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var","shortlink":"https://sg.run/weNX"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret","path":"/src/lib/insecurity.ts","start":{"line":56,"col":56,"offset":2882},"end":{"line":56,"col":66,"offset":2892},"extra":{"message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials from a secure vault or HSM (Hardware Security Module).","metadata":{"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"asvs":{"control_id":"3.5.2 Static API keys or secret","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x12-V3-Session-management.md#v35-token-based-session-management","section":"V3: Session Management Verification Requirements","version":"4"},"category":"security","technology":["jwt","javascript","secrets"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret","shortlink":"https://sg.run/4xN9"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.injection.raw-html-format.raw-html-format","path":"/src/routes/chatbot.ts","start":{"line":197,"col":46,"offset":6279},"end":{"line":197,"col":56,"offset":6289},"extra":{"message":"User data flows into the host portion of this manually-constructed HTML. This can introduce a Cross-Site-Scripting (XSS) vulnerability if this comes from user-provided input. Consider using a sanitization library such as DOMPurify to sanitize the HTML within.","metadata":{"cwe":["CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"owasp":["A07:2017 - Cross-Site Scripting (XSS)","A03:2021 - Injection","A05:2025 - Injection"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"],"category":"security","technology":["express"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Cross-Site-Scripting (XSS)"],"source":"https://semgrep.dev/r/javascript.express.security.injection.raw-html-format.raw-html-format","shortlink":"https://sg.run/5DO3"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.express-res-sendfile.express-res-sendfile","path":"/src/routes/fileServer.ts","start":{"line":33,"col":20,"offset":1174},"end":{"line":33,"col":46,"offset":1200},"extra":{"message":"The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing.","metadata":{"references":["https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html"],"technology":["express"],"category":"security","cwe":["CWE-73: External Control of File Name or Path"],"owasp":["A04:2021 - Insecure Design","A06:2025 - Insecure Design"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Path Traversal"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-res-sendfile.express-res-sendfile","shortlink":"https://sg.run/7DJk"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.express-res-sendfile.express-res-sendfile","path":"/src/routes/keyServer.ts","start":{"line":14,"col":20,"offset":423},"end":{"line":14,"col":57,"offset":460},"extra":{"message":"The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing.","metadata":{"references":["https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html"],"technology":["express"],"category":"security","cwe":["CWE-73: External Control of File Name or Path"],"owasp":["A04:2021 - Insecure Design","A06:2025 - Insecure Design"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Path Traversal"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-res-sendfile.express-res-sendfile","shortlink":"https://sg.run/7DJk"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.express-res-sendfile.express-res-sendfile","path":"/src/routes/logfileServer.ts","start":{"line":14,"col":20,"offset":423},"end":{"line":14,"col":47,"offset":450},"extra":{"message":"The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing.","metadata":{"references":["https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html"],"technology":["express"],"category":"security","cwe":["CWE-73: External Control of File Name or Path"],"owasp":["A04:2021 - Insecure Design","A06:2025 - Insecure Design"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Path Traversal"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-res-sendfile.express-res-sendfile","shortlink":"https://sg.run/7DJk"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/routes/login.ts","start":{"line":34,"col":28,"offset":1492},"end":{"line":34,"col":169,"offset":1633},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.express-res-sendfile.express-res-sendfile","path":"/src/routes/quarantineServer.ts","start":{"line":14,"col":20,"offset":437},"end":{"line":14,"col":57,"offset":474},"extra":{"message":"The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal. It is recommended to perform input validation in addition to canonicalizing the path. This allows you to validate the path against the intended directory it should be accessing.","metadata":{"references":["https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html"],"technology":["express"],"category":"security","cwe":["CWE-73: External Control of File Name or Path"],"owasp":["A04:2021 - Insecure Design","A06:2025 - Insecure Design"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Path Traversal"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-res-sendfile.express-res-sendfile","shortlink":"https://sg.run/7DJk"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.possible-user-input-redirect.unknown-value-in-redirect","path":"/src/routes/redirect.ts","start":{"line":19,"col":7,"offset":1050},"end":{"line":19,"col":26,"offset":1069},"extra":{"message":"It looks like 'toUrl' is read from user input and it is used to as a redirect. Ensure 'toUrl' is not externally controlled, otherwise this is an open redirect.","metadata":{"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"asvs":{"control_id":"5.5.1 Insecue Redirect","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x13-V5-Validation-Sanitization-Encoding.md#v51-input-validation","section":"V5 Validation, Sanitization and Encoding","version":"4"},"category":"security","technology":["express"],"subcategory":["audit"],"likelihood":"LOW","impact":"LOW","confidence":"LOW","references":["https://owasp.org/Top10/A01_2021-Broken_Access_Control"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.express.security.audit.possible-user-input-redirect.unknown-value-in-redirect","shortlink":"https://sg.run/OPv2"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.express.security.audit.express-open-redirect.express-open-redirect","path":"/src/routes/redirect.ts","start":{"line":19,"col":20,"offset":1063},"end":{"line":19,"col":25,"offset":1068},"extra":{"message":"The application redirects to a URL specified by user-supplied input `query` that is not validated. This could redirect users to malicious locations. Consider using an allow-list approach to validate URLs, or warn users they are being redirected to a third-party website.","metadata":{"technology":["express"],"references":["https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html"],"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"category":"security","owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.express.security.audit.express-open-redirect.express-open-redirect","shortlink":"https://sg.run/EpoP"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","path":"/src/routes/search.ts","start":{"line":23,"col":28,"offset":869},"end":{"line":23,"col":159,"offset":1000},"extra":{"message":"Detected a sequelize statement that is tainted by user-input. This could lead to SQL injection if the variable is user-controlled and is not properly sanitized. In order to prevent SQL injection, it is recommended to use parameterized queries or prepared statements.","metadata":{"interfile":true,"references":["https://sequelize.org/docs/v6/core-concepts/raw-queries/#replacements"],"category":"security","technology":["express"],"cwe":["CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"],"owasp":["A01:2017 - Injection","A03:2021 - Injection","A05:2025 - Injection"],"cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"HIGH","impact":"HIGH","confidence":"HIGH","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["SQL Injection"],"source":"https://semgrep.dev/r/javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection","shortlink":"https://sg.run/gjoe"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.code-string-concat.code-string-concat","path":"/src/routes/userProfile.ts","start":{"line":62,"col":20,"offset":1916},"end":{"line":62,"col":30,"offset":1926},"extra":{"message":"Found data from an Express or Next web request flowing to `eval`. If this data is user-controllable this can lead to execution of arbitrary system commands in the context of your application process. Avoid `eval` whenever possible.","metadata":{"interfile":true,"confidence":"HIGH","owasp":["A03:2021 - Injection","A05:2025 - Injection"],"cwe":["CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')"],"references":["https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/eval","https://nodejs.org/api/child_process.html#child_processexeccommand-options-callback","https://www.stackhawk.com/blog/nodejs-command-injection-examples-and-prevention/","https://ckarande.gitbooks.io/owasp-nodegoat-tutorial/content/tutorial/a1_-_server_side_js_injection.html"],"category":"security","technology":["node.js","Express","Next.js"],"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Code Injection"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.code-string-concat.code-string-concat","shortlink":"https://sg.run/96Yk"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unknown-value-with-script-tag.unknown-value-with-script-tag","path":"/src/routes/videoHandler.ts","start":{"line":58,"col":90,"offset":1950},"end":{"line":58,"col":94,"offset":1954},"extra":{"message":"Cannot determine what 'subs' is and it is used with a '", + "otherinfo": "" + }, + { + "id": "19", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "13", + "uri": "http://localhost:3000/*", + "nodeName": "http:\/\/localhost:3000\/*", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "14", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "18", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.

", + "otherinfo": "", + "reference": "", + "cweid": "829", + "wascid": "15", + "sourceid": "9" + }, + { + "pluginid": "2", + "alertRef": "2", + "alert": "Private IP Disclosure", + "name": "Private IP Disclosure", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

A private IP (such as 10.x.x.x, 172.x.x.x, 192.168.x.x) or an Amazon EC2 private hostname (for example, ip-10-0-56-78) has been found in the HTTP response body. This information might be helpful for further attacks targeting internal systems.

", + "instances":[ + { + "id": "484", + "uri": "http://localhost:3000/rest/admin/application-configuration", + "nodeName": "http:\/\/localhost:3000\/rest\/admin\/application-configuration", + "method": "GET", + "param": "", + "attack": "", + "evidence": "192.168.99.100:3000", + "otherinfo": "192.168.99.100:3000\n192.168.99.100:4200\n" + } + ], + "count": "1", + "systemic": false, + "solution": "

Remove the private IP address from the HTTP response body. For comments, use JSP/ASP/PHP comment instead of HTML/JavaScript comment which can be seen by client browsers.

", + "otherinfo": "

192.168.99.100:3000

192.168.99.100:4200

", + "reference": "

https://datatracker.ietf.org/doc/html/rfc1918

", + "cweid": "497", + "wascid": "13", + "sourceid": "201" + }, + { + "pluginid": "10096", + "alertRef": "10096", + "alert": "Timestamp Disclosure - Unix", + "name": "Timestamp Disclosure - Unix", + "riskcode": "1", + "confidence": "1", + "riskdesc": "Low (Low)", + "desc": "

A timestamp was disclosed by the application/web server. - Unix

", + "instances":[ + { + "id": "28", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1680327869", + "otherinfo": "1680327869, which evaluates to: 2023-04-01 05:44:29." + }, + { + "id": "21", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1701244813", + "otherinfo": "1701244813, which evaluates to: 2023-11-29 08:00:13." + }, + { + "id": "26", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1839622642", + "otherinfo": "1839622642, which evaluates to: 2028-04-17 22:17:22." + }, + { + "id": "29", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1863874346", + "otherinfo": "1863874346, which evaluates to: 2029-01-23 14:52:26." + }, + { + "id": "23", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "2033195021", + "otherinfo": "2033195021, which evaluates to: 2034-06-06 08:23:41." + } + ], + "count": "5", + "systemic": true, + "solution": "

Manually confirm that the timestamp data is not sensitive, and that the data cannot be aggregated to disclose exploitable patterns.

", + "otherinfo": "

1680327869, which evaluates to: 2023-04-01 05:44:29.

", + "reference": "

https://cwe.mitre.org/data/definitions/200.html

", + "cweid": "497", + "wascid": "13", + "sourceid": "17" + }, + { + "pluginid": "10021", + "alertRef": "10021", + "alert": "X-Content-Type-Options Header Missing", + "name": "X-Content-Type-Options Header Missing", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared content type. Current (early 2014) and legacy versions of Firefox will use the declared content type (if one is set), rather than performing MIME-sniffing.

", + "instances":[ + { + "id": "528", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=polling&t=Pp406Wz&sid=1Opivy0OOmJoxz9CAALe", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,sid,t,transport)", + "method": "GET", + "param": "x-content-type-options", + "attack": "", + "evidence": "", + "otherinfo": "This issue still applies to error type pages (401, 403, 500, etc.) as those pages are often still affected by injection issues, in which case there is still concern for browsers sniffing pages away from their actual content type.\nAt \"High\" threshold this scan rule will not alert on client or server error responses." + }, + { + "id": "469", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=polling&t=Pp406T4", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,t,transport)", + "method": "GET", + "param": "x-content-type-options", + "attack": "", + "evidence": "", + "otherinfo": "This issue still applies to error type pages (401, 403, 500, etc.) as those pages are often still affected by injection issues, in which case there is still concern for browsers sniffing pages away from their actual content type.\nAt \"High\" threshold this scan rule will not alert on client or server error responses." + }, + { + "id": "525", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=polling&t=Pp406Wx&sid=1Opivy0OOmJoxz9CAALe", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,sid,t,transport)(40)", + "method": "POST", + "param": "x-content-type-options", + "attack": "", + "evidence": "", + "otherinfo": "This issue still applies to error type pages (401, 403, 500, etc.) as those pages are often still affected by injection issues, in which case there is still concern for browsers sniffing pages away from their actual content type.\nAt \"High\" threshold this scan rule will not alert on client or server error responses." + } + ], + "count": "3", + "systemic": true, + "solution": "

Ensure that the application/web server sets the Content-Type header appropriately, and that it sets the X-Content-Type-Options header to 'nosniff' for all web pages.

If possible, ensure that the end user uses a standards-compliant and modern web browser that does not perform MIME-sniffing at all, or that can be directed by the web application/web server to not perform MIME-sniffing.

", + "otherinfo": "

This issue still applies to error type pages (401, 403, 500, etc.) as those pages are often still affected by injection issues, in which case there is still concern for browsers sniffing pages away from their actual content type.

At \"High\" threshold this scan rule will not alert on client or server error responses.

", + "reference": "

https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/compatibility/gg622941(v=vs.85)

https://owasp.org/www-community/Security_Headers

", + "cweid": "693", + "wascid": "15", + "sourceid": "208" + }, + { + "pluginid": "10109", + "alertRef": "10109", + "alert": "Modern Web Application", + "name": "Modern Web Application", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

The application appears to be a modern web application. If you need to explore it automatically then the Ajax Spider may well be more effective than the standard one.

", + "instances":[ + { + "id": "25", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "22", + "uri": "http://localhost:3000/*", + "nodeName": "http:\/\/localhost:3000\/*", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "125", + "uri": "http://localhost:3000/juice-shop/build/routes/fileServer.js:59:18", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/fileServer.js:59:18", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "99", + "uri": "http://localhost:3000/juice-shop/build/routes/styles.css", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "27", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + } + ], + "count": "5", + "systemic": true, + "solution": "

This is an informational alert and so no changes are required.

", + "otherinfo": "

No links have been found while there are scripts, which is an indication that this is a modern web application.

", + "reference": "", + "cweid": "-1", + "wascid": "-1", + "sourceid": "9" + }, + { + "pluginid": "10104", + "alertRef": "10104", + "alert": "User Agent Fuzzer", + "name": "User Agent Fuzzer", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

", + "instances":[ + { + "id": "1759", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=websocket&sid=v9Ry7S_RXB0evVuFAAMC", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,sid,transport)", + "method": "GET", + "param": "Header User-Agent", + "attack": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)", + "evidence": "", + "otherinfo": "" + }, + { + "id": "1758", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=polling&t=Pp40Brq", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,t,transport)", + "method": "GET", + "param": "Header User-Agent", + "attack": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)", + "evidence": "", + "otherinfo": "" + }, + { + "id": "1760", + "uri": "http://localhost:3000/socket.io/?EIO=4&transport=polling&t=Pp40Bw5&sid=v9Ry7S_RXB0evVuFAAMC", + "nodeName": "http:\/\/localhost:3000\/socket.io\/ (EIO,sid,t,transport)(40)", + "method": "POST", + "param": "Header User-Agent", + "attack": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)", + "evidence": "", + "otherinfo": "" + } + ], + "count": "3", + "systemic": true, + "solution": "", + "otherinfo": "", + "reference": "

https://owasp.org/wstg

", + "cweid": "0", + "wascid": "0", + "sourceid": "1128" + } + ] + } + ], + "sequences":[ + ] + +} diff --git a/labs/lab5/zap/zap-report-noauth.json b/labs/lab5/zap/zap-report-noauth.json new file mode 100644 index 00000000..5211117d --- /dev/null +++ b/labs/lab5/zap/zap-report-noauth.json @@ -0,0 +1,865 @@ +{ + "@programName": "ZAP", + "@version": "2.17.0", + "@generated": "Fri, 6 Mar 2026 15:59:33", + "created": "2026-03-06T15:59:33.923745682Z", + "insights":[ + { + "level": "Low", + "reason": "Warning", + "site": "", + "key": "insight.log.warn", + "description": "ZAP warnings logged - see the zap.log file for details", + "statistic": "1" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.code.2xx", + "description": "Percentage of responses with status code 2xx", + "statistic": "91" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.code.4xx", + "description": "Percentage of responses with status code 4xx", + "statistic": "8" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.application/javascript", + "description": "Percentage of endpoints with content type application/javascript", + "statistic": "5" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.application/octet-stream", + "description": "Percentage of endpoints with content type application/octet-stream", + "statistic": "6" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.image/x-icon", + "description": "Percentage of endpoints with content type image/x-icon", + "statistic": "1" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.text/css", + "description": "Percentage of endpoints with content type text/css", + "statistic": "1" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.text/html", + "description": "Percentage of endpoints with content type text/html", + "statistic": "79" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.text/markdown", + "description": "Percentage of endpoints with content type text/markdown", + "statistic": "4" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.ctype.text/plain", + "description": "Percentage of endpoints with content type text/plain", + "statistic": "1" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.method.GET", + "description": "Percentage of endpoints with method GET", + "statistic": "100" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.endpoint.total", + "description": "Count of total endpoints", + "statistic": "72" + }, + { + "level": "Info", + "reason": "Informational", + "site": "http://localhost:3000", + "key": "insight.response.slow", + "description": "Percentage of slow responses", + "statistic": "45" + } + ], + "site":[ + { + "@name": "http://localhost:3000", + "@host": "localhost", + "@port": "3000", + "@ssl": "false", + "alerts": [ + { + "pluginid": "10038", + "alertRef": "10038-1", + "alert": "Content Security Policy (CSP) Header Not Set", + "name": "Content Security Policy (CSP) Header Not Set", + "riskcode": "2", + "confidence": "3", + "riskdesc": "Medium (High)", + "desc": "

Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware. CSP provides a set of standard HTTP headers that allow website owners to declare approved sources of content that browsers should be allowed to load on that page \u2014 covered types are JavaScript, CSS, HTML frames, fonts, images and embeddable objects such as Java applets, ActiveX, audio and video files.

", + "instances":[ + { + "id": "6", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "60", + "uri": "http://localhost:3000/ftp/eastere.gg", + "nodeName": "http:\/\/localhost:3000\/ftp\/eastere.gg", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "62", + "uri": "http://localhost:3000/ftp/package-lock.json.bak", + "nodeName": "http:\/\/localhost:3000\/ftp\/package-lock.json.bak", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "61", + "uri": "http://localhost:3000/ftp/package.json.bak", + "nodeName": "http:\/\/localhost:3000\/ftp\/package.json.bak", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "5", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure that your web server, application server, load balancer, etc. is configured to set the Content-Security-Policy header.

", + "otherinfo": "", + "reference": "

https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP

https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html

https://www.w3.org/TR/CSP/

https://w3c.github.io/webappsec-csp/

https://web.dev/articles/csp

https://caniuse.com/#feat=contentsecuritypolicy

https://content-security-policy.com/

", + "cweid": "693", + "wascid": "15", + "sourceid": "1" + }, + { + "pluginid": "10098", + "alertRef": "10098", + "alert": "Cross-Domain Misconfiguration", + "name": "Cross-Domain Misconfiguration", + "riskcode": "2", + "confidence": "2", + "riskdesc": "Medium (Medium)", + "desc": "

Web browser data loading may be possible, due to a Cross Origin Resource Sharing (CORS) misconfiguration on the web server.

", + "instances":[ + { + "id": "0", + "uri": "http://localhost:3000/assets/public/favicon_js.ico", + "nodeName": "http:\/\/localhost:3000\/assets\/public\/favicon_js.ico", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Access-Control-Allow-Origin: *", + "otherinfo": "The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing." + }, + { + "id": "4", + "uri": "http://localhost:3000/polyfills.js", + "nodeName": "http:\/\/localhost:3000\/polyfills.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Access-Control-Allow-Origin: *", + "otherinfo": "The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing." + }, + { + "id": "1", + "uri": "http://localhost:3000/robots.txt", + "nodeName": "http:\/\/localhost:3000\/robots.txt", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Access-Control-Allow-Origin: *", + "otherinfo": "The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing." + }, + { + "id": "2", + "uri": "http://localhost:3000/runtime.js", + "nodeName": "http:\/\/localhost:3000\/runtime.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Access-Control-Allow-Origin: *", + "otherinfo": "The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing." + }, + { + "id": "3", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Access-Control-Allow-Origin: *", + "otherinfo": "The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing." + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure that sensitive data is not available in an unauthenticated manner (using IP address white-listing, for instance).

Configure the \"Access-Control-Allow-Origin\" HTTP header to a more restrictive set of domains, or remove all CORS headers entirely, to allow the web browser to enforce the Same Origin Policy (SOP) in a more restrictive manner.

", + "otherinfo": "

The CORS misconfiguration on the web server permits cross-domain read requests from arbitrary third party domains, using unauthenticated APIs on this domain. Web browser implementations do not permit arbitrary third parties to read the response from authenticated APIs, however. This reduces the risk somewhat. This misconfiguration could be used by an attacker to access data that is available in an unauthenticated manner, but which uses some other form of security, such as IP address white-listing.

", + "reference": "

https://vulncat.fortify.com/en/detail?category=HTML5&subcategory=Overly%20Permissive%20CORS%20Policy

", + "cweid": "264", + "wascid": "14", + "sourceid": "12" + }, + { + "pluginid": "10017", + "alertRef": "10017", + "alert": "Cross-Domain JavaScript Source File Inclusion", + "name": "Cross-Domain JavaScript Source File Inclusion", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

The page includes one or more script files from a third-party domain.

", + "instances":[ + { + "id": "13", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "14", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "82", + "uri": "http://localhost:3000/juice-shop/build/routes/fileServer.js:43:13", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/fileServer.js:43:13", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "11", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "16", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js", + "attack": "", + "evidence": "", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.

", + "otherinfo": "", + "reference": "", + "cweid": "829", + "wascid": "15", + "sourceid": "8" + }, + { + "pluginid": "90004", + "alertRef": "90004-2", + "alert": "Cross-Origin-Embedder-Policy Header Missing or Invalid", + "name": "Cross-Origin-Embedder-Policy Header Missing or Invalid", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

Cross-Origin-Embedder-Policy header is a response header that prevents a document from loading any cross-origin resources that don't explicitly grant the document permission (using CORP or CORS).

", + "instances":[ + { + "id": "49", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "Cross-Origin-Embedder-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "84", + "uri": "http://localhost:3000/ftp", + "nodeName": "http:\/\/localhost:3000\/ftp", + "method": "GET", + "param": "Cross-Origin-Embedder-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "98", + "uri": "http://localhost:3000/juice-shop/build/routes/fileServer.js:59:18", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/fileServer.js:59:18", + "method": "GET", + "param": "Cross-Origin-Embedder-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "99", + "uri": "http://localhost:3000/juice-shop/node_modules/express/lib/router/index.js:328:13", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/node_modules\/express\/lib\/router\/index.js:328:13", + "method": "GET", + "param": "Cross-Origin-Embedder-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "50", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "Cross-Origin-Embedder-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure that the application/web server sets the Cross-Origin-Embedder-Policy header appropriately, and that it sets the Cross-Origin-Embedder-Policy header to 'require-corp' for documents.

If possible, ensure that the end user uses a standards-compliant and modern web browser that supports the Cross-Origin-Embedder-Policy header (https://caniuse.com/mdn-http_headers_cross-origin-embedder-policy).

", + "otherinfo": "", + "reference": "

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Embedder-Policy

", + "cweid": "693", + "wascid": "14", + "sourceid": "1" + }, + { + "pluginid": "90004", + "alertRef": "90004-3", + "alert": "Cross-Origin-Opener-Policy Header Missing or Invalid", + "name": "Cross-Origin-Opener-Policy Header Missing or Invalid", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

Cross-Origin-Opener-Policy header is a response header that allows a site to control if others included documents share the same browsing context. Sharing the same browsing context with untrusted documents might lead to data leak.

", + "instances":[ + { + "id": "52", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "Cross-Origin-Opener-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "85", + "uri": "http://localhost:3000/ftp", + "nodeName": "http:\/\/localhost:3000\/ftp", + "method": "GET", + "param": "Cross-Origin-Opener-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "100", + "uri": "http://localhost:3000/juice-shop/build/routes/fileServer.js:59:18", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/fileServer.js:59:18", + "method": "GET", + "param": "Cross-Origin-Opener-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "101", + "uri": "http://localhost:3000/juice-shop/node_modules/express/lib/router/index.js:328:13", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/node_modules\/express\/lib\/router\/index.js:328:13", + "method": "GET", + "param": "Cross-Origin-Opener-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + }, + { + "id": "54", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "Cross-Origin-Opener-Policy", + "attack": "", + "evidence": "", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure that the application/web server sets the Cross-Origin-Opener-Policy header appropriately, and that it sets the Cross-Origin-Opener-Policy header to 'same-origin' for documents.

'same-origin-allow-popups' is considered as less secured and should be avoided.

If possible, ensure that the end user uses a standards-compliant and modern web browser that supports the Cross-Origin-Opener-Policy header (https://caniuse.com/mdn-http_headers_cross-origin-opener-policy).

", + "otherinfo": "", + "reference": "

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Opener-Policy

", + "cweid": "693", + "wascid": "14", + "sourceid": "1" + }, + { + "pluginid": "10110", + "alertRef": "10110", + "alert": "Dangerous JS Functions", + "name": "Dangerous JS Functions", + "riskcode": "1", + "confidence": "1", + "riskdesc": "Low (Low)", + "desc": "

A dangerous JS function seems to be in use that would leave the site vulnerable.

", + "instances":[ + { + "id": "58", + "uri": "http://localhost:3000/main.js", + "nodeName": "http:\/\/localhost:3000\/main.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "bypassSecurityTrustHtml(", + "otherinfo": "" + }, + { + "id": "109", + "uri": "http://localhost:3000/vendor.js", + "nodeName": "http:\/\/localhost:3000\/vendor.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "bypassSecurityTrustHtml(", + "otherinfo": "" + } + ], + "count": "2", + "systemic": false, + "solution": "

See the references for security advice on the use of these functions.

", + "otherinfo": "", + "reference": "

https://v17.angular.io/guide/security

", + "cweid": "749", + "wascid": "-1", + "sourceid": "22" + }, + { + "pluginid": "10063", + "alertRef": "10063-2", + "alert": "Deprecated Feature Policy Header Set", + "name": "Deprecated Feature Policy Header Set", + "riskcode": "1", + "confidence": "2", + "riskdesc": "Low (Medium)", + "desc": "

The header has now been renamed to Permissions-Policy.

", + "instances":[ + { + "id": "48", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Feature-Policy", + "otherinfo": "" + }, + { + "id": "59", + "uri": "http://localhost:3000/main.js", + "nodeName": "http:\/\/localhost:3000\/main.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Feature-Policy", + "otherinfo": "" + }, + { + "id": "43", + "uri": "http://localhost:3000/polyfills.js", + "nodeName": "http:\/\/localhost:3000\/polyfills.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Feature-Policy", + "otherinfo": "" + }, + { + "id": "41", + "uri": "http://localhost:3000/runtime.js", + "nodeName": "http:\/\/localhost:3000\/runtime.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Feature-Policy", + "otherinfo": "" + }, + { + "id": "46", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "", + "attack": "", + "evidence": "Feature-Policy", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "

Ensure that your web server, application server, load balancer, etc. is configured to set the Permissions-Policy header instead of the Feature-Policy header.

", + "otherinfo": "", + "reference": "

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Permissions-Policy

https://scotthelme.co.uk/goodbye-feature-policy-and-hello-permissions-policy/

", + "cweid": "16", + "wascid": "15", + "sourceid": "1" + }, + { + "pluginid": "10096", + "alertRef": "10096", + "alert": "Timestamp Disclosure - Unix", + "name": "Timestamp Disclosure - Unix", + "riskcode": "1", + "confidence": "1", + "riskdesc": "Low (Low)", + "desc": "

A timestamp was disclosed by the application/web server. - Unix

", + "instances":[ + { + "id": "20", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1680327869", + "otherinfo": "1680327869, which evaluates to: 2023-04-01 05:44:29." + }, + { + "id": "17", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1701244813", + "otherinfo": "1701244813, which evaluates to: 2023-11-29 08:00:13." + }, + { + "id": "19", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1839622642", + "otherinfo": "1839622642, which evaluates to: 2028-04-17 22:17:22." + }, + { + "id": "21", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "1863874346", + "otherinfo": "1863874346, which evaluates to: 2029-01-23 14:52:26." + }, + { + "id": "18", + "uri": "http://localhost:3000/styles.css", + "nodeName": "http:\/\/localhost:3000\/styles.css", + "method": "GET", + "param": "", + "attack": "", + "evidence": "2033195021", + "otherinfo": "2033195021, which evaluates to: 2034-06-06 08:23:41." + } + ], + "count": "5", + "systemic": true, + "solution": "

Manually confirm that the timestamp data is not sensitive, and that the data cannot be aggregated to disclose exploitable patterns.

", + "otherinfo": "

1680327869, which evaluates to: 2023-04-01 05:44:29.

", + "reference": "

https://cwe.mitre.org/data/definitions/200.html

", + "cweid": "497", + "wascid": "13", + "sourceid": "15" + }, + { + "pluginid": "10109", + "alertRef": "10109", + "alert": "Modern Web Application", + "name": "Modern Web Application", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

The application appears to be a modern web application. If you need to explore it automatically then the Ajax Spider may well be more effective than the standard one.

", + "instances":[ + { + "id": "25", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "95", + "uri": "http://localhost:3000/juice-shop/build/routes/fileServer.js:59:18", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/build\/routes\/fileServer.js:59:18", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "96", + "uri": "http://localhost:3000/juice-shop/node_modules/express/lib/router/index.js:328:13", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/node_modules\/express\/lib\/router\/index.js:328:13", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "97", + "uri": "http://localhost:3000/juice-shop/node_modules/serve-index/index.js:145:39", + "nodeName": "http:\/\/localhost:3000\/juice-shop\/node_modules\/serve-index\/index.js:145:39", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + }, + { + "id": "28", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "No links have been found while there are scripts, which is an indication that this is a modern web application." + } + ], + "count": "5", + "systemic": true, + "solution": "

This is an informational alert and so no changes are required.

", + "otherinfo": "

No links have been found while there are scripts, which is an indication that this is a modern web application.

", + "reference": "", + "cweid": "-1", + "wascid": "-1", + "sourceid": "1" + }, + { + "pluginid": "10049", + "alertRef": "10049-1", + "alert": "Non-Storable Content", + "name": "Non-Storable Content", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

The response contents are not storable by caching components such as proxy servers. If the response does not contain sensitive, personal or user-specific information, it may benefit from being stored and cached, to improve performance.

", + "instances":[ + { + "id": "72", + "uri": "http://localhost:3000/ftp/eastere.gg", + "nodeName": "http:\/\/localhost:3000\/ftp\/eastere.gg", + "method": "GET", + "param": "", + "attack": "", + "evidence": "403", + "otherinfo": "" + }, + { + "id": "71", + "uri": "http://localhost:3000/ftp/package.json.bak", + "nodeName": "http:\/\/localhost:3000\/ftp\/package.json.bak", + "method": "GET", + "param": "", + "attack": "", + "evidence": "403", + "otherinfo": "" + } + ], + "count": "2", + "systemic": true, + "solution": "

The content may be marked as storable by ensuring that the following conditions are satisfied:

The request method must be understood by the cache and defined as being cacheable (\"GET\", \"HEAD\", and \"POST\" are currently defined as cacheable)

The response status code must be understood by the cache (one of the 1XX, 2XX, 3XX, 4XX, or 5XX response classes are generally understood)

The \"no-store\" cache directive must not appear in the request or response header fields

For caching by \"shared\" caches such as \"proxy\" caches, the \"private\" response directive must not appear in the response

For caching by \"shared\" caches such as \"proxy\" caches, the \"Authorization\" header field must not appear in the request, unless the response explicitly allows it (using one of the \"must-revalidate\", \"public\", or \"s-maxage\" Cache-Control response directives)

In addition to the conditions above, at least one of the following conditions must also be satisfied by the response:

It must contain an \"Expires\" header field

It must contain a \"max-age\" response directive

For \"shared\" caches such as \"proxy\" caches, it must contain a \"s-maxage\" response directive

It must contain a \"Cache Control Extension\" that allows it to be cached

It must have a status code that is defined as cacheable by default (200, 203, 204, 206, 300, 301, 404, 405, 410, 414, 501).

", + "otherinfo": "", + "reference": "

https://datatracker.ietf.org/doc/html/rfc7234

https://datatracker.ietf.org/doc/html/rfc7231

https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html

", + "cweid": "524", + "wascid": "13", + "sourceid": "40" + }, + { + "pluginid": "10049", + "alertRef": "10049-3", + "alert": "Storable and Cacheable Content", + "name": "Storable and Cacheable Content", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

The response contents are storable by caching components such as proxy servers, and may be retrieved directly from the cache, rather than from the origin server by the caching servers, in response to similar requests from other users. If the response data is sensitive, personal or user-specific, this may result in sensitive information being leaked. In some cases, this may even result in a user gaining complete control of the session of another user, depending on the configuration of the caching components in use in their environment. This is primarily an issue where \"shared\" caching servers such as \"proxy\" caches are configured on the local network. This configuration is typically found in corporate or educational environments, for instance.

", + "instances":[ + { + "id": "39", + "uri": "http://localhost:3000/robots.txt", + "nodeName": "http:\/\/localhost:3000\/robots.txt", + "method": "GET", + "param": "", + "attack": "", + "evidence": "", + "otherinfo": "In the absence of an explicitly specified caching lifetime directive in the response, a liberal lifetime heuristic of 1 year was assumed. This is permitted by rfc7234." + } + ], + "count": "1", + "systemic": true, + "solution": "

Validate that the response does not contain sensitive, personal or user-specific information. If it does, consider the use of the following HTTP response headers, to limit, or prevent the content being stored and retrieved from the cache by another user:

Cache-Control: no-cache, no-store, must-revalidate, private

Pragma: no-cache

Expires: 0

This configuration directs both HTTP 1.0 and HTTP 1.1 compliant caching servers to not store the response, and to not retrieve the response (without validation) from the cache, in response to a similar request.

", + "otherinfo": "

In the absence of an explicitly specified caching lifetime directive in the response, a liberal lifetime heuristic of 1 year was assumed. This is permitted by rfc7234.

", + "reference": "

https://datatracker.ietf.org/doc/html/rfc7234

https://datatracker.ietf.org/doc/html/rfc7231

https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html

", + "cweid": "524", + "wascid": "13", + "sourceid": "6" + }, + { + "pluginid": "10049", + "alertRef": "10049-2", + "alert": "Storable but Non-Cacheable Content", + "name": "Storable but Non-Cacheable Content", + "riskcode": "0", + "confidence": "2", + "riskdesc": "Informational (Medium)", + "desc": "

The response contents are storable by caching components such as proxy servers, but will not be retrieved directly from the cache, without validating the request upstream, in response to similar requests from other users.

", + "instances":[ + { + "id": "45", + "uri": "http://localhost:3000", + "nodeName": "http:\/\/localhost:3000", + "method": "GET", + "param": "", + "attack": "", + "evidence": "max-age=0", + "otherinfo": "" + }, + { + "id": "38", + "uri": "http://localhost:3000/assets/public/favicon_js.ico", + "nodeName": "http:\/\/localhost:3000\/assets\/public\/favicon_js.ico", + "method": "GET", + "param": "", + "attack": "", + "evidence": "max-age=0", + "otherinfo": "" + }, + { + "id": "42", + "uri": "http://localhost:3000/polyfills.js", + "nodeName": "http:\/\/localhost:3000\/polyfills.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "max-age=0", + "otherinfo": "" + }, + { + "id": "40", + "uri": "http://localhost:3000/runtime.js", + "nodeName": "http:\/\/localhost:3000\/runtime.js", + "method": "GET", + "param": "", + "attack": "", + "evidence": "max-age=0", + "otherinfo": "" + }, + { + "id": "44", + "uri": "http://localhost:3000/sitemap.xml", + "nodeName": "http:\/\/localhost:3000\/sitemap.xml", + "method": "GET", + "param": "", + "attack": "", + "evidence": "max-age=0", + "otherinfo": "" + } + ], + "count": "5", + "systemic": true, + "solution": "", + "otherinfo": "", + "reference": "

https://datatracker.ietf.org/doc/html/rfc7234

https://datatracker.ietf.org/doc/html/rfc7231

https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html

", + "cweid": "524", + "wascid": "13", + "sourceid": "1" + } + ] + } + ], + "sequences":[ + ] + +} diff --git a/labs/lab5/zap/zap.yaml b/labs/lab5/zap/zap.yaml new file mode 100644 index 00000000..1ac573fa --- /dev/null +++ b/labs/lab5/zap/zap.yaml @@ -0,0 +1,50 @@ +env: + contexts: + - name: "Juice Shop Auth" + urls: + - "http://localhost:3000/*" + authentication: + method: "json" + parameters: + loginPageUrl: "http://localhost:3000/rest/user/login" + loginRequestBody: '{"email":"admin@juice-sh.op","password":"admin123"}' + loginRequestUrl: "http://localhost:3000/rest/user/login" + verification: + method: "response" + loggedInRegex: "authentication" + loggedOutRegex: "Unauthorized" + sessionManagement: + method: "cookie" + parameters: + failOnError: true + progressToStdout: false + +jobs: + - type: "spider" + parameters: + context: "Juice Shop Auth" + url: "http://localhost:3000" + maxDuration: 5 + + - type: "spiderAjax" + parameters: + context: "Juice Shop Auth" + url: "http://localhost:3000" + maxDuration: 10 + + - type: "activeScan" + parameters: + context: "Juice Shop Auth" + policy: "Default Policy" + + - type: "report" + parameters: + template: "traditional-html" + reportFile: "/zap/wrk/report-auth.html" + reportTitle: "Juice Shop Authenticated Scan" + + - type: "report" + parameters: + template: "traditional-json" + reportFile: "/zap/wrk/zap-report-auth.json" + reportTitle: "Juice Shop Authenticated Scan" diff --git a/labs/lab6/analysis/ansible-analysis.txt b/labs/lab6/analysis/ansible-analysis.txt new file mode 100644 index 00000000..2b216c5f --- /dev/null +++ b/labs/lab6/analysis/ansible-analysis.txt @@ -0,0 +1,5 @@ +=== Ansible Security Analysis (KICS) === +KICS Ansible findings: 10 + HIGH severity: 9 + MEDIUM severity: 0 + LOW severity: 1 diff --git a/labs/lab6/analysis/checkov-terraform-report.txt b/labs/lab6/analysis/checkov-terraform-report.txt new file mode 100644 index 00000000..7f164955 Binary files /dev/null and b/labs/lab6/analysis/checkov-terraform-report.txt differ diff --git a/labs/lab6/analysis/checkov-terraform-results.json b/labs/lab6/analysis/checkov-terraform-results.json new file mode 100644 index 00000000..b83fee81 --- /dev/null +++ b/labs/lab6/analysis/checkov-terraform-results.json @@ -0,0 +1,17139 @@ +{ + "check_type": "terraform", + "results": { + "passed_checks": [ + { + "check_id": "CKV_AWS_211", + "bc_check_id": null, + "check_name": "Ensure RDS uses a modern CaCert", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "ca_cert_identifier" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSCACertIsRecent", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_250", + "bc_check_id": null, + "check_name": "Ensure that RDS PostgreSQL instances use a non vulnerable version with the log_fdw extension (https://aws.amazon.com/security/security-bulletins/AWS-2022-004/)", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "engine", + "engine_version" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSPostgreSQLLogFDWExtension", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_388", + "bc_check_id": null, + "check_name": "Ensure AWS Aurora PostgreSQL is not exposed to local file read vulnerability", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.UnpatchedAuroraPostgresDB", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_354", + "bc_check_id": null, + "check_name": "Ensure RDS Performance Insights are encrypted using KMS CMKs", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "performance_insights_kms_key_id" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSInstancePerfInsightsEncryptionWithCMK", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_133", + "bc_check_id": null, + "check_name": "Ensure that RDS instances has backup policy", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "backup_retention_period" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceBackupRetentionPeriod", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_17", + "bc_check_id": null, + "check_name": "Ensure all data stored in RDS is not publicly accessible", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "publicly_accessible" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSPubliclyAccessible", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_16", + "bc_check_id": null, + "check_name": "Ensure all data stored in the RDS is securely encrypted at rest", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "storage_encrypted" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSEncryption", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_211", + "bc_check_id": null, + "check_name": "Ensure RDS uses a modern CaCert", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "ca_cert_identifier" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSCACertIsRecent", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_388", + "bc_check_id": null, + "check_name": "Ensure AWS Aurora PostgreSQL is not exposed to local file read vulnerability", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.UnpatchedAuroraPostgresDB", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_354", + "bc_check_id": null, + "check_name": "Ensure RDS Performance Insights are encrypted using KMS CMKs", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "performance_insights_kms_key_id" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSInstancePerfInsightsEncryptionWithCMK", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_60", + "bc_check_id": null, + "check_name": "Ensure IAM role allows only specific services or principals to assume it", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "assume_role_policy" + ] + }, + "code_block": [ + [ + 22, + "resource \"aws_iam_role\" \"app_role\" {\n" + ], + [ + 23, + " name = \"application-role\"\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " assume_role_policy = jsonencode({\n" + ], + [ + 26, + " Version = \"2012-10-17\"\n" + ], + [ + 27, + " Statement = [\n" + ], + [ + 28, + " {\n" + ], + [ + 29, + " Action = \"sts:AssumeRole\"\n" + ], + [ + 30, + " Effect = \"Allow\"\n" + ], + [ + 31, + " Principal = {\n" + ], + [ + 32, + " Service = \"ec2.amazonaws.com\"\n" + ], + [ + 33, + " }\n" + ], + [ + 34, + " }\n" + ], + [ + 35, + " ]\n" + ], + [ + 36, + " })\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 22, + 37 + ], + "resource": "aws_iam_role.app_role", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMRoleAllowsPublicAssume", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_274", + "bc_check_id": null, + "check_name": "Disallow IAM roles, users, and groups from using the AWS AdministratorAccess policy", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 22, + "resource \"aws_iam_role\" \"app_role\" {\n" + ], + [ + 23, + " name = \"application-role\"\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " assume_role_policy = jsonencode({\n" + ], + [ + 26, + " Version = \"2012-10-17\"\n" + ], + [ + 27, + " Statement = [\n" + ], + [ + 28, + " {\n" + ], + [ + 29, + " Action = \"sts:AssumeRole\"\n" + ], + [ + 30, + " Effect = \"Allow\"\n" + ], + [ + 31, + " Principal = {\n" + ], + [ + 32, + " Service = \"ec2.amazonaws.com\"\n" + ], + [ + 33, + " }\n" + ], + [ + 34, + " }\n" + ], + [ + 35, + " ]\n" + ], + [ + 36, + " })\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 22, + 37 + ], + "resource": "aws_iam_role.app_role", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMManagedAdminPolicy", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_61", + "bc_check_id": null, + "check_name": "Ensure AWS IAM policy does not allow assume role permission across all services", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "assume_role_policy" + ] + }, + "code_block": [ + [ + 22, + "resource \"aws_iam_role\" \"app_role\" {\n" + ], + [ + 23, + " name = \"application-role\"\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " assume_role_policy = jsonencode({\n" + ], + [ + 26, + " Version = \"2012-10-17\"\n" + ], + [ + 27, + " Statement = [\n" + ], + [ + 28, + " {\n" + ], + [ + 29, + " Action = \"sts:AssumeRole\"\n" + ], + [ + 30, + " Effect = \"Allow\"\n" + ], + [ + 31, + " Principal = {\n" + ], + [ + 32, + " Service = \"ec2.amazonaws.com\"\n" + ], + [ + 33, + " }\n" + ], + [ + 34, + " }\n" + ], + [ + 35, + " ]\n" + ], + [ + 36, + " })\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 22, + 37 + ], + "resource": "aws_iam_role.app_role", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMRoleAllowAssumeFromAccount", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_62", + "bc_check_id": null, + "check_name": "Ensure IAM policies that allow full \"*-*\" administrative privileges are not created", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMAdminPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_63", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's actions", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarActionPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_286", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow privilege escalation", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPrivilegeEscalation", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_287", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow credentials exposure", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMCredentialsExposure", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_62", + "bc_check_id": null, + "check_name": "Ensure IAM policies that allow full \"*-*\" administrative privileges are not created", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMAdminPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_63", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's actions", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarActionPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_286", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow privilege escalation", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPrivilegeEscalation", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_348", + "bc_check_id": null, + "check_name": "Ensure IAM root user does not have Access keys", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "user" + ] + }, + "code_block": [ + [ + 88, + "resource \"aws_iam_access_key\" \"service_key\" {\n" + ], + [ + 89, + " user = aws_iam_user.service_account.name\n" + ], + [ + 90, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 88, + 90 + ], + "resource": "aws_iam_access_key.service_key", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMUserRootAccessKeys", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_288", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow data exfiltration", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMDataExfiltration", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_62", + "bc_check_id": null, + "check_name": "Ensure IAM policies that allow full \"*-*\" administrative privileges are not created", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMAdminPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_290", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow write access without constraints", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMWriteAccess", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_63", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's actions", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarActionPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_287", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow credentials exposure", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMCredentialsExposure", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_93", + "bc_check_id": null, + "check_name": "Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3ProtectAgainstPolicyLockout", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_93", + "bc_check_id": null, + "check_name": "Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes)", + "check_result": { + "result": "PASSED", + "evaluated_keys": [ + "policy" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3ProtectAgainstPolicyLockout", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_277", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngressAny", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_260", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress80", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_24", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 22", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress22", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_277", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngressAny", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_260", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress80", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_25", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389", + "check_result": { + "result": "PASSED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress3389", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV2_AWS_69", + "bc_check_id": null, + "check_name": "Ensure AWS RDS database instance configured with encryption in transit", + "check_result": { + "result": "PASSED", + "entity": { + "aws_db_instance": { + "unencrypted_db": { + "__end_line__": 37, + "__start_line__": 5, + "allocated_storage": [ + 20 + ], + "backup_retention_period": [ + 0 + ], + "deletion_protection": [ + false + ], + "enabled_cloudwatch_logs_exports": [ + [] + ], + "engine": [ + "postgres" + ], + "engine_version": [ + "13.7" + ], + "identifier": [ + "mydb-unencrypted" + ], + "instance_class": [ + "db.t3.micro" + ], + "password": [ + "SuperSecretPassword123!" + ], + "publicly_accessible": [ + true + ], + "skip_final_snapshot": [ + true + ], + "storage_encrypted": [ + false + ], + "tags": [ + { + "Name": "Unencrypted Database" + } + ], + "username": [ + "admin" + ], + "vpc_security_group_ids": [ + [ + "aws_security_group.database_exposed.id" + ] + ], + "__address__": "aws_db_instance.unencrypted_db" + } + } + }, + "evaluated_keys": [ + "family", + "parameter[?(@/name=='db2comm')]/value", + "parameter[?(@/name=='require_secure_transport')]/value", + "resource_type", + "parameter[?(@/name=='rds/force_ssl')]/value" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_69", + "bc_check_id": null, + "check_name": "Ensure AWS RDS database instance configured with encryption in transit", + "check_result": { + "result": "PASSED", + "entity": { + "aws_db_instance": { + "weak_db": { + "__end_line__": 69, + "__start_line__": 40, + "allocated_storage": [ + 20 + ], + "auto_minor_version_upgrade": [ + false + ], + "engine": [ + "mysql" + ], + "engine_version": [ + "5.7.38" + ], + "identifier": [ + "mydb-weak" + ], + "instance_class": [ + "db.t3.micro" + ], + "kms_key_id": [ + "" + ], + "multi_az": [ + false + ], + "password": [ + "password123" + ], + "performance_insights_enabled": [ + false + ], + "publicly_accessible": [ + false + ], + "skip_final_snapshot": [ + true + ], + "storage_encrypted": [ + true + ], + "tags": [ + { + "Name": "Weak Database" + } + ], + "username": [ + "root" + ], + "__address__": "aws_db_instance.weak_db" + } + } + }, + "evaluated_keys": [ + "family", + "parameter[?(@/name=='db2comm')]/value", + "parameter[?(@/name=='require_secure_transport')]/value", + "resource_type", + "parameter[?(@/name=='rds/force_ssl')]/value" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_56", + "bc_check_id": null, + "check_name": "Ensure AWS Managed IAMFullAccess IAM policy is not used.", + "check_result": { + "result": "PASSED", + "entity": { + "aws_iam_role": { + "app_role": { + "__end_line__": 37, + "__start_line__": 22, + "assume_role_policy": [ + { + "Version": "2012-10-17", + "Statement": [ + { + "Action": "sts:AssumeRole", + "Effect": "Allow", + "Principal": { + "Service": "ec2.amazonaws.com" + } + } + ] + } + ], + "name": [ + "application-role" + ], + "__address__": "aws_iam_role.app_role" + } + } + }, + "evaluated_keys": [ + "managed_policy_arns/*", + "name", + "arn", + "managed_policy_arn", + "policy_arn" + ] + }, + "code_block": [ + [ + 22, + "resource \"aws_iam_role\" \"app_role\" {\n" + ], + [ + 23, + " name = \"application-role\"\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " assume_role_policy = jsonencode({\n" + ], + [ + 26, + " Version = \"2012-10-17\"\n" + ], + [ + 27, + " Statement = [\n" + ], + [ + 28, + " {\n" + ], + [ + 29, + " Action = \"sts:AssumeRole\"\n" + ], + [ + 30, + " Effect = \"Allow\"\n" + ], + [ + 31, + " Principal = {\n" + ], + [ + 32, + " Service = \"ec2.amazonaws.com\"\n" + ], + [ + 33, + " }\n" + ], + [ + 34, + " }\n" + ], + [ + 35, + " ]\n" + ], + [ + 36, + " })\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 22, + 37 + ], + "resource": "aws_iam_role.app_role", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV2_AWS_5", + "bc_check_id": null, + "check_name": "Ensure that Security Groups are attached to another resource", + "check_result": { + "result": "PASSED", + "entity": { + "aws_security_group": { + "database_exposed": { + "__end_line__": 92, + "__start_line__": 65, + "description": [ + "Database accessible from internet" + ], + "egress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "from_port": [ + 0 + ], + "protocol": [ + "-1" + ], + "to_port": [ + 0 + ] + } + ], + "ingress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "description": [ + "MySQL from anywhere" + ], + "from_port": [ + 3306 + ], + "protocol": [ + "tcp" + ], + "to_port": [ + 3306 + ] + }, + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "description": [ + "PostgreSQL from anywhere" + ], + "from_port": [ + 5432 + ], + "protocol": [ + "tcp" + ], + "to_port": [ + 5432 + ] + } + ], + "name": [ + "database-public" + ], + "vpc_id": [ + "vpc-12345678" + ], + "__address__": "aws_security_group.database_exposed" + } + } + }, + "evaluated_keys": [ + "networking", + "resource_type" + ] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": { + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "entity_tags": { + "Name": "Unencrypted Database" + }, + "evaluations": null, + "file_abs_path": "/tf/database.tf", + "resource_address": null + }, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_57", + "bc_check_id": null, + "check_name": "S3 Bucket has an ACL defined which allows public WRITE access.", + "check_result": { + "result": "PASSED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "access_control_policy/grant", + "access_control_policy", + "acl", + "resource_type", + "access_control_policy/grant/*/grantee/uri", + "access_control_policy/grant/*/permission" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_57", + "bc_check_id": null, + "check_name": "S3 Bucket has an ACL defined which allows public WRITE access.", + "check_result": { + "result": "PASSED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "access_control_policy/grant", + "access_control_policy", + "acl", + "resource_type", + "access_control_policy/grant/*/grantee/uri", + "access_control_policy/grant/*/permission" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_16", + "bc_check_id": null, + "check_name": "Ensure that Auto Scaling is enabled on your DynamoDB tables", + "check_result": { + "result": "PASSED", + "entity": { + "aws_dynamodb_table": { + "unencrypted_table": { + "__end_line__": 92, + "__start_line__": 72, + "attribute": [ + { + "name": [ + "id" + ], + "type": [ + "S" + ] + } + ], + "billing_mode": [ + "PAY_PER_REQUEST" + ], + "hash_key": [ + "id" + ], + "name": [ + "my-table" + ], + "point_in_time_recovery": [ + { + "enabled": [ + false + ] + } + ], + "tags": [ + { + "Name": "Unencrypted DynamoDB Table" + } + ], + "__address__": "aws_dynamodb_table.unencrypted_table" + } + } + }, + "evaluated_keys": [ + "resource_type", + "service_namespace", + "billing_mode" + ] + }, + "code_block": [ + [ + 72, + "resource \"aws_dynamodb_table\" \"unencrypted_table\" {\n" + ], + [ + 73, + " name = \"my-table\"\n" + ], + [ + 74, + " billing_mode = \"PAY_PER_REQUEST\"\n" + ], + [ + 75, + " hash_key = \"id\"\n" + ], + [ + 76, + "\n" + ], + [ + 77, + " attribute {\n" + ], + [ + 78, + " name = \"id\"\n" + ], + [ + 79, + " type = \"S\"\n" + ], + [ + 80, + " }\n" + ], + [ + 81, + "\n" + ], + [ + 82, + " # No server_side_encryption configuration!\n" + ], + [ + 83, + " \n" + ], + [ + 84, + " # No point-in-time recovery\n" + ], + [ + 85, + " point_in_time_recovery {\n" + ], + [ + 86, + " enabled = false # SECURITY ISSUE #17\n" + ], + [ + 87, + " }\n" + ], + [ + 88, + "\n" + ], + [ + 89, + " tags = {\n" + ], + [ + 90, + " Name = \"Unencrypted DynamoDB Table\"\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 72, + 92 + ], + "resource": "aws_dynamodb_table.unencrypted_table", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted DynamoDB Table" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_40", + "bc_check_id": null, + "check_name": "Ensure AWS IAM policy does not allow full IAM privileges", + "check_result": { + "result": "PASSED", + "entity": { + "aws_iam_role_policy": { + "s3_full_access": { + "__end_line__": 55, + "__start_line__": 39, + "name": [ + "s3-full-access" + ], + "policy": [ + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "s3:*" + ], + "Resource": "*" + } + ] + } + ], + "role": [ + "aws_iam_role.app_role.id" + ], + "__address__": "aws_iam_role_policy.s3_full_access" + } + } + }, + "evaluated_keys": [ + "policy/Statement[?(@/Effect == Allow)]/Action[*]", + "statement[?(@/effect == Allow)]/actions[*]", + "inline_policy/Statement[?(@/Effect == Allow)]/Action[*]" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV2_AWS_40", + "bc_check_id": null, + "check_name": "Ensure AWS IAM policy does not allow full IAM privileges", + "check_result": { + "result": "PASSED", + "entity": { + "aws_iam_user_policy": { + "service_policy": { + "__end_line__": 85, + "__start_line__": 67, + "name": [ + "service-inline-policy" + ], + "policy": [ + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "ec2:*", + "s3:*", + "rds:*" + ], + "Resource": "*" + } + ] + } + ], + "user": [ + "service-account" + ], + "__address__": "aws_iam_user_policy.service_policy" + } + } + }, + "evaluated_keys": [ + "policy/Statement[?(@/Effect == Allow)]/Action[*]", + "statement[?(@/effect == Allow)]/actions[*]", + "inline_policy/Statement[?(@/Effect == Allow)]/Action[*]" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV2_AWS_40", + "bc_check_id": null, + "check_name": "Ensure AWS IAM policy does not allow full IAM privileges", + "check_result": { + "result": "PASSED", + "entity": { + "aws_iam_policy": { + "privilege_escalation": { + "__end_line__": 125, + "__start_line__": 104, + "description": [ + "Policy that allows privilege escalation" + ], + "name": [ + "potential-privilege-escalation" + ], + "policy": [ + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreatePolicy", + "iam:CreateUser", + "iam:AttachUserPolicy", + "iam:AttachRolePolicy", + "iam:PutUserPolicy", + "iam:PutRolePolicy" + ], + "Resource": "*" + } + ] + } + ], + "__address__": "aws_iam_policy.privilege_escalation" + } + } + }, + "evaluated_keys": [ + "policy/Statement[?(@/Effect == Allow)]/Action[*]", + "statement[?(@/effect == Allow)]/actions[*]", + "inline_policy/Statement[?(@/Effect == Allow)]/Action[*]" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV2_AWS_22", + "bc_check_id": null, + "check_name": "Ensure an IAM User does not have access to the console", + "check_result": { + "result": "PASSED", + "entity": { + "aws_iam_user": { + "service_account": { + "__end_line__": 65, + "__start_line__": 58, + "name": [ + "service-account" + ], + "path": [ + "/system/" + ], + "tags": [ + { + "Name": "Service Account" + } + ], + "__address__": "aws_iam_user.service_account" + } + } + }, + "evaluated_keys": [ + "resource_type" + ] + }, + "code_block": [ + [ + 58, + "resource \"aws_iam_user\" \"service_account\" {\n" + ], + [ + 59, + " name = \"service-account\"\n" + ], + [ + 60, + " path = \"/system/\"\n" + ], + [ + 61, + "\n" + ], + [ + 62, + " tags = {\n" + ], + [ + 63, + " Name = \"Service Account\"\n" + ], + [ + 64, + " }\n" + ], + [ + 65, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 58, + 65 + ], + "resource": "aws_iam_user.service_account", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Service Account" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_20", + "bc_check_id": null, + "check_name": "S3 Bucket has an ACL defined which allows public READ access.", + "check_result": { + "result": "PASSED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "access_control_policy/grant", + "access_control_policy", + "acl", + "resource_type", + "access_control_policy/grant/*/grantee/uri" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_19", + "bc_check_id": null, + "check_name": "Ensure all data stored in the S3 bucket is securely encrypted at rest", + "check_result": { + "result": "PASSED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "server_side_encryption_configuration/rule/apply_server_side_encryption_by_default/sse_algorithm", + "rule/apply_server_side_encryption_by_default/sse_algorithm", + "resource_type" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_19", + "bc_check_id": null, + "check_name": "Ensure all data stored in the S3 bucket is securely encrypted at rest", + "check_result": { + "result": "PASSED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "server_side_encryption_configuration/rule/apply_server_side_encryption_by_default/sse_algorithm", + "rule/apply_server_side_encryption_by_default/sse_algorithm", + "resource_type" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + } + ], + "failed_checks": [ + { + "check_id": "CKV_AWS_133", + "bc_check_id": null, + "check_name": "Ensure that RDS instances has backup policy", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "backup_retention_period" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceBackupRetentionPeriod", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_17", + "bc_check_id": null, + "check_name": "Ensure all data stored in RDS is not publicly accessible", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "publicly_accessible" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSPubliclyAccessible", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_293", + "bc_check_id": null, + "check_name": "Ensure that AWS database instances have deletion protection enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "deletion_protection" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSInstanceDeletionProtection", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_16", + "bc_check_id": null, + "check_name": "Ensure all data stored in the RDS is securely encrypted at rest", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "storage_encrypted" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSEncryption", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_353", + "bc_check_id": null, + "check_name": "Ensure that RDS instances have performance insights enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "performance_insights_enabled" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSInstancePerformanceInsights", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_161", + "bc_check_id": null, + "check_name": "Ensure RDS database has IAM authentication enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "iam_database_authentication_enabled" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSIAMAuthentication", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_157", + "bc_check_id": null, + "check_name": "Ensure that RDS instances have Multi-AZ enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "multi_az" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSMultiAZEnabled", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_118", + "bc_check_id": null, + "check_name": "Ensure that enhanced monitoring is enabled for Amazon RDS instances", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "monitoring_interval" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSEnhancedMonitorEnabled", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_226", + "bc_check_id": null, + "check_name": "Ensure DB instance gets all minor upgrades automatically", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "auto_minor_version_upgrade" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceMinorUpgrade", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_129", + "bc_check_id": null, + "check_name": "Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "enabled_cloudwatch_logs_exports/[0]" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceLogging", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_293", + "bc_check_id": null, + "check_name": "Ensure that AWS database instances have deletion protection enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "deletion_protection" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSInstanceDeletionProtection", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_161", + "bc_check_id": null, + "check_name": "Ensure RDS database has IAM authentication enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "iam_database_authentication_enabled" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSIAMAuthentication", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_157", + "bc_check_id": null, + "check_name": "Ensure that RDS instances have Multi-AZ enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "multi_az" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSMultiAZEnabled", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_118", + "bc_check_id": null, + "check_name": "Ensure that enhanced monitoring is enabled for Amazon RDS instances", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "monitoring_interval" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.RDSEnhancedMonitorEnabled", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_226", + "bc_check_id": null, + "check_name": "Ensure DB instance gets all minor upgrades automatically", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "auto_minor_version_upgrade" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceMinorUpgrade", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_129", + "bc_check_id": null, + "check_name": "Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "enabled_cloudwatch_logs_exports/[0]" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DBInstanceLogging", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_119", + "bc_check_id": null, + "check_name": "Ensure DynamoDB Tables are encrypted using a KMS Customer Managed CMK", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "server_side_encryption/[0]/enabled", + "server_side_encryption/[0]/kms_key_arn" + ] + }, + "code_block": [ + [ + 72, + "resource \"aws_dynamodb_table\" \"unencrypted_table\" {\n" + ], + [ + 73, + " name = \"my-table\"\n" + ], + [ + 74, + " billing_mode = \"PAY_PER_REQUEST\"\n" + ], + [ + 75, + " hash_key = \"id\"\n" + ], + [ + 76, + "\n" + ], + [ + 77, + " attribute {\n" + ], + [ + 78, + " name = \"id\"\n" + ], + [ + 79, + " type = \"S\"\n" + ], + [ + 80, + " }\n" + ], + [ + 81, + "\n" + ], + [ + 82, + " # No server_side_encryption configuration!\n" + ], + [ + 83, + " \n" + ], + [ + 84, + " # No point-in-time recovery\n" + ], + [ + 85, + " point_in_time_recovery {\n" + ], + [ + 86, + " enabled = false # SECURITY ISSUE #17\n" + ], + [ + 87, + " }\n" + ], + [ + 88, + "\n" + ], + [ + 89, + " tags = {\n" + ], + [ + 90, + " Name = \"Unencrypted DynamoDB Table\"\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 72, + 92 + ], + "resource": "aws_dynamodb_table.unencrypted_table", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DynamoDBTablesEncrypted", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted DynamoDB Table" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_28", + "bc_check_id": null, + "check_name": "Ensure DynamoDB point in time recovery (backup) is enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "point_in_time_recovery/[0]/enabled" + ] + }, + "code_block": [ + [ + 72, + "resource \"aws_dynamodb_table\" \"unencrypted_table\" {\n" + ], + [ + 73, + " name = \"my-table\"\n" + ], + [ + 74, + " billing_mode = \"PAY_PER_REQUEST\"\n" + ], + [ + 75, + " hash_key = \"id\"\n" + ], + [ + 76, + "\n" + ], + [ + 77, + " attribute {\n" + ], + [ + 78, + " name = \"id\"\n" + ], + [ + 79, + " type = \"S\"\n" + ], + [ + 80, + " }\n" + ], + [ + 81, + "\n" + ], + [ + 82, + " # No server_side_encryption configuration!\n" + ], + [ + 83, + " \n" + ], + [ + 84, + " # No point-in-time recovery\n" + ], + [ + 85, + " point_in_time_recovery {\n" + ], + [ + 86, + " enabled = false # SECURITY ISSUE #17\n" + ], + [ + 87, + " }\n" + ], + [ + 88, + "\n" + ], + [ + 89, + " tags = {\n" + ], + [ + 90, + " Name = \"Unencrypted DynamoDB Table\"\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 72, + 92 + ], + "resource": "aws_dynamodb_table.unencrypted_table", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.DynamodbRecovery", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted DynamoDB Table" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV_AWS_288", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow data exfiltration", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMDataExfiltration", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_62", + "bc_check_id": null, + "check_name": "Ensure IAM policies that allow full \"*-*\" administrative privileges are not created", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMAdminPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_289", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow permissions management / resource exposure without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPermissionsManagement", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_290", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow write access without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMWriteAccess", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_355", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's resource for restrictable actions", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarResourcePolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_63", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's actions", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy", + "inline_policy" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarActionPolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_286", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow privilege escalation", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPrivilegeEscalation", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_287", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow credentials exposure", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMCredentialsExposure", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_288", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow data exfiltration", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMDataExfiltration", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_289", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow permissions management / resource exposure without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPermissionsManagement", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_290", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow write access without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMWriteAccess", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_355", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's resource for restrictable actions", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 39, + "resource \"aws_iam_role_policy\" \"s3_full_access\" {\n" + ], + [ + 40, + " name = \"s3-full-access\"\n" + ], + [ + 41, + " role = aws_iam_role.app_role.id\n" + ], + [ + 42, + "\n" + ], + [ + 43, + " policy = jsonencode({\n" + ], + [ + 44, + " Version = \"2012-10-17\"\n" + ], + [ + 45, + " Statement = [\n" + ], + [ + 46, + " {\n" + ], + [ + 47, + " Effect = \"Allow\"\n" + ], + [ + 48, + " Action = [\n" + ], + [ + 49, + " \"s3:*\" # All S3 actions!\n" + ], + [ + 50, + " ]\n" + ], + [ + 51, + " Resource = \"*\" # On all buckets!\n" + ], + [ + 52, + " }\n" + ], + [ + 53, + " ]\n" + ], + [ + 54, + " })\n" + ], + [ + 55, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 39, + 55 + ], + "resource": "aws_iam_role_policy.s3_full_access", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarResourcePolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_273", + "bc_check_id": null, + "check_name": "Ensure access is controlled through SSO and not AWS IAM defined users", + "check_result": { + "result": "FAILED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 58, + "resource \"aws_iam_user\" \"service_account\" {\n" + ], + [ + 59, + " name = \"service-account\"\n" + ], + [ + 60, + " path = \"/system/\"\n" + ], + [ + 61, + "\n" + ], + [ + 62, + " tags = {\n" + ], + [ + 63, + " Name = \"Service Account\"\n" + ], + [ + 64, + " }\n" + ], + [ + 65, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 58, + 65 + ], + "resource": "aws_iam_user.service_account", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMUserNotUsedForAccess", + "fixed_definition": null, + "entity_tags": { + "Name": "Service Account" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_288", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow data exfiltration", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMDataExfiltration", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_289", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow permissions management / resource exposure without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPermissionsManagement", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_40", + "bc_check_id": null, + "check_name": "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "user" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPolicyAttachedToGroupOrRoles", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_290", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow write access without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMWriteAccess", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_355", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's resource for restrictable actions", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarResourcePolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_287", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow credentials exposure", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 67, + "resource \"aws_iam_user_policy\" \"service_policy\" {\n" + ], + [ + 68, + " name = \"service-inline-policy\"\n" + ], + [ + 69, + " user = aws_iam_user.service_account.name\n" + ], + [ + 70, + "\n" + ], + [ + 71, + " policy = jsonencode({\n" + ], + [ + 72, + " Version = \"2012-10-17\"\n" + ], + [ + 73, + " Statement = [\n" + ], + [ + 74, + " {\n" + ], + [ + 75, + " Effect = \"Allow\"\n" + ], + [ + 76, + " Action = [\n" + ], + [ + 77, + " \"ec2:*\", # Full EC2 access\n" + ], + [ + 78, + " \"s3:*\", # Full S3 access\n" + ], + [ + 79, + " \"rds:*\" # Full RDS access\n" + ], + [ + 80, + " ]\n" + ], + [ + 81, + " Resource = \"*\"\n" + ], + [ + 82, + " }\n" + ], + [ + 83, + " ]\n" + ], + [ + 84, + " })\n" + ], + [ + 85, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 67, + 85 + ], + "resource": "aws_iam_user_policy.service_policy", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMCredentialsExposure", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf", + "breadcrumbs": { + "user": [ + { + "type": "resource", + "name": "aws_iam_user.service_account", + "path": "/tf/iam.tf", + "module_connection": false + } + ] + } + }, + { + "check_id": "CKV_AWS_289", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow permissions management / resource exposure without constraints", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPermissionsManagement", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_355", + "bc_check_id": null, + "check_name": "Ensure no IAM policies documents allow \"*\" as a statement's resource for restrictable actions", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMStarResourcePolicyDocument", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_286", + "bc_check_id": null, + "check_name": "Ensure IAM policies does not allow privilege escalation", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "policy/Statement/[0]/Action" + ] + }, + "code_block": [ + [ + 104, + "resource \"aws_iam_policy\" \"privilege_escalation\" {\n" + ], + [ + 105, + " name = \"potential-privilege-escalation\"\n" + ], + [ + 106, + " description = \"Policy that allows privilege escalation\"\n" + ], + [ + 107, + "\n" + ], + [ + 108, + " policy = jsonencode({\n" + ], + [ + 109, + " Version = \"2012-10-17\"\n" + ], + [ + 110, + " Statement = [\n" + ], + [ + 111, + " {\n" + ], + [ + 112, + " Effect = \"Allow\"\n" + ], + [ + 113, + " Action = [\n" + ], + [ + 114, + " \"iam:CreatePolicy\",\n" + ], + [ + 115, + " \"iam:CreateUser\",\n" + ], + [ + 116, + " \"iam:AttachUserPolicy\",\n" + ], + [ + 117, + " \"iam:AttachRolePolicy\",\n" + ], + [ + 118, + " \"iam:PutUserPolicy\",\n" + ], + [ + 119, + " \"iam:PutRolePolicy\"\n" + ], + [ + 120, + " ]\n" + ], + [ + 121, + " Resource = \"*\"\n" + ], + [ + 122, + " }\n" + ], + [ + 123, + " ]\n" + ], + [ + 124, + " })\n" + ], + [ + 125, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 104, + 125 + ], + "resource": "aws_iam_policy.privilege_escalation", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.IAMPrivilegeEscalation", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV_AWS_41", + "bc_check_id": null, + "check_name": "Ensure no hard coded AWS access key and secret key exists in provider", + "check_result": { + "result": "FAILED", + "evaluated_keys": [] + }, + "code_block": [ + [ + 5, + "provider \"aws\" {\n" + ], + [ + 6, + " region = \"us-east-1\"\n" + ], + [ + 7, + " # Hardcoded credentials - SECURITY ISSUE #1\n" + ], + [ + 8, + " access_key = \"AKIAI**********\"\n" + ], + [ + 9, + " secret_key = \"wJalrX**********\"\n" + ], + [ + 10, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 5, + 10 + ], + "resource": "aws.default", + "evaluations": null, + "check_class": "checkov.terraform.checks.provider.aws.credentials", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_56", + "bc_check_id": null, + "check_name": "Ensure S3 bucket has 'restrict_public_buckets' enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "restrict_public_buckets" + ] + }, + "code_block": [ + [ + 36, + "resource \"aws_s3_bucket_public_access_block\" \"bad_config\" {\n" + ], + [ + 37, + " bucket = aws_s3_bucket.public_data.id\n" + ], + [ + 38, + "\n" + ], + [ + 39, + " block_public_acls = false # Should be true\n" + ], + [ + 40, + " block_public_policy = false # Should be true\n" + ], + [ + 41, + " ignore_public_acls = false # Should be true\n" + ], + [ + 42, + " restrict_public_buckets = false # Should be true\n" + ], + [ + 43, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 36, + 43 + ], + "resource": "aws_s3_bucket_public_access_block.bad_config", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3RestrictPublicBuckets", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_55", + "bc_check_id": null, + "check_name": "Ensure S3 bucket has ignore public ACLs enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ignore_public_acls" + ] + }, + "code_block": [ + [ + 36, + "resource \"aws_s3_bucket_public_access_block\" \"bad_config\" {\n" + ], + [ + 37, + " bucket = aws_s3_bucket.public_data.id\n" + ], + [ + 38, + "\n" + ], + [ + 39, + " block_public_acls = false # Should be true\n" + ], + [ + 40, + " block_public_policy = false # Should be true\n" + ], + [ + 41, + " ignore_public_acls = false # Should be true\n" + ], + [ + 42, + " restrict_public_buckets = false # Should be true\n" + ], + [ + 43, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 36, + 43 + ], + "resource": "aws_s3_bucket_public_access_block.bad_config", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3IgnorePublicACLs", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_54", + "bc_check_id": null, + "check_name": "Ensure S3 bucket has block public policy enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "block_public_policy" + ] + }, + "code_block": [ + [ + 36, + "resource \"aws_s3_bucket_public_access_block\" \"bad_config\" {\n" + ], + [ + 37, + " bucket = aws_s3_bucket.public_data.id\n" + ], + [ + 38, + "\n" + ], + [ + 39, + " block_public_acls = false # Should be true\n" + ], + [ + 40, + " block_public_policy = false # Should be true\n" + ], + [ + 41, + " ignore_public_acls = false # Should be true\n" + ], + [ + 42, + " restrict_public_buckets = false # Should be true\n" + ], + [ + 43, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 36, + 43 + ], + "resource": "aws_s3_bucket_public_access_block.bad_config", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3BlockPublicPolicy", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_53", + "bc_check_id": null, + "check_name": "Ensure S3 bucket has block public ACLS enabled", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "block_public_acls" + ] + }, + "code_block": [ + [ + 36, + "resource \"aws_s3_bucket_public_access_block\" \"bad_config\" {\n" + ], + [ + 37, + " bucket = aws_s3_bucket.public_data.id\n" + ], + [ + 38, + "\n" + ], + [ + 39, + " block_public_acls = false # Should be true\n" + ], + [ + 40, + " block_public_policy = false # Should be true\n" + ], + [ + 41, + " ignore_public_acls = false # Should be true\n" + ], + [ + 42, + " restrict_public_buckets = false # Should be true\n" + ], + [ + 43, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 36, + 43 + ], + "resource": "aws_s3_bucket_public_access_block.bad_config", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.S3BlockPublicACLs", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_24", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 22", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[0]/from_port", + "ingress/[0]/to_port", + "ingress/[0]/cidr_blocks", + "ingress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress22", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_277", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[0]/from_port", + "ingress/[0]/to_port", + "ingress/[0]/cidr_blocks", + "ingress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngressAny", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_260", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[0]/from_port", + "ingress/[0]/to_port", + "ingress/[0]/cidr_blocks", + "ingress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress80", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_23", + "bc_check_id": null, + "check_name": "Ensure every security group and rule has a description", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "description", + "egress/[0]" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupRuleDescription", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_25", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[0]/from_port", + "ingress/[0]/to_port", + "ingress/[0]/cidr_blocks", + "ingress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress3389", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_382", + "bc_check_id": null, + "check_name": "Ensure no security groups allow egress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "egress/[0]/from_port", + "egress/[0]/to_port", + "egress/[0]/cidr_blocks", + "egress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedEgressAny", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_24", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 22", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[0]/from_port", + "ingress/[0]/to_port", + "ingress/[0]/cidr_blocks", + "ingress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress22", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_23", + "bc_check_id": null, + "check_name": "Ensure every security group and rule has a description", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "description", + "egress/[0]" + ] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupRuleDescription", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_25", + "bc_check_id": null, + "check_name": "Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "ingress/[1]/from_port", + "ingress/[1]/to_port", + "ingress/[1]/cidr_blocks", + "ingress/[1]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedIngress3389", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_382", + "bc_check_id": null, + "check_name": "Ensure no security groups allow egress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "egress/[0]/from_port", + "egress/[0]/to_port", + "egress/[0]/cidr_blocks", + "egress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedEgressAny", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_23", + "bc_check_id": null, + "check_name": "Ensure every security group and rule has a description", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "description", + "egress/[0]" + ] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupRuleDescription", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_382", + "bc_check_id": null, + "check_name": "Ensure no security groups allow egress from 0.0.0.0:0 to port -1", + "check_result": { + "result": "FAILED", + "evaluated_keys": [ + "egress/[0]/from_port", + "egress/[0]/to_port", + "egress/[0]/cidr_blocks", + "egress/[0]/ipv6_cidr_blocks" + ] + }, + "code_block": [ + [ + 65, + "resource \"aws_security_group\" \"database_exposed\" {\n" + ], + [ + 66, + " name = \"database-public\"\n" + ], + [ + 67, + " description = \"Database accessible from internet\"\n" + ], + [ + 68, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 69, + "\n" + ], + [ + 70, + " ingress {\n" + ], + [ + 71, + " description = \"MySQL from anywhere\"\n" + ], + [ + 72, + " from_port = 3306\n" + ], + [ + 73, + " to_port = 3306\n" + ], + [ + 74, + " protocol = \"tcp\"\n" + ], + [ + 75, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 76, + " }\n" + ], + [ + 77, + "\n" + ], + [ + 78, + " ingress {\n" + ], + [ + 79, + " description = \"PostgreSQL from anywhere\"\n" + ], + [ + 80, + " from_port = 5432\n" + ], + [ + 81, + " to_port = 5432\n" + ], + [ + 82, + " protocol = \"tcp\"\n" + ], + [ + 83, + " cidr_blocks = [\"0.0.0.0/0\"] # Database exposed!\n" + ], + [ + 84, + " }\n" + ], + [ + 85, + "\n" + ], + [ + 86, + " egress {\n" + ], + [ + 87, + " from_port = 0\n" + ], + [ + 88, + " to_port = 0\n" + ], + [ + 89, + " protocol = \"-1\"\n" + ], + [ + 90, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 91, + " }\n" + ], + [ + 92, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 65, + 92 + ], + "resource": "aws_security_group.database_exposed", + "evaluations": null, + "check_class": "checkov.terraform.checks.resource.aws.SecurityGroupUnrestrictedEgressAny", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV2_AWS_62", + "bc_check_id": null, + "check_name": "Ensure S3 buckets should have event notifications enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_62", + "bc_check_id": null, + "check_name": "Ensure S3 buckets should have event notifications enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_30", + "bc_check_id": null, + "check_name": "Ensure Postgres RDS as aws_db_instance has Query Logging enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_db_instance": { + "unencrypted_db": { + "__end_line__": 37, + "__start_line__": 5, + "allocated_storage": [ + 20 + ], + "backup_retention_period": [ + 0 + ], + "deletion_protection": [ + false + ], + "enabled_cloudwatch_logs_exports": [ + [] + ], + "engine": [ + "postgres" + ], + "engine_version": [ + "13.7" + ], + "identifier": [ + "mydb-unencrypted" + ], + "instance_class": [ + "db.t3.micro" + ], + "password": [ + "SuperSecretPassword123!" + ], + "publicly_accessible": [ + true + ], + "skip_final_snapshot": [ + true + ], + "storage_encrypted": [ + false + ], + "tags": [ + { + "Name": "Unencrypted Database" + } + ], + "username": [ + "admin" + ], + "vpc_security_group_ids": [ + [ + "aws_security_group.database_exposed.id" + ] + ], + "__address__": "aws_db_instance.unencrypted_db" + } + } + }, + "evaluated_keys": [ + "engine", + "resource_type", + "parameter/*/name" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_60", + "bc_check_id": null, + "check_name": "Ensure RDS instance with copy tags to snapshots is enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_db_instance": { + "unencrypted_db": { + "__end_line__": 37, + "__start_line__": 5, + "allocated_storage": [ + 20 + ], + "backup_retention_period": [ + 0 + ], + "deletion_protection": [ + false + ], + "enabled_cloudwatch_logs_exports": [ + [] + ], + "engine": [ + "postgres" + ], + "engine_version": [ + "13.7" + ], + "identifier": [ + "mydb-unencrypted" + ], + "instance_class": [ + "db.t3.micro" + ], + "password": [ + "SuperSecretPassword123!" + ], + "publicly_accessible": [ + true + ], + "skip_final_snapshot": [ + true + ], + "storage_encrypted": [ + false + ], + "tags": [ + { + "Name": "Unencrypted Database" + } + ], + "username": [ + "admin" + ], + "vpc_security_group_ids": [ + [ + "aws_security_group.database_exposed.id" + ] + ], + "__address__": "aws_db_instance.unencrypted_db" + } + } + }, + "evaluated_keys": [ + "engine", + "copy_tags_to_snapshot" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_db_instance\" \"unencrypted_db\" {\n" + ], + [ + 6, + " identifier = \"mydb-unencrypted\"\n" + ], + [ + 7, + " engine = \"postgres\"\n" + ], + [ + 8, + " engine_version = \"13.7\"\n" + ], + [ + 9, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 10, + " allocated_storage = 20\n" + ], + [ + 11, + " \n" + ], + [ + 12, + " username = \"admin\"\n" + ], + [ + 13, + " password = \"SuperSecretPassword123!\" # SECURITY ISSUE #9 - Hardcoded password!\n" + ], + [ + 14, + " \n" + ], + [ + 15, + " storage_encrypted = false # No encryption!\n" + ], + [ + 16, + " \n" + ], + [ + 17, + " publicly_accessible = true # SECURITY ISSUE #10 - Public access!\n" + ], + [ + 18, + " \n" + ], + [ + 19, + " skip_final_snapshot = true\n" + ], + [ + 20, + " \n" + ], + [ + 21, + " # No backup configuration\n" + ], + [ + 22, + " backup_retention_period = 0 # SECURITY ISSUE #11 - No backups!\n" + ], + [ + 23, + " \n" + ], + [ + 24, + " # Missing monitoring\n" + ], + [ + 25, + " enabled_cloudwatch_logs_exports = []\n" + ], + [ + 26, + " \n" + ], + [ + 27, + " # No deletion protection\n" + ], + [ + 28, + " deletion_protection = false # SECURITY ISSUE #12\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " # Using default security group\n" + ], + [ + 31, + " vpc_security_group_ids = [aws_security_group.database_exposed.id]\n" + ], + [ + 32, + " \n" + ], + [ + 33, + " tags = {\n" + ], + [ + 34, + " Name = \"Unencrypted Database\"\n" + ], + [ + 35, + " # Missing required tags\n" + ], + [ + 36, + " }\n" + ], + [ + 37, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 5, + 37 + ], + "resource": "aws_db_instance.unencrypted_db", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Unencrypted Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_60", + "bc_check_id": null, + "check_name": "Ensure RDS instance with copy tags to snapshots is enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_db_instance": { + "weak_db": { + "__end_line__": 69, + "__start_line__": 40, + "allocated_storage": [ + 20 + ], + "auto_minor_version_upgrade": [ + false + ], + "engine": [ + "mysql" + ], + "engine_version": [ + "5.7.38" + ], + "identifier": [ + "mydb-weak" + ], + "instance_class": [ + "db.t3.micro" + ], + "kms_key_id": [ + "" + ], + "multi_az": [ + false + ], + "password": [ + "password123" + ], + "performance_insights_enabled": [ + false + ], + "publicly_accessible": [ + false + ], + "skip_final_snapshot": [ + true + ], + "storage_encrypted": [ + true + ], + "tags": [ + { + "Name": "Weak Database" + } + ], + "username": [ + "root" + ], + "__address__": "aws_db_instance.weak_db" + } + } + }, + "evaluated_keys": [ + "engine", + "copy_tags_to_snapshot" + ] + }, + "code_block": [ + [ + 40, + "resource \"aws_db_instance\" \"weak_db\" {\n" + ], + [ + 41, + " identifier = \"mydb-weak\"\n" + ], + [ + 42, + " engine = \"mysql\"\n" + ], + [ + 43, + " engine_version = \"5.7.38\" # Old version with known vulnerabilities\n" + ], + [ + 44, + " instance_class = \"db.t3.micro\"\n" + ], + [ + 45, + " allocated_storage = 20\n" + ], + [ + 46, + " \n" + ], + [ + 47, + " username = \"root\" # Using default admin username\n" + ], + [ + 48, + " password = \"password123\" # Weak password!\n" + ], + [ + 49, + " \n" + ], + [ + 50, + " storage_encrypted = true\n" + ], + [ + 51, + " kms_key_id = \"\" # Empty KMS key - using default key\n" + ], + [ + 52, + " \n" + ], + [ + 53, + " publicly_accessible = false\n" + ], + [ + 54, + " \n" + ], + [ + 55, + " # Multi-AZ disabled\n" + ], + [ + 56, + " multi_az = false # SECURITY ISSUE #14 - No high availability\n" + ], + [ + 57, + " \n" + ], + [ + 58, + " # Auto minor version upgrade disabled\n" + ], + [ + 59, + " auto_minor_version_upgrade = false # SECURITY ISSUE #15\n" + ], + [ + 60, + " \n" + ], + [ + 61, + " # No performance insights\n" + ], + [ + 62, + " performance_insights_enabled = false\n" + ], + [ + 63, + " \n" + ], + [ + 64, + " skip_final_snapshot = true\n" + ], + [ + 65, + " \n" + ], + [ + 66, + " tags = {\n" + ], + [ + 67, + " Name = \"Weak Database\"\n" + ], + [ + 68, + " }\n" + ], + [ + 69, + "}\n" + ] + ], + "file_path": "/database.tf", + "file_abs_path": "/tf/database.tf", + "repo_file_path": "/tf/database.tf", + "file_line_range": [ + 40, + 69 + ], + "resource": "aws_db_instance.weak_db", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Weak Database" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/database.tf" + }, + { + "check_id": "CKV2_AWS_5", + "bc_check_id": null, + "check_name": "Ensure that Security Groups are attached to another resource", + "check_result": { + "result": "FAILED", + "entity": { + "aws_security_group": { + "allow_all": { + "__end_line__": 28, + "__start_line__": 5, + "description": [ + "Allow all inbound traffic from anywhere" + ], + "egress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "from_port": [ + 0 + ], + "protocol": [ + "-1" + ], + "to_port": [ + 0 + ] + } + ], + "ingress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "description": [ + "Allow all traffic" + ], + "from_port": [ + 0 + ], + "protocol": [ + "-1" + ], + "to_port": [ + 65535 + ] + } + ], + "name": [ + "allow-all-traffic" + ], + "tags": [ + { + "Name": "Allow All Security Group" + } + ], + "vpc_id": [ + "vpc-12345678" + ], + "__address__": "aws_security_group.allow_all" + } + } + }, + "evaluated_keys": [ + "networking", + "resource_type" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_security_group\" \"allow_all\" {\n" + ], + [ + 6, + " name = \"allow-all-traffic\"\n" + ], + [ + 7, + " description = \"Allow all inbound traffic from anywhere\"\n" + ], + [ + 8, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 9, + "\n" + ], + [ + 10, + " ingress {\n" + ], + [ + 11, + " description = \"Allow all traffic\"\n" + ], + [ + 12, + " from_port = 0\n" + ], + [ + 13, + " to_port = 65535\n" + ], + [ + 14, + " protocol = \"-1\" # All protocols\n" + ], + [ + 15, + " cidr_blocks = [\"0.0.0.0/0\"] # From anywhere!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + "\n" + ], + [ + 18, + " egress {\n" + ], + [ + 19, + " from_port = 0\n" + ], + [ + 20, + " to_port = 0\n" + ], + [ + 21, + " protocol = \"-1\"\n" + ], + [ + 22, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 23, + " }\n" + ], + [ + 24, + "\n" + ], + [ + 25, + " tags = {\n" + ], + [ + 26, + " Name = \"Allow All Security Group\"\n" + ], + [ + 27, + " }\n" + ], + [ + 28, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 5, + 28 + ], + "resource": "aws_security_group.allow_all", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Allow All Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV2_AWS_5", + "bc_check_id": null, + "check_name": "Ensure that Security Groups are attached to another resource", + "check_result": { + "result": "FAILED", + "entity": { + "aws_security_group": { + "ssh_open": { + "__end_line__": 62, + "__start_line__": 31, + "description": [ + "SSH access from anywhere" + ], + "egress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "from_port": [ + 0 + ], + "protocol": [ + "-1" + ], + "to_port": [ + 0 + ] + } + ], + "ingress": [ + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "description": [ + "SSH from anywhere" + ], + "from_port": [ + 22 + ], + "protocol": [ + "tcp" + ], + "to_port": [ + 22 + ] + }, + { + "cidr_blocks": [ + [ + "0.0.0.0/0" + ] + ], + "description": [ + "RDP from anywhere" + ], + "from_port": [ + 3389 + ], + "protocol": [ + "tcp" + ], + "to_port": [ + 3389 + ] + } + ], + "name": [ + "ssh-from-anywhere" + ], + "tags": [ + { + "Name": "SSH Open Security Group" + } + ], + "vpc_id": [ + "vpc-12345678" + ], + "__address__": "aws_security_group.ssh_open" + } + } + }, + "evaluated_keys": [ + "networking", + "resource_type" + ] + }, + "code_block": [ + [ + 31, + "resource \"aws_security_group\" \"ssh_open\" {\n" + ], + [ + 32, + " name = \"ssh-from-anywhere\"\n" + ], + [ + 33, + " description = \"SSH access from anywhere\"\n" + ], + [ + 34, + " vpc_id = \"vpc-12345678\"\n" + ], + [ + 35, + "\n" + ], + [ + 36, + " ingress {\n" + ], + [ + 37, + " description = \"SSH from anywhere\"\n" + ], + [ + 38, + " from_port = 22\n" + ], + [ + 39, + " to_port = 22\n" + ], + [ + 40, + " protocol = \"tcp\"\n" + ], + [ + 41, + " cidr_blocks = [\"0.0.0.0/0\"] # SSH from anywhere!\n" + ], + [ + 42, + " }\n" + ], + [ + 43, + "\n" + ], + [ + 44, + " ingress {\n" + ], + [ + 45, + " description = \"RDP from anywhere\"\n" + ], + [ + 46, + " from_port = 3389\n" + ], + [ + 47, + " to_port = 3389\n" + ], + [ + 48, + " protocol = \"tcp\"\n" + ], + [ + 49, + " cidr_blocks = [\"0.0.0.0/0\"] # RDP from anywhere!\n" + ], + [ + 50, + " }\n" + ], + [ + 51, + "\n" + ], + [ + 52, + " egress {\n" + ], + [ + 53, + " from_port = 0\n" + ], + [ + 54, + " to_port = 0\n" + ], + [ + 55, + " protocol = \"-1\"\n" + ], + [ + 56, + " cidr_blocks = [\"0.0.0.0/0\"]\n" + ], + [ + 57, + " }\n" + ], + [ + 58, + "\n" + ], + [ + 59, + " tags = {\n" + ], + [ + 60, + " Name = \"SSH Open Security Group\"\n" + ], + [ + 61, + " }\n" + ], + [ + 62, + "}\n" + ] + ], + "file_path": "/security_groups.tf", + "file_abs_path": "/tf/security_groups.tf", + "repo_file_path": "/tf/security_groups.tf", + "file_line_range": [ + 31, + 62 + ], + "resource": "aws_security_group.ssh_open", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "SSH Open Security Group" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/security_groups.tf" + }, + { + "check_id": "CKV_AWS_18", + "bc_check_id": null, + "check_name": "Ensure the S3 bucket has access logging enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "logging" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_18", + "bc_check_id": null, + "check_name": "Ensure the S3 bucket has access logging enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "logging" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_144", + "bc_check_id": null, + "check_name": "Ensure that S3 bucket has cross-region replication enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "rule/*/status", + "resource_type", + "replication_configuration/rules/*/status" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_144", + "bc_check_id": null, + "check_name": "Ensure that S3 bucket has cross-region replication enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "rule/*/status", + "resource_type", + "replication_configuration/rules/*/status" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_61", + "bc_check_id": null, + "check_name": "Ensure that an S3 bucket has a lifecycle configuration", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "lifecycle_rule", + "resource_type" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_61", + "bc_check_id": null, + "check_name": "Ensure that an S3 bucket has a lifecycle configuration", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "lifecycle_rule", + "resource_type" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_40", + "bc_check_id": null, + "check_name": "Ensure AWS IAM policy does not allow full IAM privileges", + "check_result": { + "result": "FAILED", + "entity": { + "aws_iam_policy": { + "admin_policy": { + "__end_line__": 19, + "__start_line__": 5, + "description": [ + "Policy with wildcard permissions" + ], + "name": [ + "overly-permissive-policy" + ], + "policy": [ + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": "*", + "Resource": "*" + } + ] + } + ], + "__address__": "aws_iam_policy.admin_policy" + } + } + }, + "evaluated_keys": [ + "policy/Statement[?(@/Effect == Allow)]/Action[*]", + "statement[?(@/effect == Allow)]/actions[*]", + "inline_policy/Statement[?(@/Effect == Allow)]/Action[*]" + ] + }, + "code_block": [ + [ + 5, + "resource \"aws_iam_policy\" \"admin_policy\" {\n" + ], + [ + 6, + " name = \"overly-permissive-policy\"\n" + ], + [ + 7, + " description = \"Policy with wildcard permissions\"\n" + ], + [ + 8, + "\n" + ], + [ + 9, + " policy = jsonencode({\n" + ], + [ + 10, + " Version = \"2012-10-17\"\n" + ], + [ + 11, + " Statement = [\n" + ], + [ + 12, + " {\n" + ], + [ + 13, + " Effect = \"Allow\"\n" + ], + [ + 14, + " Action = \"*\" # All actions allowed!\n" + ], + [ + 15, + " Resource = \"*\" # On all resources!\n" + ], + [ + 16, + " }\n" + ], + [ + 17, + " ]\n" + ], + [ + 18, + " })\n" + ], + [ + 19, + "}\n" + ] + ], + "file_path": "/iam.tf", + "file_abs_path": "/tf/iam.tf", + "repo_file_path": "/tf/iam.tf", + "file_line_range": [ + 5, + 19 + ], + "resource": "aws_iam_policy.admin_policy", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/iam.tf" + }, + { + "check_id": "CKV2_AWS_6", + "bc_check_id": null, + "check_name": "Ensure that S3 bucket has a Public Access block", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "block_public_policy", + "block_public_acls" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": { + "code_block": [ + [ + 36, + "resource \"aws_s3_bucket_public_access_block\" \"bad_config\" {\n" + ], + [ + 37, + " bucket = aws_s3_bucket.public_data.id\n" + ], + [ + 38, + "\n" + ], + [ + 39, + " block_public_acls = false # Should be true\n" + ], + [ + 40, + " block_public_policy = false # Should be true\n" + ], + [ + 41, + " ignore_public_acls = false # Should be true\n" + ], + [ + 42, + " restrict_public_buckets = false # Should be true\n" + ], + [ + 43, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_line_range": [ + 36, + 43 + ], + "resource": "aws_s3_bucket_public_access_block.bad_config", + "entity_tags": {}, + "evaluations": null, + "file_abs_path": "/tf/main.tf", + "resource_address": null + }, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV2_AWS_6", + "bc_check_id": null, + "check_name": "Ensure that S3 bucket has a Public Access block", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "block_public_policy", + "block_public_acls" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_145", + "bc_check_id": null, + "check_name": "Ensure that S3 buckets are encrypted with KMS by default", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "server_side_encryption_configuration/rule/apply_server_side_encryption_by_default/sse_algorithm", + "rule/apply_server_side_encryption_by_default/sse_algorithm", + "resource_type" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_145", + "bc_check_id": null, + "check_name": "Ensure that S3 buckets are encrypted with KMS by default", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "server_side_encryption_configuration/rule/apply_server_side_encryption_by_default/sse_algorithm", + "rule/apply_server_side_encryption_by_default/sse_algorithm", + "resource_type" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_21", + "bc_check_id": null, + "check_name": "Ensure all data stored in the S3 bucket have versioning enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "versioning_configuration/status", + "versioning/enabled" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_21", + "bc_check_id": null, + "check_name": "Ensure all data stored in the S3 bucket have versioning enabled", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "unencrypted_data": { + "__end_line__": 33, + "__start_line__": 24, + "acl": [ + "private" + ], + "bucket": [ + "my-unencrypted-bucket-lab6" + ], + "versioning": [ + { + "enabled": [ + false + ] + } + ], + "__address__": "aws_s3_bucket.unencrypted_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "resource_type", + "versioning_configuration/status", + "versioning/enabled" + ] + }, + "code_block": [ + [ + 24, + "resource \"aws_s3_bucket\" \"unencrypted_data\" {\n" + ], + [ + 25, + " bucket = \"my-unencrypted-bucket-lab6\"\n" + ], + [ + 26, + " acl = \"private\"\n" + ], + [ + 27, + " \n" + ], + [ + 28, + " # No server_side_encryption_configuration!\n" + ], + [ + 29, + " \n" + ], + [ + 30, + " versioning {\n" + ], + [ + 31, + " enabled = false # Versioning disabled\n" + ], + [ + 32, + " }\n" + ], + [ + 33, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 24, + 33 + ], + "resource": "aws_s3_bucket.unencrypted_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": null, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + }, + { + "check_id": "CKV_AWS_20", + "bc_check_id": null, + "check_name": "S3 Bucket has an ACL defined which allows public READ access.", + "check_result": { + "result": "FAILED", + "entity": { + "aws_s3_bucket": { + "public_data": { + "__end_line__": 21, + "__start_line__": 13, + "acl": [ + "public-read" + ], + "bucket": [ + "my-public-bucket-lab6" + ], + "tags": [ + { + "Name": "Public Data Bucket" + } + ], + "__address__": "aws_s3_bucket.public_data", + "__provider_address__": "aws.default" + } + } + }, + "evaluated_keys": [ + "access_control_policy/grant", + "access_control_policy", + "acl", + "resource_type", + "access_control_policy/grant/*/grantee/uri" + ] + }, + "code_block": [ + [ + 13, + "resource \"aws_s3_bucket\" \"public_data\" {\n" + ], + [ + 14, + " bucket = \"my-public-bucket-lab6\"\n" + ], + [ + 15, + " acl = \"public-read\" # Public access enabled!\n" + ], + [ + 16, + "\n" + ], + [ + 17, + " tags = {\n" + ], + [ + 18, + " Name = \"Public Data Bucket\"\n" + ], + [ + 19, + " # Missing required tags: Environment, Owner, CostCenter\n" + ], + [ + 20, + " }\n" + ], + [ + 21, + "}\n" + ] + ], + "file_path": "/main.tf", + "file_abs_path": "/tf/main.tf", + "repo_file_path": "/tf/main.tf", + "file_line_range": [ + 13, + 21 + ], + "resource": "aws_s3_bucket.public_data", + "evaluations": null, + "check_class": "checkov.common.graph.checks_infra.base_check", + "fixed_definition": null, + "entity_tags": { + "Name": "Public Data Bucket" + }, + "caller_file_path": null, + "caller_file_line_range": null, + "resource_address": null, + "severity": null, + "bc_category": null, + "benchmarks": {}, + "description": null, + "short_description": null, + "vulnerability_details": null, + "connected_node": null, + "guideline": null, + "details": [], + "check_len": null, + "definition_context_file_path": "/tf/main.tf" + } + ], + "skipped_checks": [], + "parsing_errors": [] + }, + "summary": { + "passed": 48, + "failed": 78, + "skipped": 0, + "parsing_errors": 0, + "resource_count": 16, + "checkov_version": "3.2.508" + }, + "url": "Add an api key '--bc-api-key ' to see more detailed insights via https://bridgecrew.cloud" +} diff --git a/labs/lab6/analysis/kics-ansible-report.html b/labs/lab6/analysis/kics-ansible-report.html new file mode 100644 index 00000000..99e42f1f --- /dev/null +++ b/labs/lab6/analysis/kics-ansible-report.html @@ -0,0 +1,52 @@ +KICS Scan ResultCheckmarx logo
KICS v2.1.20 +Scanned paths: /src +Platforms: Common, AnsibleStart time: 19:19:25, Mar 13 2026 +End time: 19:19:28, Mar 13 2026

Vulnerabilities:

0 +CRITICAL
9 +HIGH
0 +MEDIUM
1 +LOW
0 +INFO
10 +TOTAL

Passwords And Secrets - Generic Password

Platform: Common +CWE: 798 +Risk Score: 7.8 +Category: Secret Management
Query to find passwords and secrets in infrastructure code.https://docs.kics.io/latest/secrets/
Results (6)
File: ../../src/configure.yml +Line 16
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
15
16 admin_password: <SECRET-MASKED-ON-PURPOSE>
17
File: ../../src/inventory.ini +Line 19
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
18ansible_become_password=<SECRET-MASKED-ON-PURPOSE>
19db_admin_password=<SECRET-MASKED-ON-PURPOSE>
20api_secret_key=<SECRET-MASKED-ON-PURPOSE>
File: ../../src/inventory.ini +Line 18
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
17# SECURITY ISSUE #38 - Global variables with secrets
18ansible_become_password=<SECRET-MASKED-ON-PURPOSE>
19db_admin_password=<SECRET-MASKED-ON-PURPOSE>
File: ../../src/inventory.ini +Line 5
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
4[webservers]
5web1.example.com ansible_user=root ansible_password=<SECRET-MASKED-ON-PURPOSE>
6web2.example.com ansible_user=root ansible_ssh_pass=RootPass123!
File: ../../src/inventory.ini +Line 10
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
9# SECURITY ISSUE #36 - Using root user and default port
10db1.example.com ansible_user=root ansible_port=22 ansible_password=<SECRET-MASKED-ON-PURPOSE>
11
File: ../../src/deploy.yml +Line 12
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
11 # SECURITY ISSUE #1 - Hardcoded password in playbook!
12 db_password: <SECRET-MASKED-ON-PURPOSE>
13 # SECURITY ISSUE #2 - Hardcoded API key!

Passwords And Secrets - Generic Secret

Platform: Common +CWE: 798 +Risk Score: 7.8 +Category: Secret Management
Query to find passwords and secrets in infrastructure code.https://docs.kics.io/latest/secrets/
Results (1)
File: ../../src/inventory.ini +Line 20
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
19db_admin_password=<SECRET-MASKED-ON-PURPOSE>
20api_secret_key=<SECRET-MASKED-ON-PURPOSE>
21

Passwords And Secrets - Password in URL

Platform: Common +CWE: 798 +Risk Score: 7.8 +Category: Secret Management
Query to find passwords and secrets in infrastructure code.https://docs.kics.io/latest/secrets/
Results (2)
File: ../../src/deploy.yml +Line 72
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
71 git:
72 repo: <SECRET-MASKED-ON-PURPOSE>/company/repo.git'
73 dest: /var/www/myapp
File: ../../src/deploy.yml +Line 16
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
15 # SECURITY ISSUE #3 - Database connection string with credentials
16 db_connection: <SECRET-MASKED-ON-PURPOSE>:5432/myapp"
17

Unpinned Package Version

Platform: Ansible +CWE: 706 +Risk Score: 4.1 +Category: Supply-Chain
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of servicehttps://ansible.readthedocs.io/projects/lint/rules/package-latest/
Results (1)
File: ../../src/deploy.yml +Line 99
Expected: State's task when installing a package should not be defined as 'latest' or should have set 'update_only' to 'true' +Found: State's task is set to 'latest'
98 name: myapp
99 state: latest # Should pin specific version
100 update_cache: yes

KICS is open and will always stay such. Both the scanning engine and the security queries are clear and open for the software development community.
Spread the love:
\ No newline at end of file diff --git a/labs/lab6/analysis/kics-ansible-report.txt b/labs/lab6/analysis/kics-ansible-report.txt new file mode 100644 index 00000000..4b000e0b --- /dev/null +++ b/labs/lab6/analysis/kics-ansible-report.txt @@ -0,0 +1,71 @@ + + + + MLLLLLM MLLLLLLLLL LLLLLLL KLLLLLLLLLLLLLLLL LLLLLLLLLLLLLLLLLLLLLLL + MMMMMMM MMMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMML KLMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM MMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM MMMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM LMMMMMMMMML MMMMMMMK LMMMMMMMMMLLMLLLLLLLLLLLLLL LMMMMMMMLLLLLLLLLLLLLLLLLLLLM + MMMMMMM MMMMMMMMMLM MMMMMMMK LMMMMMMMM LMMMMMML + MMMMMMMLMMMMMMMML MMMMMMMK MMMMMMML LMMMMMMMMLLLLLLLLLLLLLMLL + MMMMMMMMMMMMMMMM MMMMMMMK MMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMMMMMMMMMMMMM MMMMMMMK MMMMMMM LMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMM KLMMMMMMMMML MMMMMMMK LMMMMMMM MMMMMMMML + MMMMMMM LMMMMMMMMMM MMMMMMMK LMMMMMMMMLL MMMMMMML + MMMMMMM LMMMMMMMMMLL MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMMMMML LLLLLLLLLLLLLLLLLLLLMMMMMMMMMM + MMMMMMM MMMMMMMMMMML MMMMMMMK MMMMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM LLMMMMMMMMML MMMMMMMK LLMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMM MMMMMMMMMML MMMMMMMK KLMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMLK + + + + +Scanning with Keeping Infrastructure as Code Secure v2.1.20 + + + +Preparing Scan Assets: Done + + + + + + + + + + + + + + + + + + + + + +Unpinned Package Version, Severity: LOW, Results: 1 + [1]: ../../src/deploy.yml:99 +Passwords And Secrets - Password in URL, Severity: HIGH, Results: 2 + [1]: ../../src/deploy.yml:72 + [2]: ../../src/deploy.yml:16 +Passwords And Secrets - Generic Secret, Severity: HIGH, Results: 1 + [1]: ../../src/inventory.ini:20 +Passwords And Secrets - Generic Password, Severity: HIGH, Results: 6 + [1]: ../../src/configure.yml:16 + [2]: ../../src/inventory.ini:18 + [3]: ../../src/inventory.ini:19 + [4]: ../../src/deploy.yml:12 + [5]: ../../src/inventory.ini:5 + [6]: ../../src/inventory.ini:10 + +Results Summary: +CRITICAL: 0 +HIGH: 9 +MEDIUM: 0 +LOW: 1 +INFO: 0 +TOTAL: 10 + diff --git a/labs/lab6/analysis/kics-ansible-results.json b/labs/lab6/analysis/kics-ansible-results.json new file mode 100644 index 00000000..ef8870fc --- /dev/null +++ b/labs/lab6/analysis/kics-ansible-results.json @@ -0,0 +1,206 @@ +{ + "kics_version": "v2.1.20", + "files_scanned": 3, + "lines_scanned": 309, + "files_parsed": 3, + "lines_parsed": 260, + "lines_ignored": 49, + "files_failed_to_scan": 0, + "queries_total": 287, + "queries_failed_to_execute": 0, + "queries_failed_to_compute_similarity_id": 0, + "scan_id": "console", + "severity_counters": { + "CRITICAL": 0, + "HIGH": 9, + "INFO": 0, + "LOW": 1, + "MEDIUM": 0, + "TRACE": 0 + }, + "total_counter": 10, + "total_bom_resources": 0, + "start": "2026-03-13T19:19:25.330594065Z", + "end": "2026-03-13T19:19:28.960305204Z", + "paths": [ + "/src" + ], + "queries": [ + { + "query_name": "Passwords And Secrets - Generic Password", + "query_id": "487f4be7-3fd9-4506-a07a-eae252180c08", + "query_url": "https://docs.kics.io/latest/secrets/", + "severity": "HIGH", + "platform": "Common", + "cwe": "798", + "risk_score": "7.8", + "cloud_provider": "COMMON", + "category": "Secret Management", + "experimental": false, + "description": "Query to find passwords and secrets in infrastructure code.", + "description_id": "d69d8a89", + "files": [ + { + "file_name": "../../src/configure.yml", + "similarity_id": "2a8df5710fcdceeff811ec6532d6bcba17d9b6c603d0fecdfecc87f3b128aac5", + "line": 16, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/inventory.ini", + "similarity_id": "33738570f6448f344b956896d42f75b6216ace7814a46c8b6002d483c70c25b8", + "line": 19, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/inventory.ini", + "similarity_id": "97e89fa95681e604d1c4504858554eef5df45cee2055fe4505a1e6c1baf30aa8", + "line": 18, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/inventory.ini", + "similarity_id": "21ca21d14467d66a7b83bdc36e6292b114d13bde377021c0ca107078a8afa0d4", + "line": 5, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/inventory.ini", + "similarity_id": "369901d122f4a6d8adec4bec409dc25e92c96ff37c26a145b681702f7971a6a1", + "line": 10, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/deploy.yml", + "similarity_id": "d6fbd659326192fbd0bfcc010d5fc97f5db716570596efd8b730ce20e6606683", + "line": 12, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + } + ] + }, + { + "query_name": "Passwords And Secrets - Generic Secret", + "query_id": "3e2d3b2f-c22a-4df1-9cc6-a7a0aebb0c99", + "query_url": "https://docs.kics.io/latest/secrets/", + "severity": "HIGH", + "platform": "Common", + "cwe": "798", + "risk_score": "7.8", + "cloud_provider": "COMMON", + "category": "Secret Management", + "experimental": false, + "description": "Query to find passwords and secrets in infrastructure code.", + "description_id": "d69d8a89", + "files": [ + { + "file_name": "../../src/inventory.ini", + "similarity_id": "403da6866e75f1a26d35f59ab3d1763e8971d9febb1392b355bbbc357b156690", + "line": 20, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + } + ] + }, + { + "query_name": "Passwords And Secrets - Password in URL", + "query_id": "c4d3b58a-e6d4-450f-9340-04f1e702eaae", + "query_url": "https://docs.kics.io/latest/secrets/", + "severity": "HIGH", + "platform": "Common", + "cwe": "798", + "risk_score": "7.8", + "cloud_provider": "COMMON", + "category": "Secret Management", + "experimental": false, + "description": "Query to find passwords and secrets in infrastructure code.", + "description_id": "d69d8a89", + "files": [ + { + "file_name": "../../src/deploy.yml", + "similarity_id": "8c1dd50d50bac18f0c169f282f8af8782dfbc8f0c3271edb415981a73d6e5af5", + "line": 72, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + }, + { + "file_name": "../../src/deploy.yml", + "similarity_id": "895e407b4fb7371dee128429969964f297da99fed47494dbb55bb0627fb8b7ff", + "line": 16, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + } + ] + }, + { + "query_name": "Unpinned Package Version", + "query_id": "c05e2c20-0a2c-4686-b1f8-5f0a5612d4e8", + "query_url": "https://ansible.readthedocs.io/projects/lint/rules/package-latest/", + "severity": "LOW", + "platform": "Ansible", + "cwe": "706", + "risk_score": "4.1", + "cloud_provider": "COMMON", + "category": "Supply-Chain", + "experimental": false, + "description": "Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service", + "description_id": "43e877b3", + "files": [ + { + "file_name": "../../src/deploy.yml", + "similarity_id": "314c76114114e1e23377a262e72590a75327039d9d6137b44fdb17922fe5f990", + "line": 99, + "resource_type": "apt", + "resource_name": "Install application", + "issue_type": "IncorrectValue", + "search_key": "name={{Install application}}.{{apt}}.state", + "search_line": -1, + "search_value": "", + "expected_value": "State's task when installing a package should not be defined as 'latest' or should have set 'update_only' to 'true'", + "actual_value": "State's task is set to 'latest'" + } + ] + } + ] +} diff --git a/labs/lab6/analysis/kics-pulumi-report.html b/labs/lab6/analysis/kics-pulumi-report.html new file mode 100644 index 00000000..362d5dc1 --- /dev/null +++ b/labs/lab6/analysis/kics-pulumi-report.html @@ -0,0 +1,50 @@ +KICS Scan ResultCheckmarx logo
KICS v2.1.20 +Scanned paths: /src +Platforms: Pulumi, CommonStart time: 19:09:27, Mar 13 2026 +End time: 19:09:29, Mar 13 2026

Vulnerabilities:

1 +CRITICAL
2 +HIGH
1 +MEDIUM
0 +LOW
2 +INFO
6 +TOTAL

RDS DB Instance Publicly Accessible

Platform: Pulumi +CWE: 284 +Risk Score: 8.7 +Category: Insecure Configurations
RDS must not be defined with public interface, which means the attribute 'PubliclyAccessible' must be set to false.https://www.pulumi.com/registry/packages/aws/api-docs/rds/instance/#publiclyaccessible_yaml
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 104
Expected: 'resources.unencryptedDb.properties.publiclyAccessible' should be set to 'false' +Found: 'resources.unencryptedDb.properties.publiclyAccessible' is set to 'true'
103 storageEncrypted: false # SECURITY ISSUE #7 - No encryption!
104 publiclyAccessible: true # SECURITY ISSUE #8 - Public access!
105 skipFinalSnapshot: true

DynamoDB Table Not Encrypted

Platform: Pulumi +CWE: 311 +Risk Score: 7.1 +Category: Encryption
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 205
Expected: Attribute 'serverSideEncryption' should be defined +Found: Attribute 'serverSideEncryption' is not defined
204 type: aws:dynamodb:Table
205 properties:
206 name: my-table-pulumi-yaml

Passwords And Secrets - Generic Password

Platform: Common +CWE: 798 +Risk Score: 7.8 +Category: Secret Management
Query to find passwords and secrets in infrastructure code.https://docs.kics.io/latest/secrets/
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 16
Expected: Hardcoded secret key should not appear in source +Found: Hardcoded secret key appears in source
15 # SECURITY ISSUE #1 - Hardcoded database password
16 dbPassword: <SECRET-MASKED-ON-PURPOSE>
17

EC2 Instance Monitoring Disabled

Platform: Pulumi +CWE: 778 +Risk Score: 5.1 +Category: Observability
EC2 Instance should have detailed monitoring enabled. With detailed monitoring enabled data is available in 1-minute periodshttps://www.pulumi.com/registry/packages/aws/api-docs/ec2/instance/#monitoring_yaml
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 157
Expected: Attribute 'monitoring' should be defined and set to true +Found: Attribute 'monitoring' is not defined
156 type: aws:ec2:Instance
157 properties:
158 ami: ami-0c55b159cbfafe1f0

DynamoDB Table Point In Time Recovery Disabled

Platform: Pulumi +CWE: 459 +Risk Score: 0.0 +Category: Best Practices
It's considered a best practice to have point in time recovery enabled for DynamoDB Tablehttps://www.pulumi.com/registry/packages/aws/api-docs/dynamodb/table/#pointintimerecovery_yaml
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 213
Expected: Attribute 'enabled' in 'pointInTimeRecovery' should be set to true +Found: Attribute 'enabled' in 'pointInTimeRecovery' is set to false
212 pointInTimeRecovery:
213 enabled: false # SECURITY ISSUE #18 - No PITR
214 tags:

EC2 Not EBS Optimized

Platform: Pulumi +CWE: 459 +Risk Score: 0.0 +Category: Best Practices
It's considered a best practice for an EC2 instance to use an EBS optimized instance. This provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instancehttps://www.pulumi.com/registry/packages/aws/api-docs/ec2/instance/#ebsoptimized_yaml
Results (1)
File: ../../src/Pulumi-vulnerable.yaml +Line 157
Expected: Attribute 'ebsOptimized' should be defined and set to true +Found: Attribute 'ebsOptimized' is not defined
156 type: aws:ec2:Instance
157 properties:
158 ami: ami-0c55b159cbfafe1f0

KICS is open and will always stay such. Both the scanning engine and the security queries are clear and open for the software development community.
Spread the love:
\ No newline at end of file diff --git a/labs/lab6/analysis/kics-pulumi-report.txt b/labs/lab6/analysis/kics-pulumi-report.txt new file mode 100644 index 00000000..8e00c1ee --- /dev/null +++ b/labs/lab6/analysis/kics-pulumi-report.txt @@ -0,0 +1,129 @@ + + + + MLLLLLM MLLLLLLLLL LLLLLLL KLLLLLLLLLLLLLLLL LLLLLLLLLLLLLLLLLLLLLLL + MMMMMMM MMMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMML KLMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM MMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM MMMMMMMMMML MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM LMMMMMMMMML MMMMMMMK LMMMMMMMMMLLMLLLLLLLLLLLLLL LMMMMMMMLLLLLLLLLLLLLLLLLLLLM + MMMMMMM MMMMMMMMMLM MMMMMMMK LMMMMMMMM LMMMMMML + MMMMMMMLMMMMMMMML MMMMMMMK MMMMMMML LMMMMMMMMLLLLLLLLLLLLLMLL + MMMMMMMMMMMMMMMM MMMMMMMK MMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMMMMMMMMMMMMM MMMMMMMK MMMMMMM LMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMM KLMMMMMMMMML MMMMMMMK LMMMMMMM MMMMMMMML + MMMMMMM LMMMMMMMMMM MMMMMMMK LMMMMMMMMLL MMMMMMML + MMMMMMM LMMMMMMMMMLL MMMMMMMK LMMMMMMMMMMMMMMMMMMMMMMMMML LLLLLLLLLLLLLLLLLLLLMMMMMMMMMM + MMMMMMM MMMMMMMMMMML MMMMMMMK MMMMMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMMMM + MMMMMMM LLMMMMMMMMML MMMMMMMK LLMMMMMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMMMML + MMMMMMM MMMMMMMMMML MMMMMMMK KLMMMMMMMMMMMMMMMMML LMMMMMMMMMMMMMMMMMMMMMMMLK + + + + +Scanning with Keeping Infrastructure as Code Secure v2.1.20 + + + +Preparing Scan Assets: \ +Preparing Scan Assets: - +Preparing Scan Assets: | +Preparing Scan Assets: Done + + + + + + +EC2 Not EBS Optimized, Severity: INFO, Results: 1 +Description: It's considered a best practice for an EC2 instance to use an EBS optimized instance. This provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instance +Platform: Pulumi +CWE: 459 +Risk Score: 0.0 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/pulumi-queries/aws/d991e4ae-42ab-429b-ab43-d5e5fa9ca633 + + [1]: ../../src/Pulumi-vulnerable.yaml:157 + + 156: type: aws:ec2:Instance + 157: properties: + 158: ami: ami-0c55b159cbfafe1f0 + + +DynamoDB Table Point In Time Recovery Disabled, Severity: INFO, Results: 1 +Description: It's considered a best practice to have point in time recovery enabled for DynamoDB Table +Platform: Pulumi +CWE: 459 +Risk Score: 0.0 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/pulumi-queries/aws/327b0729-4c5c-4c44-8b5c-e476cd9c7290 + + [1]: ../../src/Pulumi-vulnerable.yaml:213 + + 212: pointInTimeRecovery: + 213: enabled: false # SECURITY ISSUE #18 - No PITR + 214: tags: + + +EC2 Instance Monitoring Disabled, Severity: MEDIUM, Results: 1 +Description: EC2 Instance should have detailed monitoring enabled. With detailed monitoring enabled data is available in 1-minute periods +Platform: Pulumi +CWE: 778 +Risk Score: 5.1 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/pulumi-queries/aws/daa581ef-731c-4121-832d-cf078f67759d + + [1]: ../../src/Pulumi-vulnerable.yaml:157 + + 156: type: aws:ec2:Instance + 157: properties: + 158: ami: ami-0c55b159cbfafe1f0 + + +Passwords And Secrets - Generic Password, Severity: HIGH, Results: 1 +Description: Query to find passwords and secrets in infrastructure code. +Platform: Common +CWE: 798 +Risk Score: 7.8 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/common-queries/a88baa34-e2ad-44ea-ad6f-8cac87bc7c71 + + [1]: ../../src/Pulumi-vulnerable.yaml:16 + + 015: # SECURITY ISSUE #1 - Hardcoded database password + 016: dbPassword: + 017: + + +DynamoDB Table Not Encrypted, Severity: HIGH, Results: 1 +Description: AWS DynamoDB Tables should have serverSideEncryption enabled +Platform: Pulumi +CWE: 311 +Risk Score: 7.1 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/pulumi-queries/aws/b6a7e0ae-aed8-4a19-a993-a95760bf8836 + + [1]: ../../src/Pulumi-vulnerable.yaml:205 + + 204: type: aws:dynamodb:Table + 205: properties: + 206: name: my-table-pulumi-yaml + + +RDS DB Instance Publicly Accessible, Severity: CRITICAL, Results: 1 +Description: RDS must not be defined with public interface, which means the attribute 'PubliclyAccessible' must be set to false. +Platform: Pulumi +CWE: 284 +Risk Score: 8.7 +Learn more about this vulnerability: https://docs.kics.io/latest/queries/pulumi-queries/aws/647de8aa-5a42-41b5-9faf-22136f117380 + + [1]: ../../src/Pulumi-vulnerable.yaml:104 + + 103: storageEncrypted: false # SECURITY ISSUE #7 - No encryption! + 104: publiclyAccessible: true # SECURITY ISSUE #8 - Public access! + 105: skipFinalSnapshot: true + + + +Results Summary: +CRITICAL: 1 +HIGH: 2 +MEDIUM: 1 +LOW: 0 +INFO: 2 +TOTAL: 6 + diff --git a/labs/lab6/analysis/kics-pulumi-results.json b/labs/lab6/analysis/kics-pulumi-results.json new file mode 100644 index 00000000..15c44e35 --- /dev/null +++ b/labs/lab6/analysis/kics-pulumi-results.json @@ -0,0 +1,202 @@ +{ + "kics_version": "v2.1.20", + "files_scanned": 1, + "lines_scanned": 280, + "files_parsed": 1, + "lines_parsed": 261, + "lines_ignored": 19, + "files_failed_to_scan": 0, + "queries_total": 21, + "queries_failed_to_execute": 0, + "queries_failed_to_compute_similarity_id": 0, + "scan_id": "console", + "severity_counters": { + "CRITICAL": 1, + "HIGH": 2, + "INFO": 2, + "LOW": 0, + "MEDIUM": 1, + "TRACE": 0 + }, + "total_counter": 6, + "total_bom_resources": 0, + "start": "2026-03-13T19:09:27.908059252Z", + "end": "2026-03-13T19:09:29.103913356Z", + "paths": [ + "/src" + ], + "queries": [ + { + "query_name": "RDS DB Instance Publicly Accessible", + "query_id": "647de8aa-5a42-41b5-9faf-22136f117380", + "query_url": "https://www.pulumi.com/registry/packages/aws/api-docs/rds/instance/#publiclyaccessible_yaml", + "severity": "CRITICAL", + "platform": "Pulumi", + "cwe": "284", + "risk_score": "8.7", + "cloud_provider": "AWS", + "category": "Insecure Configurations", + "experimental": false, + "description": "RDS must not be defined with public interface, which means the attribute 'PubliclyAccessible' must be set to false.", + "description_id": "be6d13f0", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "d5a823d6c65082cd99457a40fbabdf497078bce057628d51e5ec141537ee5d53", + "line": 104, + "resource_type": "aws:rds:Instance", + "resource_name": "unencryptedDb", + "issue_type": "IncorrectValue", + "search_key": "resources[unencryptedDb].properties.publiclyAccessible", + "search_line": 104, + "search_value": "", + "expected_value": "'resources.unencryptedDb.properties.publiclyAccessible' should be set to 'false'", + "actual_value": "'resources.unencryptedDb.properties.publiclyAccessible' is set to 'true'" + } + ] + }, + { + "query_name": "DynamoDB Table Not Encrypted", + "query_id": "b6a7e0ae-aed8-4a19-a993-a95760bf8836", + "query_url": "https://www.pulumi.com/registry/packages/aws/api-docs/dynamodb/table/#serversideencryption_yaml", + "severity": "HIGH", + "platform": "Pulumi", + "cwe": "311", + "risk_score": "7.1", + "cloud_provider": "AWS", + "category": "Encryption", + "experimental": false, + "description": "AWS DynamoDB Tables should have serverSideEncryption enabled", + "description_id": "fb6a0c51", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "15376a569938e2989eb0e9db7ff05213e04607ad547e550bbc579aaa5f64e8ce", + "line": 205, + "resource_type": "aws:dynamodb:Table", + "resource_name": "Unencrypted Table", + "issue_type": "MissingAttribute", + "search_key": "resources[unencryptedTable].properties", + "search_line": 205, + "search_value": "", + "expected_value": "Attribute 'serverSideEncryption' should be defined", + "actual_value": "Attribute 'serverSideEncryption' is not defined" + } + ] + }, + { + "query_name": "Passwords And Secrets - Generic Password", + "query_id": "487f4be7-3fd9-4506-a07a-eae252180c08", + "query_url": "https://docs.kics.io/latest/secrets/", + "severity": "HIGH", + "platform": "Common", + "cwe": "798", + "risk_score": "7.8", + "cloud_provider": "COMMON", + "category": "Secret Management", + "experimental": false, + "description": "Query to find passwords and secrets in infrastructure code.", + "description_id": "d69d8a89", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "1d73d5dae3d1a4824830f1a423473d36b79973a15ca9d23f1348c3dc8a30c7e4", + "line": 16, + "issue_type": "RedundantAttribute", + "search_key": "", + "search_line": 0, + "search_value": "", + "expected_value": "Hardcoded secret key should not appear in source", + "actual_value": "Hardcoded secret key appears in source" + } + ] + }, + { + "query_name": "EC2 Instance Monitoring Disabled", + "query_id": "daa581ef-731c-4121-832d-cf078f67759d", + "query_url": "https://www.pulumi.com/registry/packages/aws/api-docs/ec2/instance/#monitoring_yaml", + "severity": "MEDIUM", + "platform": "Pulumi", + "cwe": "778", + "risk_score": "5.1", + "cloud_provider": "AWS", + "category": "Observability", + "experimental": false, + "description": "EC2 Instance should have detailed monitoring enabled. With detailed monitoring enabled data is available in 1-minute periods", + "description_id": "7f96d3ac", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "4d692568cdae89e9d5e0ebef040401e6b922b9ac9a51a09554ba9629b730ad7c", + "line": 157, + "resource_type": "aws:ec2:Instance", + "resource_name": "Unencrypted Instance", + "issue_type": "MissingAttribute", + "search_key": "resources[unencryptedInstance].properties", + "search_line": 157, + "search_value": "", + "expected_value": "Attribute 'monitoring' should be defined and set to true", + "actual_value": "Attribute 'monitoring' is not defined" + } + ] + }, + { + "query_name": "DynamoDB Table Point In Time Recovery Disabled", + "query_id": "327b0729-4c5c-4c44-8b5c-e476cd9c7290", + "query_url": "https://www.pulumi.com/registry/packages/aws/api-docs/dynamodb/table/#pointintimerecovery_yaml", + "severity": "INFO", + "platform": "Pulumi", + "cwe": "459", + "risk_score": "0.0", + "cloud_provider": "AWS", + "category": "Best Practices", + "experimental": false, + "description": "It's considered a best practice to have point in time recovery enabled for DynamoDB Table", + "description_id": "6ff56c6e", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "7b5c72142600d0995c06ae3634f4776b5565be2c0323d509b9b51e9d915b03e8", + "line": 213, + "resource_type": "aws:dynamodb:Table", + "resource_name": "Unencrypted Table", + "issue_type": "IncorrectValue", + "search_key": "resources[unencryptedTable].properties.pointInTimeRecovery.enabled", + "search_line": 213, + "search_value": "", + "expected_value": "Attribute 'enabled' in 'pointInTimeRecovery' should be set to true", + "actual_value": "Attribute 'enabled' in 'pointInTimeRecovery' is set to false" + } + ] + }, + { + "query_name": "EC2 Not EBS Optimized", + "query_id": "d991e4ae-42ab-429b-ab43-d5e5fa9ca633", + "query_url": "https://www.pulumi.com/registry/packages/aws/api-docs/ec2/instance/#ebsoptimized_yaml", + "severity": "INFO", + "platform": "Pulumi", + "cwe": "459", + "risk_score": "0.0", + "cloud_provider": "AWS", + "category": "Best Practices", + "experimental": false, + "description": "It's considered a best practice for an EC2 instance to use an EBS optimized instance. This provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instance", + "description_id": "81a001dd", + "files": [ + { + "file_name": "../../src/Pulumi-vulnerable.yaml", + "similarity_id": "9d46c3011c910cf43e7d99575a291f05b1b4f701f62e99c132837e16f7ee27a4", + "line": 157, + "resource_type": "aws:ec2:Instance", + "resource_name": "unencryptedInstance", + "issue_type": "MissingAttribute", + "search_key": "resources[unencryptedInstance].properties", + "search_line": 157, + "search_value": "", + "expected_value": "Attribute 'ebsOptimized' should be defined and set to true", + "actual_value": "Attribute 'ebsOptimized' is not defined" + } + ] + } + ] +} diff --git a/labs/lab6/analysis/pulumi-analysis.txt b/labs/lab6/analysis/pulumi-analysis.txt new file mode 100644 index 00000000..59e4af14 --- /dev/null +++ b/labs/lab6/analysis/pulumi-analysis.txt @@ -0,0 +1,5 @@ +=== Pulumi Security Analysis (KICS) === +KICS Pulumi findings: 6 + HIGH severity: 2 + MEDIUM severity: 1 + LOW severity: 0 diff --git a/labs/lab6/analysis/terraform-comparison.txt b/labs/lab6/analysis/terraform-comparison.txt new file mode 100644 index 00000000..22632d9f --- /dev/null +++ b/labs/lab6/analysis/terraform-comparison.txt @@ -0,0 +1,4 @@ +=== Terraform Security Analysis === +tfsec findings: 53 +Checkov findings: 78 +Terrascan findings: 22 diff --git a/labs/lab6/analysis/terrascan-report.txt b/labs/lab6/analysis/terrascan-report.txt new file mode 100644 index 00000000..78ae8606 Binary files /dev/null and b/labs/lab6/analysis/terrascan-report.txt differ diff --git a/labs/lab6/analysis/terrascan-results.json b/labs/lab6/analysis/terrascan-results.json new file mode 100644 index 00000000..4c883d17 --- /dev/null +++ b/labs/lab6/analysis/terrascan-results.json @@ -0,0 +1,303 @@ +{ + "results": { + "violations": [ + { + "rule_name": "port3389OpenToInternet", + "description": "Security Groups - Unrestricted Specific Ports - remote desktop port (TCP,3389)", + "rule_id": "AC_AWS_0230", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "ssh_open", + "resource_type": "aws_security_group", + "module_name": "root", + "file": "security_groups.tf", + "plan_root": "./", + "line": 31 + }, + { + "rule_name": "rdsLogExportDisabled", + "description": "Ensure CloudWatch logging is enabled for AWS DB instances", + "rule_id": "AC_AWS_0454", + "severity": "MEDIUM", + "category": "Logging and Monitoring", + "resource_name": "unencrypted_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "rdsLogExportDisabled", + "description": "Ensure CloudWatch logging is enabled for AWS DB instances", + "rule_id": "AC_AWS_0454", + "severity": "MEDIUM", + "category": "Logging and Monitoring", + "resource_name": "weak_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 40 + }, + { + "rule_name": "rdsHasStorageEncrypted", + "description": "Ensure that your RDS database instances encrypt the underlying storage. Encrypted RDS instances use the industry standard AES-256 encryption algorithm to encrypt data on the server that hosts RDS DB instances. After data is encrypted, RDS handles authentication of access and description of data transparently with minimal impact on performance.", + "rule_id": "AC_AWS_0058", + "severity": "HIGH", + "category": "Data Protection", + "resource_name": "unencrypted_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "port5432AlbNetworkPortSecurity", + "description": "Security Groups - Unrestricted Specific Ports - Postgres SQL (TCP,5432)", + "rule_id": "AC_AWS_0262", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "database_exposed", + "resource_type": "aws_security_group", + "module_name": "root", + "file": "security_groups.tf", + "plan_root": "./", + "line": 65 + }, + { + "rule_name": "dynamoderecovery_enabled", + "description": "Ensure Point In Time Recovery is enabled for DynamoDB Tables", + "rule_id": "AC_AWS_0458", + "severity": "MEDIUM", + "category": "Resilience", + "resource_name": "unencrypted_table", + "resource_type": "aws_dynamodb_table", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 72 + }, + { + "rule_name": "rdsPubliclyAccessible", + "description": "RDS Instance publicly_accessible flag is true", + "rule_id": "AC_AWS_0054", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "unencrypted_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "rdsAutoMinorVersionUpgradeEnabled", + "description": "RDS Instance Auto Minor Version Upgrade flag disabled", + "rule_id": "AC_AWS_0056", + "severity": "HIGH", + "category": "Data Protection", + "resource_name": "weak_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 40 + }, + { + "rule_name": "s3Versioning", + "description": "Enabling S3 versioning will enable easy recovery from both unintended user actions, like deletes and overwrites", + "rule_id": "AC_AWS_0214", + "severity": "HIGH", + "category": "Resilience", + "resource_name": "public_data", + "resource_type": "aws_s3_bucket", + "module_name": "root", + "file": "main.tf", + "plan_root": "./", + "line": 13 + }, + { + "rule_name": "s3Versioning", + "description": "Enabling S3 versioning will enable easy recovery from both unintended user actions, like deletes and overwrites", + "rule_id": "AC_AWS_0214", + "severity": "HIGH", + "category": "Resilience", + "resource_name": "unencrypted_data", + "resource_type": "aws_s3_bucket", + "module_name": "root", + "file": "main.tf", + "plan_root": "./", + "line": 24 + }, + { + "rule_name": "rdsBackupDisabled", + "description": "Ensure automated backups are enabled for AWS RDS instances", + "rule_id": "AC_AWS_0052", + "severity": "HIGH", + "category": "Data Protection", + "resource_name": "unencrypted_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "rdsBackupDisabled", + "description": "Ensure automated backups are enabled for AWS RDS instances", + "rule_id": "AC_AWS_0052", + "severity": "HIGH", + "category": "Data Protection", + "resource_name": "weak_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 40 + }, + { + "rule_name": "port3306AlbNetworkPortSecurity", + "description": "Security Groups - Unrestricted Specific Ports - MySQL (TCP,3306)", + "rule_id": "AC_AWS_0253", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "database_exposed", + "resource_type": "aws_security_group", + "module_name": "root", + "file": "security_groups.tf", + "plan_root": "./", + "line": 65 + }, + { + "rule_name": "s3PublicAclNoAccessBlock", + "description": "Ensure S3 buckets do not have, a both public ACL on the bucket and a public access block.", + "rule_id": "AC_AWS_0496", + "severity": "HIGH", + "category": "Identity and Access Management", + "resource_name": "public_data", + "resource_type": "aws_s3_bucket", + "module_name": "root", + "file": "main.tf", + "plan_root": "./", + "line": 13 + }, + { + "rule_name": "portWideOpenToPublic", + "description": "Ensure no security groups is wide open to public, that is, allows traffic from 0.0.0.0/0 to ALL ports and protocols", + "rule_id": "AC_AWS_0275", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "allow_all", + "resource_type": "aws_security_group", + "module_name": "root", + "file": "security_groups.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "programmaticAccessCreation", + "description": "Ensure that there are no exposed Amazon IAM access keys in order to protect your AWS resources against unapproved access", + "rule_id": "AC_AWS_0133", + "severity": "MEDIUM", + "category": "Identity and Access Management", + "resource_name": "service_key", + "resource_type": "aws_iam_access_key", + "module_name": "root", + "file": "iam.tf", + "plan_root": "./", + "line": 88 + }, + { + "rule_name": "allUsersReadAccess", + "description": "Misconfigured S3 buckets can leak private information to the entire internet or allow unauthorized data tampering / deletion", + "rule_id": "AC_AWS_0210", + "severity": "HIGH", + "category": "Identity and Access Management", + "resource_name": "public_data", + "resource_type": "aws_s3_bucket", + "module_name": "root", + "file": "main.tf", + "plan_root": "./", + "line": 13 + }, + { + "rule_name": "dynamoDbEncrypted", + "description": "Ensure DynamoDb is encrypted at rest", + "rule_id": "AC_AWS_0457", + "severity": "MEDIUM", + "category": "Data Protection", + "resource_name": "unencrypted_table", + "resource_type": "aws_dynamodb_table", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 72 + }, + { + "rule_name": "iamUserInlinePolicy", + "description": "Ensure IAM policies are attached only to groups or roles", + "rule_id": "AC_AWS_0475", + "severity": "MEDIUM", + "category": "Identity and Access Management", + "resource_name": "service_policy", + "resource_type": "aws_iam_user_policy", + "module_name": "root", + "file": "iam.tf", + "plan_root": "./", + "line": 67 + }, + { + "rule_name": "port22OpenToInternet", + "description": "Security Groups - Unrestricted Specific Ports - (SSH,22)", + "rule_id": "AC_AWS_0227", + "severity": "HIGH", + "category": "Infrastructure Security", + "resource_name": "ssh_open", + "resource_type": "aws_security_group", + "module_name": "root", + "file": "security_groups.tf", + "plan_root": "./", + "line": 31 + }, + { + "rule_name": "rdsIamAuthEnabled", + "description": "Ensure that your RDS database has IAM Authentication enabled.", + "rule_id": "AC_AWS_0053", + "severity": "MEDIUM", + "category": "Data Protection", + "resource_name": "unencrypted_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 5 + }, + { + "rule_name": "rdsIamAuthEnabled", + "description": "Ensure that your RDS database has IAM Authentication enabled.", + "rule_id": "AC_AWS_0053", + "severity": "MEDIUM", + "category": "Data Protection", + "resource_name": "weak_db", + "resource_type": "aws_db_instance", + "module_name": "root", + "file": "database.tf", + "plan_root": "./", + "line": 40 + } + ], + "skipped_violations": null, + "scan_summary": { + "file/folder": "/iac", + "iac_type": "terraform", + "scanned_at": "2026-03-13 19:05:22.461208843 +0000 UTC", + "policies_validated": 167, + "violated_policies": 22, + "low": 0, + "medium": 8, + "high": 14 + } + } +} diff --git a/labs/lab6/analysis/tfsec-report.txt b/labs/lab6/analysis/tfsec-report.txt new file mode 100644 index 00000000..ed2b9cec --- /dev/null +++ b/labs/lab6/analysis/tfsec-report.txt @@ -0,0 +1,1099 @@ + +Result #1 CRITICAL Instance is exposed publicly. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:17 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_db_instance" "unencrypted_db" { + . + 17 [ publicly_accessible = true # SECURITY ISSUE #10 - Public access! (true) + .. + 37 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-no-public-db-access + Impact The database instance is publicly accessible + Resolution Set the database to not be publicly accessible + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/no-public-db-access/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #2 CRITICAL Security group rule allows ingress from public internet. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:15 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_security_group" "allow_all" { + . + 15 [ cidr_blocks = ["0.0.0.0/0"] # From anywhere! + .. + 28 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-ingress-sgr + Impact Your port exposed to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #3 CRITICAL Security group rule allows egress to multiple public internet addresses. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:22 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_security_group" "allow_all" { + . + 22 [ cidr_blocks = ["0.0.0.0/0"] + .. + 28 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-egress-sgr + Impact Your port is egressing data to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #4 CRITICAL Security group rule allows ingress from public internet. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:41 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 31 resource "aws_security_group" "ssh_open" { + .. + 41 [ cidr_blocks = ["0.0.0.0/0"] # SSH from anywhere! + .. + 62 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-ingress-sgr + Impact Your port exposed to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #5 CRITICAL Security group rule allows ingress from public internet. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:49 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 31 resource "aws_security_group" "ssh_open" { + .. + 49 [ cidr_blocks = ["0.0.0.0/0"] # RDP from anywhere! + .. + 62 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-ingress-sgr + Impact Your port exposed to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #6 CRITICAL Security group rule allows egress to multiple public internet addresses. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:56 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 31 resource "aws_security_group" "ssh_open" { + .. + 56 [ cidr_blocks = ["0.0.0.0/0"] + .. + 62 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-egress-sgr + Impact Your port is egressing data to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #7 CRITICAL Security group rule allows ingress from public internet. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:75 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 65 resource "aws_security_group" "database_exposed" { + .. + 75 [ cidr_blocks = ["0.0.0.0/0"] # Database exposed! + .. + 92 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-ingress-sgr + Impact Your port exposed to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #8 CRITICAL Security group rule allows ingress from public internet. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:83 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 65 resource "aws_security_group" "database_exposed" { + .. + 83 [ cidr_blocks = ["0.0.0.0/0"] # Database exposed! + .. + 92 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-ingress-sgr + Impact Your port exposed to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #9 CRITICAL Security group rule allows egress to multiple public internet addresses. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:90 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 65 resource "aws_security_group" "database_exposed" { + .. + 90 [ cidr_blocks = ["0.0.0.0/0"] + .. + 92 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-no-public-egress-sgr + Impact Your port is egressing data to the internet + Resolution Set a more restrictive cidr range + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #10 HIGH Instance does not have storage encryption enabled. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:15 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_db_instance" "unencrypted_db" { + . + 15 [ storage_encrypted = false # No encryption! (false) + .. + 37 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-encrypt-instance-storage-data + Impact Data can be read from RDS instances if compromised + Resolution Enable encryption for RDS instances + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/encrypt-instance-storage-data/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #11 HIGH Instance has Public Access enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:17 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 17 publicly_accessible = true # SECURITY ISSUE #10 - Public access! +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Rego Package builtin.aws.rds.aws0180 + Rego Rule deny +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #12 HIGH Table encryption is not enabled. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:72-92 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 72 тФМ resource "aws_dynamodb_table" "unencrypted_table" { + 73 тФВ name = "my-table" + 74 тФВ billing_mode = "PAY_PER_REQUEST" + 75 тФВ hash_key = "id" + 76 тФВ + 77 тФВ attribute { + 78 тФВ name = "id" + 79 тФВ type = "S" + 80 тФФ } + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-dynamodb-enable-at-rest-encryption + Impact Data can be freely read if compromised + Resolution Enable encryption at rest for DAX Cluster + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-at-rest-encryption/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dax_cluster#server_side_encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #13 HIGH IAM policy document uses sensitive action 'iam:CreatePolicy' on wildcarded resource '*' +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + iam.tf:109 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 104 resource "aws_iam_policy" "privilege_escalation" { + ... + 109 [ Version = "2012-10-17" + ... + 125 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-iam-no-policy-wildcards + Impact Overly permissive policies may grant access to sensitive resources + Resolution Specify the exact permissions required, and to which resources they should apply instead of using wildcards. + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Results #14-15 HIGH IAM policy document uses sensitive action '*' on wildcarded resource '*' (2 similar results) +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + iam.tf:10 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_iam_policy" "admin_policy" { + . + 10 [ Version = "2012-10-17" + .. + 19 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Individual Causes + - iam.tf:5-19 (aws_iam_policy.admin_policy) 2 instances +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-iam-no-policy-wildcards + Impact Overly permissive policies may grant access to sensitive resources + Resolution Specify the exact permissions required, and to which resources they should apply instead of using wildcards. + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Results #16-17 HIGH IAM policy document uses sensitive action 's3:*' on wildcarded resource '*' (2 similar results) +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + iam.tf:44 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 39 resource "aws_iam_role_policy" "s3_full_access" { + .. + 44 [ Version = "2012-10-17" + .. + 55 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Individual Causes + - iam.tf:39-55 (aws_iam_role_policy.s3_full_access) 2 instances +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-iam-no-policy-wildcards + Impact Overly permissive policies may grant access to sensitive resources + Resolution Specify the exact permissions required, and to which resources they should apply instead of using wildcards. + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Results #18-21 HIGH IAM policy document uses wildcarded action 'ec2:*' (4 similar results) +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + iam.tf:72 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 67 resource "aws_iam_user_policy" "service_policy" { + .. + 72 [ Version = "2012-10-17" + .. + 85 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Individual Causes + - iam.tf:67-85 (aws_iam_user_policy.service_policy) 4 instances +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-iam-no-policy-wildcards + Impact Overly permissive policies may grant access to sensitive resources + Resolution Specify the exact permissions required, and to which resources they should apply instead of using wildcards. + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #22 HIGH Bucket does not have encryption enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:13-21 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 13 resource "aws_s3_bucket" "public_data" { + 14 bucket = "my-public-bucket-lab6" + 15 acl = "public-read" # Public access enabled! + 16 + 17 tags = { + 18 Name = "Public Data Bucket" + 19 # Missing required tags: Environment, Owner, CostCenter + 20 } + 21 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-bucket-encryption + Impact The bucket objects could be read if compromised + Resolution Configure bucket encryption + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #23 HIGH Bucket does not encrypt data with a customer managed key. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:13-21 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 13 resource "aws_s3_bucket" "public_data" { + 14 bucket = "my-public-bucket-lab6" + 15 acl = "public-read" # Public access enabled! + 16 + 17 tags = { + 18 Name = "Public Data Bucket" + 19 # Missing required tags: Environment, Owner, CostCenter + 20 } + 21 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-encryption-customer-key + Impact Using AWS managed keys does not allow for fine grained control + Resolution Enable encryption using customer managed keys + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #24 HIGH Bucket has a public ACL: 'public-read'. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:15 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 13 resource "aws_s3_bucket" "public_data" { + 14 bucket = "my-public-bucket-lab6" + 15 [ acl = "public-read" # Public access enabled! ("public-read") + 16 + 17 tags = { + 18 Name = "Public Data Bucket" + 19 # Missing required tags: Environment, Owner, CostCenter + 20 } + 21 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-no-public-access-with-acl + Impact Public access to the bucket can lead to data leakage + Resolution Don't use canned ACLs or switch to private acl + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-access-with-acl/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #25 HIGH No public access block so not blocking public acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-block-public-acls + Impact PUT calls with public ACLs specified can make objects public + Resolution Enable blocking any PUT calls with a public ACL specified + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #26 HIGH No public access block so not blocking public policies +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-block-public-policy + Impact Users could put a policy that allows public access + Resolution Prevent policies that allow public access being PUT + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_policy +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #27 HIGH Bucket does not have encryption enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-bucket-encryption + Impact The bucket objects could be read if compromised + Resolution Configure bucket encryption + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #28 HIGH No public access block so not ignoring public acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-ignore-public-acls + Impact PUT calls with public ACLs specified can make objects public + Resolution Enable ignoring the application of public ACLs in PUT calls + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#ignore_public_acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #29 HIGH No public access block so not restricting public buckets +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-no-public-buckets + Impact Public buckets can be accessed by anyone + Resolution Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront) + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#restrict_public_buckets┬б +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #30 HIGH Bucket does not encrypt data with a customer managed key. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-encryption-customer-key + Impact Using AWS managed keys does not allow for fine grained control + Resolution Enable encryption using customer managed keys + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #31 HIGH Public access block does not block public ACLs +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:39 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 36 resource "aws_s3_bucket_public_access_block" "bad_config" { + 37 bucket = aws_s3_bucket.public_data.id + 38 + 39 [ block_public_acls = false # Should be true (false) + 40 block_public_policy = false # Should be true + 41 ignore_public_acls = false # Should be true + 42 restrict_public_buckets = false # Should be true + 43 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-block-public-acls + Impact PUT calls with public ACLs specified can make objects public + Resolution Enable blocking any PUT calls with a public ACL specified + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #32 HIGH Public access block does not block public policies +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:40 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 36 resource "aws_s3_bucket_public_access_block" "bad_config" { + 37 bucket = aws_s3_bucket.public_data.id + 38 + 39 block_public_acls = false # Should be true + 40 [ block_public_policy = false # Should be true (false) + 41 ignore_public_acls = false # Should be true + 42 restrict_public_buckets = false # Should be true + 43 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-block-public-policy + Impact Users could put a policy that allows public access + Resolution Prevent policies that allow public access being PUT + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_policy +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #33 HIGH Public access block does not ignore public ACLs +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:41 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 36 resource "aws_s3_bucket_public_access_block" "bad_config" { + 37 bucket = aws_s3_bucket.public_data.id + 38 + 39 block_public_acls = false # Should be true + 40 block_public_policy = false # Should be true + 41 [ ignore_public_acls = false # Should be true (false) + 42 restrict_public_buckets = false # Should be true + 43 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-ignore-public-acls + Impact PUT calls with public ACLs specified can make objects public + Resolution Enable ignoring the application of public ACLs in PUT calls + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#ignore_public_acls +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #34 HIGH Public access block does not restrict public buckets +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:42 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 36 resource "aws_s3_bucket_public_access_block" "bad_config" { + 37 bucket = aws_s3_bucket.public_data.id + 38 + 39 block_public_acls = false # Should be true + 40 block_public_policy = false # Should be true + 41 ignore_public_acls = false # Should be true + 42 [ restrict_public_buckets = false # Should be true (false) + 43 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-no-public-buckets + Impact Public buckets can be accessed by anyone + Resolution Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront) + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#restrict_public_buckets┬б +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #35 MEDIUM Instance has very low backup retention period. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:22 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_db_instance" "unencrypted_db" { + . + 22 [ backup_retention_period = 0 # SECURITY ISSUE #11 - No backups! (0) + .. + 37 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-specify-backup-retention + Impact Potential loss of data and short opportunity for recovery + Resolution Explicitly set the retention period to greater than the default + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#backup_retention_period +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #36 MEDIUM Instance does not have Deletion Protection enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:28 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 28 deletion_protection = false # SECURITY ISSUE #12 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Rego Package builtin.aws.rds.aws0177 + Rego Rule deny +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #37 MEDIUM Instance has very low backup retention period. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:40-69 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 40 тФМ resource "aws_db_instance" "weak_db" { + 41 тФВ identifier = "mydb-weak" + 42 тФВ engine = "mysql" + 43 тФВ engine_version = "5.7.38" # Old version with known vulnerabilities + 44 тФВ instance_class = "db.t3.micro" + 45 тФВ allocated_storage = 20 + 46 тФВ + 47 тФВ username = "root" # Using default admin username + 48 тФФ password = "password123" # Weak password! + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-specify-backup-retention + Impact Potential loss of data and short opportunity for recovery + Resolution Explicitly set the retention period to greater than the default + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#backup_retention_period +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #38 MEDIUM Instance does not have IAM Authentication enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:40-69 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 40 тФМ resource "aws_db_instance" "weak_db" { + 41 тФВ identifier = "mydb-weak" + 42 тФВ engine = "mysql" + 43 тФВ engine_version = "5.7.38" # Old version with known vulnerabilities + 44 тФВ instance_class = "db.t3.micro" + 45 тФВ allocated_storage = 20 + 46 тФВ + 47 тФВ username = "root" # Using default admin username + 48 тФФ password = "password123" # Weak password! + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Rego Package builtin.aws.rds.aws0176 + Rego Rule deny +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #39 MEDIUM Instance does not have Deletion Protection enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:40-69 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 40 тФМ resource "aws_db_instance" "weak_db" { + 41 тФВ identifier = "mydb-weak" + 42 тФВ engine = "mysql" + 43 тФВ engine_version = "5.7.38" # Old version with known vulnerabilities + 44 тФВ instance_class = "db.t3.micro" + 45 тФВ allocated_storage = 20 + 46 тФВ + 47 тФВ username = "root" # Using default admin username + 48 тФФ password = "password123" # Weak password! + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Rego Package builtin.aws.rds.aws0177 + Rego Rule deny +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #40 MEDIUM Instance does not have IAM Authentication enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:5-37 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 тФМ resource "aws_db_instance" "unencrypted_db" { + 6 тФВ identifier = "mydb-unencrypted" + 7 тФВ engine = "postgres" + 8 тФВ engine_version = "13.7" + 9 тФВ instance_class = "db.t3.micro" + 10 тФВ allocated_storage = 20 + 11 тФВ + 12 тФВ username = "admin" + 13 тФФ password = "SuperSecretPassword123!" # SECURITY ISSUE #9 - Hardcoded password! + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + Rego Package builtin.aws.rds.aws0176 + Rego Rule deny +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #41 MEDIUM Point-in-time recovery is not enabled. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:86 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 72 resource "aws_dynamodb_table" "unencrypted_table" { + .. + 86 [ enabled = false # SECURITY ISSUE #17 (false) + .. + 92 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-dynamodb-enable-recovery + Impact Accidental or malicious writes and deletes can't be rolled back + Resolution Enable point in time recovery + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-recovery/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodb_table#point_in_time_recovery +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #42 MEDIUM Bucket does not have logging enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:13-21 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 13 resource "aws_s3_bucket" "public_data" { + 14 bucket = "my-public-bucket-lab6" + 15 acl = "public-read" # Public access enabled! + 16 + 17 tags = { + 18 Name = "Public Data Bucket" + 19 # Missing required tags: Environment, Owner, CostCenter + 20 } + 21 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-bucket-logging + Impact There is no way to determine the access to this bucket + Resolution Add a logging block to the resource to enable access logging + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #43 MEDIUM Bucket does not have versioning enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:13-21 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 13 resource "aws_s3_bucket" "public_data" { + 14 bucket = "my-public-bucket-lab6" + 15 acl = "public-read" # Public access enabled! + 16 + 17 tags = { + 18 Name = "Public Data Bucket" + 19 # Missing required tags: Environment, Owner, CostCenter + 20 } + 21 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-versioning + Impact Deleted or modified data would not be recoverable + Resolution Enable versioning to protect against accidental/malicious removal or modification + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #44 MEDIUM Bucket does not have logging enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-bucket-logging + Impact There is no way to determine the access to this bucket + Resolution Add a logging block to the resource to enable access logging + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #45 MEDIUM Bucket does not have versioning enabled +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:31 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 [ enabled = false # Versioning disabled (false) + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-enable-versioning + Impact Deleted or modified data would not be recoverable + Resolution Enable versioning to protect against accidental/malicious removal or modification + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #46 LOW Instance does not have performance insights enabled. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:5-37 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 тФМ resource "aws_db_instance" "unencrypted_db" { + 6 тФВ identifier = "mydb-unencrypted" + 7 тФВ engine = "postgres" + 8 тФВ engine_version = "13.7" + 9 тФВ instance_class = "db.t3.micro" + 10 тФВ allocated_storage = 20 + 11 тФВ + 12 тФВ username = "admin" + 13 тФФ password = "SuperSecretPassword123!" # SECURITY ISSUE #9 - Hardcoded password! + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-enable-performance-insights + Impact Without adequate monitoring, performance related issues may go unreported and potentially lead to compromise. + Resolution Enable performance insights + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance#performance_insights_kms_key_id + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#performance_insights_kms_key_id +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #47 LOW Instance does not have performance insights enabled. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:62 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 40 resource "aws_db_instance" "weak_db" { + .. + 62 [ performance_insights_enabled = false (false) + .. + 69 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-rds-enable-performance-insights + Impact Without adequate monitoring, performance related issues may go unreported and potentially lead to compromise. + Resolution Enable performance insights + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance#performance_insights_kms_key_id + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#performance_insights_kms_key_id +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #48 LOW Table encryption does not use a customer-managed KMS key. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + database.tf:72-92 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 72 тФМ resource "aws_dynamodb_table" "unencrypted_table" { + 73 тФВ name = "my-table" + 74 тФВ billing_mode = "PAY_PER_REQUEST" + 75 тФВ hash_key = "id" + 76 тФВ + 77 тФВ attribute { + 78 тФВ name = "id" + 79 тФВ type = "S" + 80 тФФ } + .. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-dynamodb-table-customer-key + Impact Using AWS managed keys does not allow for fine grained control + Resolution Enable server side encryption with a customer managed key + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/table-customer-key/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodb_table#server_side_encryption +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #49 LOW One or more policies are attached directly to a user +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + iam.tf:58-65 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 58 resource "aws_iam_user" "service_account" { + 59 name = "service-account" + 60 path = "/system/" + 61 + 62 tags = { + 63 Name = "Service Account" + 64 } + 65 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-iam-no-user-attached-policies + Impact Complex access control is difficult to manage and maintain. + Resolution Grant policies at the group level instead. + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-user-attached-policies/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_user +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #50 LOW Bucket does not have a corresponding public access block. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + main.tf:24-33 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 24 resource "aws_s3_bucket" "unencrypted_data" { + 25 bucket = "my-unencrypted-bucket-lab6" + 26 acl = "private" + 27 + 28 # No server_side_encryption_configuration! + 29 + 30 versioning { + 31 enabled = false # Versioning disabled + 32 } + 33 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-s3-specify-public-access-block + Impact Public access policies may be applied to sensitive data buckets + Resolution Define a aws_s3_bucket_public_access_block for the given bucket to control public access policies + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/specify-public-access-block/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#bucket +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #51 LOW Security group rule does not have a description. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:18-23 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 5 resource "aws_security_group" "allow_all" { + . + 18 тФМ egress { + 19 тФВ from_port = 0 + 20 тФВ to_port = 0 + 21 тФВ protocol = "-1" + 22 тФВ cidr_blocks = ["0.0.0.0/0"] + 23 тФФ } + .. + 28 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-add-description-to-security-group-rule + Impact Descriptions provide context for the firewall rule reasons + Resolution Add descriptions for all security groups rules + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #52 LOW Security group rule does not have a description. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:52-57 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 31 resource "aws_security_group" "ssh_open" { + .. + 52 тФМ egress { + 53 тФВ from_port = 0 + 54 тФВ to_port = 0 + 55 тФВ protocol = "-1" + 56 тФВ cidr_blocks = ["0.0.0.0/0"] + 57 тФФ } + .. + 62 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-add-description-to-security-group-rule + Impact Descriptions provide context for the firewall rule reasons + Resolution Add descriptions for all security groups rules + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + +Result #53 LOW Security group rule does not have a description. +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + security_groups.tf:86-91 +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + 65 resource "aws_security_group" "database_exposed" { + .. + 86 тФМ egress { + 87 тФВ from_port = 0 + 88 тФВ to_port = 0 + 89 тФВ protocol = "-1" + 90 тФВ cidr_blocks = ["0.0.0.0/0"] + 91 тФФ } + 92 } +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + ID aws-ec2-add-description-to-security-group-rule + Impact Descriptions provide context for the firewall rule reasons + Resolution Add descriptions for all security groups rules + + More Information + - https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/ + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group + - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule +тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + + + timings + тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + disk i/o 9.235409ms + parsing 1.532129ms + adaptation 2.565898ms + checks 14.116471ms + total 27.449907ms + + counts + тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + modules downloaded 0 + modules processed 1 + blocks processed 29 + files read 5 + + results + тФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФАтФА + passed 18 + ignored 0 + critical 9 + high 25 + medium 11 + low 8 + + 18 passed, 53 potential problem(s) detected. + diff --git a/labs/lab6/analysis/tfsec-results.csv b/labs/lab6/analysis/tfsec-results.csv new file mode 100644 index 00000000..d41cbb6b --- /dev/null +++ b/labs/lab6/analysis/tfsec-results.csv @@ -0,0 +1,54 @@ +file,start_line,end_line,rule_id,severity,description,link,passed +database.tf,72,92,aws-dynamodb-enable-at-rest-encryption,HIGH,Table encryption is not enabled.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-at-rest-encryption/,false +database.tf,86,86,aws-dynamodb-enable-recovery,MEDIUM,Point-in-time recovery is not enabled.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-recovery/,false +database.tf,72,92,aws-dynamodb-table-customer-key,LOW,Table encryption does not use a customer-managed KMS key.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/table-customer-key/,false +security_groups.tf,86,91,aws-ec2-add-description-to-security-group-rule,LOW,Security group rule does not have a description.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/,false +security_groups.tf,52,57,aws-ec2-add-description-to-security-group-rule,LOW,Security group rule does not have a description.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/,false +security_groups.tf,18,23,aws-ec2-add-description-to-security-group-rule,LOW,Security group rule does not have a description.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/,false +security_groups.tf,90,90,aws-ec2-no-public-egress-sgr,CRITICAL,Security group rule allows egress to multiple public internet addresses.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/,false +security_groups.tf,56,56,aws-ec2-no-public-egress-sgr,CRITICAL,Security group rule allows egress to multiple public internet addresses.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/,false +security_groups.tf,22,22,aws-ec2-no-public-egress-sgr,CRITICAL,Security group rule allows egress to multiple public internet addresses.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/,false +security_groups.tf,83,83,aws-ec2-no-public-ingress-sgr,CRITICAL,Security group rule allows ingress from public internet.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/,false +security_groups.tf,75,75,aws-ec2-no-public-ingress-sgr,CRITICAL,Security group rule allows ingress from public internet.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/,false +security_groups.tf,49,49,aws-ec2-no-public-ingress-sgr,CRITICAL,Security group rule allows ingress from public internet.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/,false +security_groups.tf,41,41,aws-ec2-no-public-ingress-sgr,CRITICAL,Security group rule allows ingress from public internet.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/,false +security_groups.tf,15,15,aws-ec2-no-public-ingress-sgr,CRITICAL,Security group rule allows ingress from public internet.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/,false +iam.tf,72,72,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses wildcarded action 'ec2:*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,72,72,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses wildcarded action 'ec2:*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,72,72,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses wildcarded action 'ec2:*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,72,72,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses sensitive action 'ec2:*' on wildcarded resource '*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,44,44,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses wildcarded action 's3:*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,44,44,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses sensitive action 's3:*' on wildcarded resource '*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,109,109,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses sensitive action 'iam:CreatePolicy' on wildcarded resource '*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,10,10,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses wildcarded action '*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,10,10,aws-iam-no-policy-wildcards,HIGH,IAM policy document uses sensitive action '*' on wildcarded resource '*',https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/,false +iam.tf,58,65,aws-iam-no-user-attached-policies,LOW,One or more policies are attached directly to a user,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-user-attached-policies/,false +database.tf,40,69,aws-rds-enable-deletion-protection,MEDIUM,Instance does not have Deletion Protection enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-deletion-protection/,false +database.tf,28,28,aws-rds-enable-deletion-protection,MEDIUM,Instance does not have Deletion Protection enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-deletion-protection/,false +database.tf,5,37,aws-rds-enable-iam-auth,MEDIUM,Instance does not have IAM Authentication enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-iam-auth/,false +database.tf,40,69,aws-rds-enable-iam-auth,MEDIUM,Instance does not have IAM Authentication enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-iam-auth/,false +database.tf,62,62,aws-rds-enable-performance-insights,LOW,Instance does not have performance insights enabled.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/,false +database.tf,5,37,aws-rds-enable-performance-insights,LOW,Instance does not have performance insights enabled.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/,false +database.tf,17,17,aws-rds-enable-public-access,HIGH,Instance has Public Access enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-public-access/,false +database.tf,15,15,aws-rds-encrypt-instance-storage-data,HIGH,Instance does not have storage encryption enabled.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/encrypt-instance-storage-data/,false +database.tf,17,17,aws-rds-no-public-db-access,CRITICAL,Instance is exposed publicly.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/no-public-db-access/,false +database.tf,40,69,aws-rds-specify-backup-retention,MEDIUM,Instance has very low backup retention period.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/,false +database.tf,22,22,aws-rds-specify-backup-retention,MEDIUM,Instance has very low backup retention period.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/,false +main.tf,39,39,aws-s3-block-public-acls,HIGH,Public access block does not block public ACLs,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/,false +main.tf,24,33,aws-s3-block-public-acls,HIGH,No public access block so not blocking public acls,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/,false +main.tf,40,40,aws-s3-block-public-policy,HIGH,Public access block does not block public policies,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/,false +main.tf,24,33,aws-s3-block-public-policy,HIGH,No public access block so not blocking public policies,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/,false +main.tf,24,33,aws-s3-enable-bucket-encryption,HIGH,Bucket does not have encryption enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/,false +main.tf,13,21,aws-s3-enable-bucket-encryption,HIGH,Bucket does not have encryption enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/,false +main.tf,24,33,aws-s3-enable-bucket-logging,MEDIUM,Bucket does not have logging enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/,false +main.tf,13,21,aws-s3-enable-bucket-logging,MEDIUM,Bucket does not have logging enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/,false +main.tf,31,31,aws-s3-enable-versioning,MEDIUM,Bucket does not have versioning enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/,false +main.tf,13,21,aws-s3-enable-versioning,MEDIUM,Bucket does not have versioning enabled,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/,false +main.tf,24,33,aws-s3-encryption-customer-key,HIGH,Bucket does not encrypt data with a customer managed key.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/,false +main.tf,13,21,aws-s3-encryption-customer-key,HIGH,Bucket does not encrypt data with a customer managed key.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/,false +main.tf,41,41,aws-s3-ignore-public-acls,HIGH,Public access block does not ignore public ACLs,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/,false +main.tf,24,33,aws-s3-ignore-public-acls,HIGH,No public access block so not ignoring public acls,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/,false +main.tf,15,15,aws-s3-no-public-access-with-acl,HIGH,Bucket has a public ACL: 'public-read'.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-access-with-acl/,false +main.tf,42,42,aws-s3-no-public-buckets,HIGH,Public access block does not restrict public buckets,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/,false +main.tf,24,33,aws-s3-no-public-buckets,HIGH,No public access block so not restricting public buckets,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/,false +main.tf,24,33,aws-s3-specify-public-access-block,LOW,Bucket does not have a corresponding public access block.,https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/specify-public-access-block/,false diff --git a/labs/lab6/analysis/tfsec-results.json b/labs/lab6/analysis/tfsec-results.json new file mode 100644 index 00000000..2c040285 --- /dev/null +++ b/labs/lab6/analysis/tfsec-results.json @@ -0,0 +1,1225 @@ +{ + "results": [ + { + "rule_id": "AVD-AWS-0023", + "long_id": "aws-dynamodb-enable-at-rest-encryption", + "rule_description": "DAX Cluster and tables should always encrypt data at rest", + "rule_provider": "aws", + "rule_service": "dynamodb", + "impact": "Data can be freely read if compromised", + "resolution": "Enable encryption at rest for DAX Cluster", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-at-rest-encryption/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dax_cluster#server_side_encryption" + ], + "description": "Table encryption is not enabled.", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_dynamodb_table.unencrypted_table", + "location": { + "filename": "/src/database.tf", + "start_line": 72, + "end_line": 92 + } + }, + { + "rule_id": "AVD-AWS-0024", + "long_id": "aws-dynamodb-enable-recovery", + "rule_description": "Point in time recovery should be enabled to protect DynamoDB table", + "rule_provider": "aws", + "rule_service": "dynamodb", + "impact": "Accidental or malicious writes and deletes can't be rolled back", + "resolution": "Enable point in time recovery", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/enable-recovery/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodb_table#point_in_time_recovery" + ], + "description": "Point-in-time recovery is not enabled.", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_dynamodb_table.unencrypted_table", + "location": { + "filename": "/src/database.tf", + "start_line": 86, + "end_line": 86 + } + }, + { + "rule_id": "AVD-AWS-0025", + "long_id": "aws-dynamodb-table-customer-key", + "rule_description": "DynamoDB tables should use at rest encryption with a Customer Managed Key", + "rule_provider": "aws", + "rule_service": "dynamodb", + "impact": "Using AWS managed keys does not allow for fine grained control", + "resolution": "Enable server side encryption with a customer managed key", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/dynamodb/table-customer-key/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodb_table#server_side_encryption" + ], + "description": "Table encryption does not use a customer-managed KMS key.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_dynamodb_table.unencrypted_table", + "location": { + "filename": "/src/database.tf", + "start_line": 72, + "end_line": 92 + } + }, + { + "rule_id": "AVD-AWS-0124", + "long_id": "aws-ec2-add-description-to-security-group-rule", + "rule_description": "Missing description for security group rule.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Descriptions provide context for the firewall rule reasons", + "resolution": "Add descriptions for all security groups rules", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule" + ], + "description": "Security group rule does not have a description.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_security_group.database_exposed", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 86, + "end_line": 91 + } + }, + { + "rule_id": "AVD-AWS-0124", + "long_id": "aws-ec2-add-description-to-security-group-rule", + "rule_description": "Missing description for security group rule.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Descriptions provide context for the firewall rule reasons", + "resolution": "Add descriptions for all security groups rules", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule" + ], + "description": "Security group rule does not have a description.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_security_group.ssh_open", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 52, + "end_line": 57 + } + }, + { + "rule_id": "AVD-AWS-0124", + "long_id": "aws-ec2-add-description-to-security-group-rule", + "rule_description": "Missing description for security group rule.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Descriptions provide context for the firewall rule reasons", + "resolution": "Add descriptions for all security groups rules", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/add-description-to-security-group-rule/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule" + ], + "description": "Security group rule does not have a description.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_security_group.allow_all", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 18, + "end_line": 23 + } + }, + { + "rule_id": "AVD-AWS-0104", + "long_id": "aws-ec2-no-public-egress-sgr", + "rule_description": "An egress security group rule allows traffic to /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port is egressing data to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group" + ], + "description": "Security group rule allows egress to multiple public internet addresses.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.database_exposed", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 90, + "end_line": 90 + } + }, + { + "rule_id": "AVD-AWS-0104", + "long_id": "aws-ec2-no-public-egress-sgr", + "rule_description": "An egress security group rule allows traffic to /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port is egressing data to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group" + ], + "description": "Security group rule allows egress to multiple public internet addresses.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.ssh_open", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 56, + "end_line": 56 + } + }, + { + "rule_id": "AVD-AWS-0104", + "long_id": "aws-ec2-no-public-egress-sgr", + "rule_description": "An egress security group rule allows traffic to /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port is egressing data to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-egress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group" + ], + "description": "Security group rule allows egress to multiple public internet addresses.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.allow_all", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 22, + "end_line": 22 + } + }, + { + "rule_id": "AVD-AWS-0107", + "long_id": "aws-ec2-no-public-ingress-sgr", + "rule_description": "An ingress security group rule allows traffic from /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port exposed to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks" + ], + "description": "Security group rule allows ingress from public internet.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.database_exposed", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 83, + "end_line": 83 + } + }, + { + "rule_id": "AVD-AWS-0107", + "long_id": "aws-ec2-no-public-ingress-sgr", + "rule_description": "An ingress security group rule allows traffic from /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port exposed to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks" + ], + "description": "Security group rule allows ingress from public internet.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.database_exposed", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 75, + "end_line": 75 + } + }, + { + "rule_id": "AVD-AWS-0107", + "long_id": "aws-ec2-no-public-ingress-sgr", + "rule_description": "An ingress security group rule allows traffic from /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port exposed to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks" + ], + "description": "Security group rule allows ingress from public internet.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.ssh_open", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 49, + "end_line": 49 + } + }, + { + "rule_id": "AVD-AWS-0107", + "long_id": "aws-ec2-no-public-ingress-sgr", + "rule_description": "An ingress security group rule allows traffic from /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port exposed to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks" + ], + "description": "Security group rule allows ingress from public internet.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.ssh_open", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 41, + "end_line": 41 + } + }, + { + "rule_id": "AVD-AWS-0107", + "long_id": "aws-ec2-no-public-ingress-sgr", + "rule_description": "An ingress security group rule allows traffic from /0.", + "rule_provider": "aws", + "rule_service": "ec2", + "impact": "Your port exposed to the internet", + "resolution": "Set a more restrictive cidr range", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/ec2/no-public-ingress-sgr/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule#cidr_blocks" + ], + "description": "Security group rule allows ingress from public internet.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_security_group.allow_all", + "location": { + "filename": "/src/security_groups.tf", + "start_line": 15, + "end_line": 15 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses wildcarded action 'ec2:*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_user_policy.service_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 72, + "end_line": 72 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses wildcarded action 'ec2:*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_user_policy.service_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 72, + "end_line": 72 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses wildcarded action 'ec2:*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_user_policy.service_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 72, + "end_line": 72 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses sensitive action 'ec2:*' on wildcarded resource '*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_user_policy.service_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 72, + "end_line": 72 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses wildcarded action 's3:*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_role_policy.s3_full_access", + "location": { + "filename": "/src/iam.tf", + "start_line": 44, + "end_line": 44 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses sensitive action 's3:*' on wildcarded resource '*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_role_policy.s3_full_access", + "location": { + "filename": "/src/iam.tf", + "start_line": 44, + "end_line": 44 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses sensitive action 'iam:CreatePolicy' on wildcarded resource '*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_policy.privilege_escalation", + "location": { + "filename": "/src/iam.tf", + "start_line": 109, + "end_line": 109 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses wildcarded action '*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_policy.admin_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 10, + "end_line": 10 + } + }, + { + "rule_id": "AVD-AWS-0057", + "long_id": "aws-iam-no-policy-wildcards", + "rule_description": "IAM policy should avoid use of wildcards and instead apply the principle of least privilege", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Overly permissive policies may grant access to sensitive resources", + "resolution": "Specify the exact permissions required, and to which resources they should apply instead of using wildcards.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-policy-wildcards/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document" + ], + "description": "IAM policy document uses sensitive action '*' on wildcarded resource '*'", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_iam_policy.admin_policy", + "location": { + "filename": "/src/iam.tf", + "start_line": 10, + "end_line": 10 + } + }, + { + "rule_id": "AVD-AWS-0143", + "long_id": "aws-iam-no-user-attached-policies", + "rule_description": "IAM policies should not be granted directly to users.", + "rule_provider": "aws", + "rule_service": "iam", + "impact": "Complex access control is difficult to manage and maintain.", + "resolution": "Grant policies at the group level instead.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/iam/no-user-attached-policies/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_user" + ], + "description": "One or more policies are attached directly to a user", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_iam_user.service_account", + "location": { + "filename": "/src/iam.tf", + "start_line": 58, + "end_line": 65 + } + }, + { + "rule_id": "AVD-AWS-0177", + "long_id": "aws-rds-enable-deletion-protection", + "rule_description": "RDS Deletion Protection Disabled", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "", + "resolution": "Modify the RDS instances to enable deletion protection.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-deletion-protection/" + ], + "description": "Instance does not have Deletion Protection enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.weak_db", + "location": { + "filename": "/src/database.tf", + "start_line": 40, + "end_line": 69 + } + }, + { + "rule_id": "AVD-AWS-0177", + "long_id": "aws-rds-enable-deletion-protection", + "rule_description": "RDS Deletion Protection Disabled", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "", + "resolution": "Modify the RDS instances to enable deletion protection.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-deletion-protection/" + ], + "description": "Instance does not have Deletion Protection enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db.deletion_protection", + "location": { + "filename": "/src/database.tf", + "start_line": 28, + "end_line": 28 + } + }, + { + "rule_id": "AVD-AWS-0176", + "long_id": "aws-rds-enable-iam-auth", + "rule_description": "RDS IAM Database Authentication Disabled", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "", + "resolution": "Modify the PostgreSQL and MySQL type RDS instances to enable IAM database authentication.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-iam-auth/" + ], + "description": "Instance does not have IAM Authentication enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db", + "location": { + "filename": "/src/database.tf", + "start_line": 5, + "end_line": 37 + } + }, + { + "rule_id": "AVD-AWS-0176", + "long_id": "aws-rds-enable-iam-auth", + "rule_description": "RDS IAM Database Authentication Disabled", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "", + "resolution": "Modify the PostgreSQL and MySQL type RDS instances to enable IAM database authentication.", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-iam-auth/" + ], + "description": "Instance does not have IAM Authentication enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.weak_db", + "location": { + "filename": "/src/database.tf", + "start_line": 40, + "end_line": 69 + } + }, + { + "rule_id": "AVD-AWS-0133", + "long_id": "aws-rds-enable-performance-insights", + "rule_description": "Enable Performance Insights to detect potential problems", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "Without adequate monitoring, performance related issues may go unreported and potentially lead to compromise.", + "resolution": "Enable performance insights", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance#performance_insights_kms_key_id", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#performance_insights_kms_key_id" + ], + "description": "Instance does not have performance insights enabled.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_db_instance.weak_db", + "location": { + "filename": "/src/database.tf", + "start_line": 62, + "end_line": 62 + } + }, + { + "rule_id": "AVD-AWS-0133", + "long_id": "aws-rds-enable-performance-insights", + "rule_description": "Enable Performance Insights to detect potential problems", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "Without adequate monitoring, performance related issues may go unreported and potentially lead to compromise.", + "resolution": "Enable performance insights", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-performance-insights/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster_instance#performance_insights_kms_key_id", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#performance_insights_kms_key_id" + ], + "description": "Instance does not have performance insights enabled.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db", + "location": { + "filename": "/src/database.tf", + "start_line": 5, + "end_line": 37 + } + }, + { + "rule_id": "AVD-AWS-0180", + "long_id": "aws-rds-enable-public-access", + "rule_description": "RDS Publicly Accessible", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "", + "resolution": "Remove the public endpoint from the RDS instance'", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/enable-public-access/" + ], + "description": "Instance has Public Access enabled", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db.publicly_accessible", + "location": { + "filename": "/src/database.tf", + "start_line": 17, + "end_line": 17 + } + }, + { + "rule_id": "AVD-AWS-0080", + "long_id": "aws-rds-encrypt-instance-storage-data", + "rule_description": "RDS encryption has not been enabled at a DB Instance level.", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "Data can be read from RDS instances if compromised", + "resolution": "Enable encryption for RDS instances", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/encrypt-instance-storage-data/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance" + ], + "description": "Instance does not have storage encryption enabled.", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db", + "location": { + "filename": "/src/database.tf", + "start_line": 15, + "end_line": 15 + } + }, + { + "rule_id": "AVD-AWS-0082", + "long_id": "aws-rds-no-public-db-access", + "rule_description": "A database resource is marked as publicly accessible.", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "The database instance is publicly accessible", + "resolution": "Set the database to not be publicly accessible", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/no-public-db-access/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance" + ], + "description": "Instance is exposed publicly.", + "severity": "CRITICAL", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db", + "location": { + "filename": "/src/database.tf", + "start_line": 17, + "end_line": 17 + } + }, + { + "rule_id": "AVD-AWS-0077", + "long_id": "aws-rds-specify-backup-retention", + "rule_description": "RDS Cluster and RDS instance should have backup retention longer than default 1 day", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "Potential loss of data and short opportunity for recovery", + "resolution": "Explicitly set the retention period to greater than the default", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#backup_retention_period" + ], + "description": "Instance has very low backup retention period.", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.weak_db", + "location": { + "filename": "/src/database.tf", + "start_line": 40, + "end_line": 69 + } + }, + { + "rule_id": "AVD-AWS-0077", + "long_id": "aws-rds-specify-backup-retention", + "rule_description": "RDS Cluster and RDS instance should have backup retention longer than default 1 day", + "rule_provider": "aws", + "rule_service": "rds", + "impact": "Potential loss of data and short opportunity for recovery", + "resolution": "Explicitly set the retention period to greater than the default", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/rds/specify-backup-retention/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#backup_retention_period" + ], + "description": "Instance has very low backup retention period.", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_db_instance.unencrypted_db", + "location": { + "filename": "/src/database.tf", + "start_line": 22, + "end_line": 22 + } + }, + { + "rule_id": "AVD-AWS-0086", + "long_id": "aws-s3-block-public-acls", + "rule_description": "S3 Access block should block public ACL", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "PUT calls with public ACLs specified can make objects public", + "resolution": "Enable blocking any PUT calls with a public ACL specified", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_acls" + ], + "description": "Public access block does not block public ACLs", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket_public_access_block.bad_config", + "location": { + "filename": "/src/main.tf", + "start_line": 39, + "end_line": 39 + } + }, + { + "rule_id": "AVD-AWS-0086", + "long_id": "aws-s3-block-public-acls", + "rule_description": "S3 Access block should block public ACL", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "PUT calls with public ACLs specified can make objects public", + "resolution": "Enable blocking any PUT calls with a public ACL specified", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-acls/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_acls" + ], + "description": "No public access block so not blocking public acls", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0087", + "long_id": "aws-s3-block-public-policy", + "rule_description": "S3 Access block should block public policy", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Users could put a policy that allows public access", + "resolution": "Prevent policies that allow public access being PUT", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_policy" + ], + "description": "Public access block does not block public policies", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket_public_access_block.bad_config", + "location": { + "filename": "/src/main.tf", + "start_line": 40, + "end_line": 40 + } + }, + { + "rule_id": "AVD-AWS-0087", + "long_id": "aws-s3-block-public-policy", + "rule_description": "S3 Access block should block public policy", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Users could put a policy that allows public access", + "resolution": "Prevent policies that allow public access being PUT", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/block-public-policy/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_policy" + ], + "description": "No public access block so not blocking public policies", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0088", + "long_id": "aws-s3-enable-bucket-encryption", + "rule_description": "Unencrypted S3 bucket.", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "The bucket objects could be read if compromised", + "resolution": "Configure bucket encryption", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption" + ], + "description": "Bucket does not have encryption enabled", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0088", + "long_id": "aws-s3-enable-bucket-encryption", + "rule_description": "Unencrypted S3 bucket.", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "The bucket objects could be read if compromised", + "resolution": "Configure bucket encryption", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-encryption/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption" + ], + "description": "Bucket does not have encryption enabled", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.public_data", + "location": { + "filename": "/src/main.tf", + "start_line": 13, + "end_line": 21 + } + }, + { + "rule_id": "AVD-AWS-0089", + "long_id": "aws-s3-enable-bucket-logging", + "rule_description": "S3 Bucket does not have logging enabled.", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "There is no way to determine the access to this bucket", + "resolution": "Add a logging block to the resource to enable access logging", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket" + ], + "description": "Bucket does not have logging enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0089", + "long_id": "aws-s3-enable-bucket-logging", + "rule_description": "S3 Bucket does not have logging enabled.", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "There is no way to determine the access to this bucket", + "resolution": "Add a logging block to the resource to enable access logging", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-bucket-logging/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket" + ], + "description": "Bucket does not have logging enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.public_data", + "location": { + "filename": "/src/main.tf", + "start_line": 13, + "end_line": 21 + } + }, + { + "rule_id": "AVD-AWS-0090", + "long_id": "aws-s3-enable-versioning", + "rule_description": "S3 Data should be versioned", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Deleted or modified data would not be recoverable", + "resolution": "Enable versioning to protect against accidental/malicious removal or modification", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning" + ], + "description": "Bucket does not have versioning enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 31, + "end_line": 31 + } + }, + { + "rule_id": "AVD-AWS-0090", + "long_id": "aws-s3-enable-versioning", + "rule_description": "S3 Data should be versioned", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Deleted or modified data would not be recoverable", + "resolution": "Enable versioning to protect against accidental/malicious removal or modification", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/enable-versioning/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning" + ], + "description": "Bucket does not have versioning enabled", + "severity": "MEDIUM", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.public_data", + "location": { + "filename": "/src/main.tf", + "start_line": 13, + "end_line": 21 + } + }, + { + "rule_id": "AVD-AWS-0132", + "long_id": "aws-s3-encryption-customer-key", + "rule_description": "S3 encryption should use Customer Managed Keys", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Using AWS managed keys does not allow for fine grained control", + "resolution": "Enable encryption using customer managed keys", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption" + ], + "description": "Bucket does not encrypt data with a customer managed key.", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0132", + "long_id": "aws-s3-encryption-customer-key", + "rule_description": "S3 encryption should use Customer Managed Keys", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Using AWS managed keys does not allow for fine grained control", + "resolution": "Enable encryption using customer managed keys", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/encryption-customer-key/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption" + ], + "description": "Bucket does not encrypt data with a customer managed key.", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.public_data", + "location": { + "filename": "/src/main.tf", + "start_line": 13, + "end_line": 21 + } + }, + { + "rule_id": "AVD-AWS-0091", + "long_id": "aws-s3-ignore-public-acls", + "rule_description": "S3 Access Block should Ignore Public Acl", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "PUT calls with public ACLs specified can make objects public", + "resolution": "Enable ignoring the application of public ACLs in PUT calls", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#ignore_public_acls" + ], + "description": "Public access block does not ignore public ACLs", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket_public_access_block.bad_config", + "location": { + "filename": "/src/main.tf", + "start_line": 41, + "end_line": 41 + } + }, + { + "rule_id": "AVD-AWS-0091", + "long_id": "aws-s3-ignore-public-acls", + "rule_description": "S3 Access Block should Ignore Public Acl", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "PUT calls with public ACLs specified can make objects public", + "resolution": "Enable ignoring the application of public ACLs in PUT calls", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/ignore-public-acls/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#ignore_public_acls" + ], + "description": "No public access block so not ignoring public acls", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0092", + "long_id": "aws-s3-no-public-access-with-acl", + "rule_description": "S3 Buckets not publicly accessible through ACL.", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Public access to the bucket can lead to data leakage", + "resolution": "Don't use canned ACLs or switch to private acl", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-access-with-acl/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket" + ], + "description": "Bucket has a public ACL: 'public-read'.", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.public_data", + "location": { + "filename": "/src/main.tf", + "start_line": 15, + "end_line": 15 + } + }, + { + "rule_id": "AVD-AWS-0093", + "long_id": "aws-s3-no-public-buckets", + "rule_description": "S3 Access block should restrict public bucket to limit access", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Public buckets can be accessed by anyone", + "resolution": "Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront)", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#restrict_public_buckets┬б" + ], + "description": "Public access block does not restrict public buckets", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket_public_access_block.bad_config", + "location": { + "filename": "/src/main.tf", + "start_line": 42, + "end_line": 42 + } + }, + { + "rule_id": "AVD-AWS-0093", + "long_id": "aws-s3-no-public-buckets", + "rule_description": "S3 Access block should restrict public bucket to limit access", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Public buckets can be accessed by anyone", + "resolution": "Limit the access to public buckets to only the owner or AWS Services (eg; CloudFront)", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/no-public-buckets/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#restrict_public_buckets┬б" + ], + "description": "No public access block so not restricting public buckets", + "severity": "HIGH", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + }, + { + "rule_id": "AVD-AWS-0094", + "long_id": "aws-s3-specify-public-access-block", + "rule_description": "S3 buckets should each define an aws_s3_bucket_public_access_block", + "rule_provider": "aws", + "rule_service": "s3", + "impact": "Public access policies may be applied to sensitive data buckets", + "resolution": "Define a aws_s3_bucket_public_access_block for the given bucket to control public access policies", + "links": [ + "https://aquasecurity.github.io/tfsec/v1.28.14/checks/aws/s3/specify-public-access-block/", + "https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#bucket" + ], + "description": "Bucket does not have a corresponding public access block.", + "severity": "LOW", + "warning": false, + "status": 0, + "resource": "aws_s3_bucket.unencrypted_data", + "location": { + "filename": "/src/main.tf", + "start_line": 24, + "end_line": 33 + } + } + ] +} diff --git a/labs/lab6/analysis/tool-comparison.txt b/labs/lab6/analysis/tool-comparison.txt new file mode 100644 index 00000000..edd9e169 --- /dev/null +++ b/labs/lab6/analysis/tool-comparison.txt @@ -0,0 +1,8 @@ +=== Comprehensive Tool Comparison === +Terraform Scanning Results: + - tfsec: 53 findings + - Checkov: 78 findings + - Terrascan: 22 findings + +Pulumi Scanning Results (KICS): 6 findings +Ansible Scanning Results (KICS): 10 findings diff --git a/labs/lab7/analysis/deployment-comparison.txt b/labs/lab7/analysis/deployment-comparison.txt new file mode 100644 index 00000000..37197fb9 --- /dev/null +++ b/labs/lab7/analysis/deployment-comparison.txt @@ -0,0 +1,36 @@ +=== Functionality Test === +Default: HTTP 200 +Hardened: HTTP 200 +Production: HTTP 200 + +=== Resource Usage === +NAME CPU % MEM USAGE / LIMIT MEM % +juice-default 1.87% 104.3MiB / 15.48GiB 0.66% +juice-hardened 1.07% 92.55MiB / 512MiB 18.08% +juice-production 0.83% 97.38MiB / 512MiB 19.02% + +=== Security Configurations === + +Container: juice-default +CapDrop: [] +SecurityOpt: [] +Memory: 0 +CPU: 0 +PIDs: +Restart: no + +Container: juice-hardened +CapDrop: [ALL] +SecurityOpt: [no-new-privileges] +Memory: 536870912 +CPU: 0 +PIDs: +Restart: no + +Container: juice-production +CapDrop: [ALL] +SecurityOpt: [no-new-privileges] +Memory: 536870912 +CPU: 0 +PIDs: 100 +Restart: on-failure diff --git a/labs/lab7/hardening/docker-bench-results.txt b/labs/lab7/hardening/docker-bench-results.txt new file mode 100644 index 00000000..a3bb7e3d --- /dev/null +++ b/labs/lab7/hardening/docker-bench-results.txt @@ -0,0 +1,176 @@ +# ------------------------------------------------------------------------------ +# Docker Bench for Security v1.3.4 +# +# Docker, Inc. (c) 2015- +# +# Checks for dozens of common best-practices around deploying Docker containers in production. +# Inspired by the CIS Docker Community Edition Benchmark v1.1.0. +# ------------------------------------------------------------------------------ + +Initializing Sat Mar 14 16:21:54 UTC 2026 + + +[INFO] 1 - Host Configuration +[WARN] 1.1 - Ensure a separate partition for containers has been created +[NOTE] 1.2 - Ensure the container host has been Hardened +[PASS] 1.3 - Ensure Docker is up to date +[INFO] * Using 28.3.2 which is current +[INFO] * Check with your operating system vendor for support and security maintenance for Docker +[INFO] 1.4 - Ensure only trusted users are allowed to control Docker daemon +[INFO] * docker:x:101 +[WARN] 1.5 - Ensure auditing is configured for the Docker daemon +[INFO] 1.6 - Ensure auditing is configured for Docker files and directories - /var/lib/docker +[INFO] * Directory not found +[INFO] 1.7 - Ensure auditing is configured for Docker files and directories - /etc/docker +[INFO] * Directory not found +[INFO] 1.8 - Ensure auditing is configured for Docker files and directories - docker.service +[INFO] * File not found +[INFO] 1.9 - Ensure auditing is configured for Docker files and directories - docker.socket +[INFO] * File not found +[INFO] 1.10 - Ensure auditing is configured for Docker files and directories - /etc/default/docker +[INFO] * File not found +[INFO] 1.11 - Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json +[INFO] * File not found +[INFO] 1.12 - Ensure auditing is configured for Docker files and directories - /usr/bin/docker-containerd +[INFO] * File not found +[INFO] 1.13 - Ensure auditing is configured for Docker files and directories - /usr/bin/docker-runc +[INFO] * File not found + + +[INFO] 2 - Docker daemon configuration +[WARN] 2.1 - Ensure network traffic is restricted between containers on the default bridge +[PASS] 2.2 - Ensure the logging level is set to 'info' +[PASS] 2.3 - Ensure Docker is allowed to make changes to iptables +[PASS] 2.4 - Ensure insecure registries are not used +[PASS] 2.5 - Ensure aufs storage driver is not used +[INFO] 2.6 - Ensure TLS authentication for Docker daemon is configured +[INFO] * Docker daemon not listening on TCP +[INFO] 2.7 - Ensure the default ulimit is configured appropriately +[INFO] * Default ulimit doesn't appear to be set +[WARN] 2.8 - Enable user namespace support +[PASS] 2.9 - Ensure the default cgroup usage has been confirmed +[PASS] 2.10 - Ensure base device size is not changed until needed +[WARN] 2.11 - Ensure that authorization for Docker client commands is enabled +[WARN] 2.12 - Ensure centralized and remote logging is configured +[INFO] 2.13 - Ensure operations on legacy registry (v1) are Disabled (Deprecated) +[WARN] 2.14 - Ensure live restore is Enabled +[WARN] 2.15 - Ensure Userland Proxy is Disabled +[INFO] 2.16 - Ensure daemon-wide custom seccomp profile is applied, if needed +[PASS] 2.17 - Ensure experimental features are avoided in production +[WARN] 2.18 - Ensure containers are restricted from acquiring new privileges + + +[INFO] 3 - Docker daemon configuration files +[INFO] 3.1 - Ensure that docker.service file ownership is set to root:root +[INFO] * File not found +[INFO] 3.2 - Ensure that docker.service file permissions are set to 644 or more restrictive +[INFO] * File not found +[INFO] 3.3 - Ensure that docker.socket file ownership is set to root:root +[INFO] * File not found +[INFO] 3.4 - Ensure that docker.socket file permissions are set to 644 or more restrictive +[INFO] * File not found +[INFO] 3.5 - Ensure that /etc/docker directory ownership is set to root:root +[INFO] * Directory not found +[INFO] 3.6 - Ensure that /etc/docker directory permissions are set to 755 or more restrictive +[INFO] * Directory not found +[INFO] 3.7 - Ensure that registry certificate file ownership is set to root:root +[INFO] * Directory not found +[INFO] 3.8 - Ensure that registry certificate file permissions are set to 444 or more restrictive +[INFO] * Directory not found +[INFO] 3.9 - Ensure that TLS CA certificate file ownership is set to root:root +[INFO] * No TLS CA certificate found +[INFO] 3.10 - Ensure that TLS CA certificate file permissions are set to 444 or more restrictive +[INFO] * No TLS CA certificate found +[INFO] 3.11 - Ensure that Docker server certificate file ownership is set to root:root +[INFO] * No TLS Server certificate found +[INFO] 3.12 - Ensure that Docker server certificate file permissions are set to 444 or more restrictive +[INFO] * No TLS Server certificate found +[INFO] 3.13 - Ensure that Docker server certificate key file ownership is set to root:root +[INFO] * No TLS Key found +[INFO] 3.14 - Ensure that Docker server certificate key file permissions are set to 400 +[INFO] * No TLS Key found +[WARN] 3.15 - Ensure that Docker socket file ownership is set to root:docker +[WARN] * Wrong ownership for /var/run/docker.sock +[PASS] 3.16 - Ensure that Docker socket file permissions are set to 660 or more restrictive +[INFO] 3.17 - Ensure that daemon.json file ownership is set to root:root +[INFO] * File not found +[INFO] 3.18 - Ensure that daemon.json file permissions are set to 644 or more restrictive +[INFO] * File not found +[INFO] 3.19 - Ensure that /etc/default/docker file ownership is set to root:root +[INFO] * File not found +[INFO] 3.20 - Ensure that /etc/default/docker file permissions are set to 644 or more restrictive +[INFO] * File not found + + +[INFO] 4 - Container Images and Build File +[INFO] 4.1 - Ensure a user for the container has been created +[INFO] * No containers running +[NOTE] 4.2 - Ensure that containers use trusted base images +[NOTE] 4.3 - Ensure unnecessary packages are not installed in the container +[NOTE] 4.4 - Ensure images are scanned and rebuilt to include security patches +[WARN] 4.5 - Ensure Content trust for Docker is Enabled +[WARN] 4.6 - Ensure HEALTHCHECK instructions have been added to the container image +[WARN] * No Healthcheck found: [bridgecrew/checkov:latest] +[WARN] * No Healthcheck found: [snyk/snyk:docker] +[WARN] * No Healthcheck found: [sunflye/devops-info-service:latest] +[WARN] * No Healthcheck found: [checkmarx/kics:latest] +[WARN] * No Healthcheck found: [sh3b0/labenv:stable] +[WARN] * No Healthcheck found: [node:24-alpine] +[WARN] * No Healthcheck found: [jlesage/firefox:v25.12.5] +[WARN] * No Healthcheck found: [grafana/grafana:12.3.1] +[WARN] * No Healthcheck found: [bkimminich/juice-shop:v19.0.0] +[WARN] * No Healthcheck found: [aquasec/tfsec:latest] +[WARN] * No Healthcheck found: [quay.io/keycloak/keycloak:26.0] +[WARN] * No Healthcheck found: [goodwithtech/dockle:latest] +[WARN] * No Healthcheck found: [tenable/terrascan:latest] +[WARN] * No Healthcheck found: [grafana/loki:3.0.0] +[WARN] * No Healthcheck found: [grafana/promtail:3.0.0] +[INFO] 4.7 - Ensure update instructions are not use alone in the Dockerfile +[INFO] * Update instruction found: [bridgecrew/checkov:latest] +[INFO] * Update instruction found: [snyk/snyk:docker] +[INFO] * Update instruction found: [sunflye/devops-info-service:latest] +[INFO] * Update instruction found: [checkmarx/kics:latest] +[INFO] * Update instruction found: [sh3b0/labenv:stable] +[INFO] * Update instruction found: [grafana/promtail:3.0.0] +[NOTE] 4.8 - Ensure setuid and setgid permissions are removed in the images +[INFO] 4.9 - Ensure COPY is used instead of ADD in Dockerfile +[INFO] * ADD in image history: [snyk/snyk:docker] +[INFO] * ADD in image history: [sh3b0/labenv:stable] +[INFO] * ADD in image history: [node:24-alpine] +[INFO] * ADD in image history: [jlesage/firefox:v25.12.5] +[INFO] * ADD in image history: [grafana/grafana:12.3.1] +[INFO] * ADD in image history: [aquasec/tfsec:latest] +[INFO] * ADD in image history: [goodwithtech/dockle:latest] +[INFO] * ADD in image history: [grafana/loki:3.0.0] +[INFO] * ADD in image history: [grafana/promtail:3.0.0] +[INFO] * ADD in image history: [docker/docker-bench-security:latest] +[NOTE] 4.10 - Ensure secrets are not stored in Dockerfiles +[NOTE] 4.11 - Ensure verified packages are only Installed + + +[INFO] 5 - Container Runtime +[INFO] * No containers running, skipping Section 5 + + +[INFO] 6 - Docker Security Operations +[INFO] 6.1 - Avoid image sprawl +[INFO] * There are currently: 16 images +[INFO] * Only 1 out of 16 are in use +[INFO] 6.2 - Avoid container sprawl +[INFO] * There are currently a total of 1 containers, with 1 of them currently running + + +[INFO] 7 - Docker Swarm Configuration +[PASS] 7.1 - Ensure swarm mode is not Enabled, if not needed +[PASS] 7.2 - Ensure the minimum number of manager nodes have been created in a swarm (Swarm mode not enabled) +[PASS] 7.3 - Ensure swarm services are binded to a specific host interface (Swarm mode not enabled) +[PASS] 7.4 - Ensure data exchanged between containers are encrypted on different nodes on the overlay network +[PASS] 7.5 - Ensure Docker's secret management commands are used for managing secrets in a Swarm cluster (Swarm mode not enabled) +[PASS] 7.6 - Ensure swarm manager is run in auto-lock mode (Swarm mode not enabled) +[PASS] 7.7 - Ensure swarm manager auto-lock key is rotated periodically (Swarm mode not enabled) +[PASS] 7.8 - Ensure node certificates are rotated as appropriate (Swarm mode not enabled) +[PASS] 7.9 - Ensure CA certificates are rotated as appropriate (Swarm mode not enabled) +[PASS] 7.10 - Ensure management plane traffic has been separated from data plane traffic (Swarm mode not enabled) + +[INFO] Checks: 74 +[INFO] Score: 6 diff --git a/labs/lab7/scanning/dockle-results.txt b/labs/lab7/scanning/dockle-results.txt new file mode 100644 index 00000000..9a6aa6b1 --- /dev/null +++ b/labs/lab7/scanning/dockle-results.txt @@ -0,0 +1,9 @@ +SKIP - DKL-LI-0001: Avoid empty password + * failed to detect etc/shadow,etc/master.passwd +INFO - CIS-DI-0005: Enable Content trust for Docker + * export DOCKER_CONTENT_TRUST=1 before docker pull/build +INFO - CIS-DI-0006: Add HEALTHCHECK instruction to the container image + * not found HEALTHCHECK statement +INFO - DKL-LI-0003: Only put necessary files + * unnecessary file : juice-shop/node_modules/micromatch/lib/.DS_Store + * unnecessary file : juice-shop/node_modules/extglob/lib/.DS_Store diff --git a/labs/lab7/scanning/scout-cves.txt b/labs/lab7/scanning/scout-cves.txt new file mode 100644 index 00000000..0376a814 Binary files /dev/null and b/labs/lab7/scanning/scout-cves.txt differ diff --git a/labs/lab7/scanning/snyk-results.txt b/labs/lab7/scanning/snyk-results.txt new file mode 100644 index 00000000..1de72b8d Binary files /dev/null and b/labs/lab7/scanning/snyk-results.txt differ diff --git a/labs/lab8/analysis/ref-after-tamper.txt b/labs/lab8/analysis/ref-after-tamper.txt new file mode 100644 index 00000000..600bfcad Binary files /dev/null and b/labs/lab8/analysis/ref-after-tamper.txt differ diff --git a/labs/lab8/analysis/ref.txt b/labs/lab8/analysis/ref.txt new file mode 100644 index 00000000..f1275d3e Binary files /dev/null and b/labs/lab8/analysis/ref.txt differ diff --git a/labs/lab8/analysis/verify-signature.txt b/labs/lab8/analysis/verify-signature.txt new file mode 100644 index 00000000..80b53781 Binary files /dev/null and b/labs/lab8/analysis/verify-signature.txt differ diff --git a/labs/lab8/artifacts/sample.tar.gz b/labs/lab8/artifacts/sample.tar.gz new file mode 100644 index 00000000..5f48a1f1 Binary files /dev/null and b/labs/lab8/artifacts/sample.tar.gz differ diff --git a/labs/lab8/artifacts/sample.tar.gz.bundle b/labs/lab8/artifacts/sample.tar.gz.bundle new file mode 100644 index 00000000..bad8ea18 --- /dev/null +++ b/labs/lab8/artifacts/sample.tar.gz.bundle @@ -0,0 +1 @@ +{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"publicKey":{"hint":"TqhRYlT0h7x20enXFBsUFd8i7w1yAuYfu0f7VH/8QH4="},"tlogEntries":[{"logIndex":"1104797619","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1773521021","inclusionPromise":{"signedEntryTimestamp":"MEYCIQDF4oQBCNzqZr2ufzocjeqz3hjiKb7pC9ONuKJmRAgMewIhAIsSwpRkvovfplRUezGlKJrfX2yBxajr5ovUS2eYvp15"},"inclusionProof":{"logIndex":"982893357","rootHash":"5YADjPqL3xPTt/7WyyWTFa36Lh4X/0Rh43dno3vkE9g=","treeSize":"982893375","hashes":["n+IsgMGnf/JG5NICeRlBdN2ICf2dtMc9dP/HpTWs8BU=","603qdIkNyR77vkOk1Pv81lI+EWjZVBcsTNzLDjO70QY=","cyhYv66wZpHo3OIZnkdU0q7XvpecZAZvnQW5bnJUf0U=","9fIXNRR/6BfUu1BnfjAmQzV+cITnVSutDkcYRuPzPsc=","m6ZzLmL/90A9Fsf4DvQFygxPFovg+bDtTYZHNtoBbsg=","C+6KVsPUzB0hzaHZoBh56fUoK1u/VAhAvZHeqEKNtPY=","XR0rQ6BjJ7hevGX+n+TSpp8A3siVHLwPq25pDIDBEOY=","TESNlEJuxbbZSn4Nmjs1wwty3j6Mrbboee6hd9C5xWo=","SBN1SPir0Il8iBiyAU/N8tzdqed2athtJAB6+0hhmyI=","9MC1/jbvomkHtKR4pDM5FbxVbVtSu/M28UQRhcbdJ+U=","ufYTJUMHKHCWUAmq1x0LbSHrfLI3KHW4aIHjeaUj+D0=","xYQIIrMGx5vkoKSgHIheFDaVqtKyKu/2Llsmbs4JAuk=","n6CDD+HF6jOVXS0Me3M2uGRiVWClhI4VquPR5X3CSas=","phX+M3v0Rj7jWbKf8deZfNVzi2WuCY15tYlNy6fDNEQ=","qGnlF6oIO4C6dVv6/ihadxccr3OSytHcfqUrmDQgqIs=","eRlAy3G7QgM2MWo2Jrz6/6oltT7/FwGiHfkpiaoARlI=","fLAvE46NqCVV86EpB2pKkwJlFjjFk7ntX3lC+PiZuIo=","T4DqWD42hAtN+vX8jKCWqoC4meE4JekI9LxYGCcPy1M="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n982893375\n5YADjPqL3xPTt/7WyyWTFa36Lh4X/0Rh43dno3vkE9g=\n\n— rekor.sigstore.dev wNI9ajBFAiEA5Fr02mq9vaPkOnJXIuQeErycwI3jNI7ZXiRyBtqi/MkCIEdq/+mjqTA74+ifCTqjQpHJnaTIKjO2chGpHoer53qS\n"}},"canonicalizedBody":"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"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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"}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"MOWC67cgKnC5scVWqcSI7LPSxNZmTjFa/w3y2X3rzPI="},"signature":"MEUCIQD5B68aiBRBTZrGZ4a4VujioWk0RtP31IgFiYFXCdY75QIgexVkzTDala3VmY4eNUg5fHlF8OmEEFE6hxba9YcfAmY="}} \ No newline at end of file diff --git a/labs/lab8/artifacts/sample.txt b/labs/lab8/artifacts/sample.txt new file mode 100644 index 00000000..6d80bdfb --- /dev/null +++ b/labs/lab8/artifacts/sample.txt @@ -0,0 +1 @@ +sample content 2026-03-14 23:43:13Z diff --git a/labs/lab8/artifacts/verify-blob.txt b/labs/lab8/artifacts/verify-blob.txt new file mode 100644 index 00000000..53ac1596 --- /dev/null +++ b/labs/lab8/artifacts/verify-blob.txt @@ -0,0 +1 @@ +Verified OK diff --git a/labs/lab8/attest/juice-shop.cdx.json b/labs/lab8/attest/juice-shop.cdx.json new file mode 100644 index 00000000..c8bb935a --- /dev/null +++ b/labs/lab8/attest/juice-shop.cdx.json @@ -0,0 +1 @@ +{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:08882baa-9e72-4442-b717-47325e981b6a","version":1,"metadata":{"timestamp":"2026-03-14T20:31:10Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.42.2"}]},"component":{"bom-ref":"7d0d6d7af4a885ec","type":"container","name":"localhost:5000/juice-shop","version":"sha256:547bd3fef4a6d7e25e131da68f454e6dc4a59d281f8793df6853e6796c9bbf58"},"properties":[{"name":"syft:image:labels:maintainer","value":"Bjoern Kimminich "},{"name":"syft:image:labels:org.opencontainers.image.authors","value":"Bjoern Kimminich "},{"name":"syft:image:labels:org.opencontainers.image.created","value":"”2025-09-04T05:38:11Z”"},{"name":"syft:image:labels:org.opencontainers.image.description","value":"Probably the most modern and sophisticated insecure web application"},{"name":"syft:image:labels:org.opencontainers.image.documentation","value":"https://help.owasp-juice.shop"},{"name":"syft:image:labels:org.opencontainers.image.licenses","value":"MIT"},{"name":"syft:image:labels:org.opencontainers.image.revision","value":"36870cb"},{"name":"syft:image:labels:org.opencontainers.image.source","value":"https://github.com/juice-shop/juice-shop"},{"name":"syft:image:labels:org.opencontainers.image.title","value":"OWASP Juice Shop"},{"name":"syft:image:labels:org.opencontainers.image.url","value":"https://owasp-juice.shop"},{"name":"syft:image:labels:org.opencontainers.image.vendor","value":"Open Worldwide Application Security Project"},{"name":"syft:image:labels:org.opencontainers.image.version","value":"19.0.0"}]},"components":[{"bom-ref":"pkg:npm/1to2@1.0.0?package-id=3cea2309a653e6ed","type":"library","author":"Benjamin Byholm (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)","name":"1to2","version":"1.0.0","description":"NAN 1 -> 2 Migration Script","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/1to2@1.0.0","externalReferences":[{"url":"git://github.com/nodejs/nan.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nan/tools/package.json"}]},{"bom-ref":"pkg:npm/%40adraffy/ens-normalize@1.10.1?package-id=08449108469244be","type":"library","author":"raffy.eth (http://raffy.antistupid.com)","name":"@adraffy/ens-normalize","version":"1.10.1","description":"Ethereum Name Service (ENS) Name Normalizer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40adraffy/ens-normalize@1.10.1","externalReferences":[{"url":"git+https://github.com/adraffy/ens-normalize.js.git","type":"distribution"},{"url":"https://github.com/adraffy/ens-normalize.js#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json"}]},{"bom-ref":"pkg:npm/%40babel/helper-string-parser@7.27.1?package-id=27b0de0facbfc672","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/helper-string-parser","version":"7.27.1","description":"A utility package to parse strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/helper-string-parser@7.27.1","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-helper-string-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/helper-string-parser/package.json"}]},{"bom-ref":"pkg:npm/%40babel/helper-validator-identifier@7.27.1?package-id=d07675d36f7c1136","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/helper-validator-identifier","version":"7.27.1","description":"Validate identifier/keywords name","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/helper-validator-identifier@7.27.1","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json"}]},{"bom-ref":"pkg:npm/%40babel/parser@7.28.3?package-id=489d0f5c79137732","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/parser","version":"7.28.3","description":"A JavaScript parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.28.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/parser@7.28.3","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/parser:7.28.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/parser/package.json"}]},{"bom-ref":"pkg:npm/%40babel/types@7.28.2?package-id=045074f58c58eebb","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/types","version":"7.28.2","description":"Babel Types is a Lodash-esque utility library for AST nodes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.28.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/types@7.28.2","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-types","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/types:7.28.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/types/package.json"}]},{"bom-ref":"pkg:npm/%40colors/colors@1.6.0?package-id=2aaa7cc50004f91b","type":"library","author":"DABH, DABH (https://github.com/DABH)","name":"@colors/colors","version":"1.6.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40colors/colors@1.6.0","externalReferences":[{"url":"http://github.com/DABH/colors.js.git","type":"distribution"},{"url":"https://github.com/DABH/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json"}]},{"bom-ref":"pkg:npm/%40colors/colors@1.6.0?package-id=3b8ecc6044fe8e57","type":"library","author":"DABH, DABH (https://github.com/DABH)","name":"@colors/colors","version":"1.6.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40colors/colors@1.6.0","externalReferences":[{"url":"http://github.com/DABH/colors.js.git","type":"distribution"},{"url":"https://github.com/DABH/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json"}]},{"bom-ref":"pkg:npm/%40dabh/diagnostics@2.0.3?package-id=22bb15b4ca9d4d3f","type":"library","author":"Arnout Kazemier, Martijn Swaagman (https://github.com/swaagie), Jarrett Cruger (https://github.com/jcrugzz), Sevastos (https://github.com/sevastos)","name":"@dabh/diagnostics","version":"2.0.3","description":"Tools for debugging your node.js modules and event loop","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@dabh\\/diagnostics:\\@dabh\\/diagnostics:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40dabh/diagnostics@2.0.3","externalReferences":[{"url":"git://github.com/3rd-Eden/diagnostics.git","type":"distribution"},{"url":"https://github.com/3rd-Eden/diagnostics","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:\\@dabh\\/diagnostics:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@dabh/diagnostics/package.json"}]},{"bom-ref":"pkg:npm/%40ethereumjs/rlp@4.0.1?package-id=2b283938a1553b38","type":"library","author":"martin becze , Alex Beregszaszi , Holger Drewes , Paul Miller ","name":"@ethereumjs/rlp","version":"4.0.1","description":"Recursive Length Prefix Encoding Module","licenses":[{"license":{"id":"MPL-2.0"}}],"cpe":"cpe:2.3:a:\\@ethereumjs\\/rlp:\\@ethereumjs\\/rlp:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40ethereumjs/rlp@4.0.1","externalReferences":[{"url":"https://github.com/ethereumjs/ethereumjs-monorepo.git","type":"distribution"},{"url":"https://github.com/ethereumjs/ethereumjs-monorepo/tree/master/packages/rlp#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereumjs:\\@ethereumjs\\/rlp:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@ethereumjs/rlp/package.json"}]},{"bom-ref":"pkg:npm/%40ethereumjs/rlp@5.0.2?package-id=e264462c29df43ed","type":"library","author":"martin becze , Alex Beregszaszi , Holger Drewes , Paul Miller ","name":"@ethereumjs/rlp","version":"5.0.2","description":"Recursive Length Prefix Encoding Module","licenses":[{"license":{"id":"MPL-2.0"}}],"cpe":"cpe:2.3:a:\\@ethereumjs\\/rlp:\\@ethereumjs\\/rlp:5.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40ethereumjs/rlp@5.0.2","externalReferences":[{"url":"https://github.com/ethereumjs/ethereumjs-monorepo.git","type":"distribution"},{"url":"https://github.com/ethereumjs/ethereumjs-monorepo/tree/master/packages/rlp#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereumjs:\\@ethereumjs\\/rlp:5.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json"}]},{"bom-ref":"pkg:npm/%40gar/promisify@1.1.3?package-id=8e41d6aa1fe261a3","type":"library","author":"Gar ","name":"@gar/promisify","version":"1.1.3","description":"Promisify an entire class or object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40gar/promisify@1.1.3","externalReferences":[{"url":"https://github.com/wraithgar/gar-promisify.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@gar/promisify/package.json"}]},{"bom-ref":"pkg:npm/%40isaacs/cliui@8.0.2?package-id=1b734807f495fb6f","type":"library","author":"Ben Coe ","name":"@isaacs/cliui","version":"8.0.2","description":"easily create complex multi-column command-line-interfaces","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40isaacs/cliui@8.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/package.json"}]},{"bom-ref":"pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=0ab257647e45f4d4","type":"library","author":"Isaac Z. Schlueter","name":"@isaacs/fs-minipass","version":"4.0.1","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40isaacs/fs-minipass@4.0.1","externalReferences":[{"url":"https://github.com/npm/fs-minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/%40my-scope/package-a@0.0.0?package-id=e38f30a540597121","type":"library","name":"@my-scope/package-a","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40my-scope/package-a@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"}]},{"bom-ref":"pkg:npm/%40my-scope/package-b@0.0.0?package-id=7c30bf5441790ef5","type":"library","name":"@my-scope/package-b","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40my-scope/package-b@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/core@4.26.1?package-id=49cbc756c02b244b","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/core","version":"4.26.1","description":"Core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/core@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/core/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/core-loader@4.26.1?package-id=52af61e4284d993b","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/core-loader","version":"4.26.1","description":"Core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/core-loader:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/core-loader@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/core-loader:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/core_loader:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/core_loader:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/core-loader/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/evaluator@4.26.1?package-id=19329a82b3c04a97","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/evaluator","version":"4.26.1","description":"Evaluator","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/evaluator:\\@nlpjs\\/evaluator:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/evaluator@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/evaluator/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/lang-en@4.26.1?package-id=3b35c82860541774","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/lang-en","version":"4.26.1","description":"Core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/lang-en@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/lang-en/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/lang-en-min@4.26.1?package-id=f478f743a248aca5","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/lang-en-min","version":"4.26.1","description":"Core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en-min:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/lang-en-min@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang-en-min:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en_min:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en_min:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/language@4.25.0?package-id=ca1d4c9cc3d649fe","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/language","version":"4.25.0","description":"Language guesser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language:4.25.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/language@4.25.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/language/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/language-min@4.25.0?package-id=49713e5e64515107","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/language-min","version":"4.25.0","description":"Language guesser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/language-min:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/language-min@4.25.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/language-min:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/language_min:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/language_min:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/language-min/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/ner@4.27.0?package-id=3bf94ec08da3b281","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/ner","version":"4.27.0","description":"Named Entity Recognition","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/ner:\\@nlpjs\\/ner:4.27.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/ner@4.27.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/ner/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/neural@4.25.0?package-id=d2908794d58fc9bc","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/neural","version":"4.25.0","description":"Neural Network","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/neural:\\@nlpjs\\/neural:4.25.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/neural@4.25.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/neural/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/nlg@4.26.1?package-id=d41f6d4e68e9c43d","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/nlg","version":"4.26.1","description":"Natural Language Generation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/nlg:\\@nlpjs\\/nlg:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/nlg@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/nlg/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/nlp@4.27.0?package-id=f85c5456d515aafd","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/nlp","version":"4.27.0","description":"Natural Language Processing","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/nlp:\\@nlpjs\\/nlp:4.27.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/nlp@4.27.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/nlp/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/nlu@4.27.0?package-id=c449b8b8cc6afd27","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/nlu","version":"4.27.0","description":"Natural Language Understanding","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/nlu:\\@nlpjs\\/nlu:4.27.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/nlu@4.27.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/nlu/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/request@4.25.0?package-id=8d993f0ba3c63bb7","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/request","version":"4.25.0","description":"Request","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/request:\\@nlpjs\\/request:4.25.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/request@4.25.0","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/request/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/sentiment@4.26.1?package-id=1b3eb8c3cb77af23","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/sentiment","version":"4.26.1","description":"Sentiment Analysis","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/sentiment:\\@nlpjs\\/sentiment:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/sentiment@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/sentiment/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/similarity@4.26.1?package-id=203a7b556fc354dd","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/similarity","version":"4.26.1","description":"Similarity","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/similarity:\\@nlpjs\\/similarity:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/similarity@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/similarity/package.json"}]},{"bom-ref":"pkg:npm/%40nlpjs/slot@4.26.1?package-id=6b6febefa6106c5d","type":"library","author":"Jesus Seijas , Jesus Seijas ","name":"@nlpjs/slot","version":"4.26.1","description":"Slot filling manager","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@nlpjs\\/slot:\\@nlpjs\\/slot:4.26.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40nlpjs/slot@4.26.1","externalReferences":[{"url":"git+https://github.com/axa-group/nlp.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@nlpjs/slot/package.json"}]},{"bom-ref":"pkg:npm/%40noble/curves@1.2.0?package-id=2a40db3b54912cbf","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/curves","version":"1.2.0","description":"Audited & minimal JS implementation of elliptic curve cryptography","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/curves@1.2.0","externalReferences":[{"url":"https://github.com/paulmillr/noble-curves.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@noble/curves/package.json"}]},{"bom-ref":"pkg:npm/%40noble/curves@1.4.2?package-id=a86e0237429a5827","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/curves","version":"1.4.2","description":"Audited & minimal JS implementation of elliptic curve cryptography","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/curves@1.4.2","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-curves.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json"}]},{"bom-ref":"pkg:npm/%40noble/curves@1.4.2?package-id=306de5e5675f2410","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/curves","version":"1.4.2","description":"Audited & minimal JS implementation of elliptic curve cryptography","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/curves@1.4.2","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-curves.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@1.3.2?package-id=46670510cb133f58","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"1.3.2","description":"Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@1.3.2","externalReferences":[{"url":"https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@1.4.0?package-id=749573321ee941d7","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"1.4.0","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@1.4.0","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@1.4.0?package-id=a3139241ec1643e6","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"1.4.0","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@1.4.0","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@1.4.0?package-id=c2a39289ece0eefe","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"1.4.0","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@1.4.0","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/agent@3.0.0?package-id=114921a3f2bc9d12","type":"library","author":"GitHub Inc.","name":"@npmcli/agent","version":"3.0.0","description":"the http/https agent used by the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/agent@3.0.0","externalReferences":[{"url":"git+https://github.com/npm/agent.git","type":"distribution"},{"url":"https://github.com/npm/agent#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/fs@1.1.1?package-id=644572bbb1e01679","type":"library","author":"GitHub Inc.","name":"@npmcli/fs","version":"1.1.1","description":"filesystem utilities for the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/fs@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/fs@4.0.0?package-id=2f7974422b4dc793","type":"library","author":"GitHub Inc.","name":"@npmcli/fs","version":"4.0.0","description":"filesystem utilities for the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/fs@4.0.0","externalReferences":[{"url":"git+https://github.com/npm/fs.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/fs/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/move-file@1.1.2?package-id=a988a9e98434d4e0","type":"library","name":"@npmcli/move-file","version":"1.1.2","description":"move a file (fork of move-file)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/move-file@1.1.2","externalReferences":[{"url":"git+https://github.com/npm/move-file","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/move-file/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/core@12.0.1?package-id=80ec3c5b78ad0cd1","type":"library","author":"Gerald Yeo ","name":"@otplib/core","version":"12.0.1","description":"core method for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/core:\\@otplib\\/core:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/core@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-core","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/core:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/core/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/plugin-crypto@12.0.1?package-id=a30b3113039a0207","type":"library","author":"Gerald Yeo ","name":"@otplib/plugin-crypto","version":"12.0.1","description":"node crypto plugin for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/plugin-crypto@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-plugin-crypto","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/plugin-thirty-two@12.0.1?package-id=e9e61a8a5751393d","type":"library","author":"Gerald Yeo ","name":"@otplib/plugin-thirty-two","version":"12.0.1","description":"thirty-two plugin for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/plugin-thirty-two:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/plugin-thirty-two@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-plugin-thirty-two","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-thirty-two:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_thirty_two:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_thirty_two:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-thirty:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-thirty:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_thirty:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_thirty:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/preset-default@12.0.1?package-id=8171b09a48e9d93f","type":"library","author":"Gerald Yeo ","name":"@otplib/preset-default","version":"12.0.1","description":"basic preset for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/preset-default:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/preset-default@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-preset-default","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset-default:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset_default:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset_default:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/preset-default/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/preset-v11@12.0.1?package-id=1aa44437b113ebed","type":"library","author":"Gerald Yeo ","name":"@otplib/preset-v11","version":"12.0.1","description":"v11.x compatible interface preset for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/preset-v11:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/preset-v11@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-preset-v11","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset-v11:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset_v11:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset_v11:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/preset-v11/package.json"}]},{"bom-ref":"pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=80ef1a2248d5a920","type":"library","name":"@pkgjs/parseargs","version":"0.11.0","description":"Polyfill of future proposal for `util.parseArgs()`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40pkgjs/parseargs@0.11.0","externalReferences":[{"url":"https://github.com/pkgjs/parseargs#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@pkgjs/parseargs/package.json"}]},{"bom-ref":"pkg:npm/%40scarf/scarf@1.4.0?package-id=19e6077d1014f2df","type":"library","author":"Scarf Systems","name":"@scarf/scarf","version":"1.4.0","description":"Scarf is like Google Analytics for your npm packages. Gain insights into how your packages are installed and used, and by which companies.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40scarf/scarf@1.4.0","externalReferences":[{"url":"git+https://github.com/scarf-sh/scarf-js.git","type":"distribution"},{"url":"https://github.com/scarf-sh/scarf-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:scarf-sh:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scarf/scarf/package.json"}]},{"bom-ref":"pkg:npm/%40scure/base@1.1.9?package-id=8a8c401a9f2b2c51","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@scure/base","version":"1.1.9","description":"Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@scure\\/base:\\@scure\\/base:1.1.9:*:*:*:*:*:*:*","purl":"pkg:npm/%40scure/base@1.1.9","externalReferences":[{"url":"git+https://github.com/paulmillr/scure-base.git","type":"distribution"},{"url":"https://paulmillr.com/noble/#scure","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/base/package.json"}]},{"bom-ref":"pkg:npm/%40scure/bip32@1.4.0?package-id=5f4817f39b8e1c4d","type":"library","author":"Paul Miller (https://paulmillr.com), Patricio Palladino , Paul Miller (https://paulmillr.com)","name":"@scure/bip32","version":"1.4.0","description":"Secure, audited & minimal implementation of BIP32 hierarchical deterministic (HD) wallets over secp256k1","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@scure\\/bip32:\\@scure\\/bip32:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40scure/bip32@1.4.0","externalReferences":[{"url":"git+https://github.com/paulmillr/scure-bip32.git","type":"distribution"},{"url":"https://paulmillr.com/noble/#scure","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/bip32/package.json"}]},{"bom-ref":"pkg:npm/%40scure/bip39@1.3.0?package-id=0f92a1c1ac31f6b0","type":"library","author":"Paul Miller (https://paulmillr.com), Patricio Palladino , Paul Miller (https://paulmillr.com)","name":"@scure/bip39","version":"1.3.0","description":"Secure, audited & minimal implementation of BIP39 mnemonic phrases","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@scure\\/bip39:\\@scure\\/bip39:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40scure/bip39@1.3.0","externalReferences":[{"url":"git+https://github.com/paulmillr/scure-bip39.git","type":"distribution"},{"url":"https://paulmillr.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/bip39/package.json"}]},{"bom-ref":"pkg:npm/%40sindresorhus/is@0.7.0?package-id=a29ebe9c01a24b05","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"@sindresorhus/is","version":"0.7.0","description":"Type check values: `is.string('🦄') //=> true`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40sindresorhus/is@0.7.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@sindresorhus/is/package.json"}]},{"bom-ref":"pkg:npm/%40swc/helpers@0.3.17?package-id=079d0d4fdf762801","type":"library","author":"강동윤 ","name":"@swc/helpers","version":"0.3.17","description":"External helpers for the swc project.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*","purl":"pkg:npm/%40swc/helpers@0.3.17","externalReferences":[{"url":"git+https://github.com/swc-project/swc.git","type":"distribution"},{"url":"https://swc.rs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@swc/helpers/package.json"}]},{"bom-ref":"pkg:npm/%40tokenizer/token@0.3.0?package-id=43352d2f6855caf1","type":"library","author":"Borewit (https://github.com/Borewit)","name":"@tokenizer/token","version":"0.3.0","description":"TypeScript definition for strtok3 token","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@tokenizer\\/token:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40tokenizer/token@0.3.0","externalReferences":[{"url":"https://github.com/Borewit/tokenizer-token.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@tokenizer/token/package.json"}]},{"bom-ref":"pkg:npm/%40tootallnate/once@1.1.2?package-id=c5d7a329145ffcc6","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"@tootallnate/once","version":"1.1.2","description":"Creates a Promise that waits for a single event","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40tootallnate/once@1.1.2","externalReferences":[{"url":"git://github.com/TooTallNate/once.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json"}]},{"bom-ref":"pkg:npm/%40tootallnate/once@2.0.0?package-id=f544b09023665970","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"@tootallnate/once","version":"2.0.0","description":"Creates a Promise that waits for a single event","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40tootallnate/once@2.0.0","externalReferences":[{"url":"git://github.com/TooTallNate/once.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@tootallnate/once/package.json"}]},{"bom-ref":"pkg:npm/%40types/component-emitter@1.2.14?package-id=ae93160dfc27d07c","type":"library","author":"Peter Snider (https://github.com/psnider)","name":"@types/component-emitter","version":"1.2.14","description":"TypeScript definitions for component-emitter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/component-emitter@1.2.14","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/component-emitter","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/component-emitter/package.json"}]},{"bom-ref":"pkg:npm/%40types/cookie@0.4.1?package-id=1339467e13b5c752","type":"library","author":"Pine Mizune (https://github.com/pine), Piotr Błażejewicz (https://github.com/peterblazejewicz)","name":"@types/cookie","version":"0.4.1","description":"TypeScript definitions for cookie","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/cookie@0.4.1","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cookie","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/cookie:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/cookie/package.json"}]},{"bom-ref":"pkg:npm/%40types/cors@2.8.19?package-id=bc4bb778990d4ea4","type":"library","author":"Alan Plum (https://github.com/pluma), Gaurav Sharma (https://github.com/gtpan77), Sebastian Beltran (https://github.com/bjohansebas)","name":"@types/cors","version":"2.8.19","description":"TypeScript definitions for cors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/cors@2.8.19","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/cors/package.json"}]},{"bom-ref":"pkg:npm/%40types/debug@4.1.12?package-id=6c978939ffb311b0","type":"library","author":"Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)","name":"@types/debug","version":"4.1.12","description":"TypeScript definitions for debug","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/debug@4.1.12","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/debug/package.json"}]},{"bom-ref":"pkg:npm/%40types/ms@2.1.0?package-id=495a18008d72fd0f","type":"library","author":"Zhiyuan Wang (https://github.com/danny8002)","name":"@types/ms","version":"2.1.0","description":"TypeScript definitions for ms","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/ms@2.1.0","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/ms/package.json"}]},{"bom-ref":"pkg:npm/%40types/node@20.19.12?package-id=1a396f39fa44decd","type":"library","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","name":"@types/node","version":"20.19.12","description":"TypeScript definitions for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:20.19.12:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/node@20.19.12","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/node/package.json"}]},{"bom-ref":"pkg:npm/%40types/node@22.7.5?package-id=6fe716e8b0927a9d","type":"library","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","name":"@types/node","version":"22.7.5","description":"TypeScript definitions for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/node@22.7.5","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json"}]},{"bom-ref":"pkg:npm/%40types/strip-bom@3.0.0?package-id=d3c68c4be4da21f8","type":"library","author":"Mohamed Hegazy ","name":"@types/strip-bom","version":"3.0.0","description":"TypeScript definitions for strip-bom","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/strip-bom:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/strip-bom@3.0.0","externalReferences":[{"url":"https://www.github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip-bom:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_bom:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_bom:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/strip-bom/package.json"}]},{"bom-ref":"pkg:npm/%40types/strip-json-comments@0.0.30?package-id=a1b120935894d604","type":"library","author":"Dylan R. E. Moonfire (https://github.com/dmoonfire)","name":"@types/strip-json-comments","version":"0.0.30","description":"TypeScript definitions for strip-json-comments","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/strip-json-comments:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/strip-json-comments@0.0.30","externalReferences":[{"url":"https://www.github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip-json-comments:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_json_comments:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_json_comments:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip-json:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip-json:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_json:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip_json:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/strip-json-comments/package.json"}]},{"bom-ref":"pkg:npm/%40types/triple-beam@1.3.5?package-id=3e3be5c397de8382","type":"library","author":"Daniel Byrne (https://github.com/danwbyrne)","name":"@types/triple-beam","version":"1.3.5","description":"TypeScript definitions for triple-beam","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/triple-beam@1.3.5","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/triple-beam/package.json"}]},{"bom-ref":"pkg:npm/%40types/validator@13.15.3?package-id=28a4e010c7ae7198","type":"library","author":"tgfjt (https://github.com/tgfjt), Ilya Mochalov (https://github.com/chrootsu), Ayman Nedjmeddine (https://github.com/IOAyman), Louay Alakkad (https://github.com/louy), Bonggyun Lee (https://github.com/deptno), Naoto Yokoyama (https://github.com/builtinnya), Philipp Katz (https://github.com/qqilihq), Jace Warren (https://github.com/keatz55), Munif Tanjim (https://github.com/MunifTanjim), Vlad Poluch (https://github.com/vlapo), Piotr Błażejewicz (https://github.com/peterblazejewicz), Matteo Nista (https://github.com/Mattewn99), Daniel Freire (https://github.com/dcfreire), Rik Smale (https://github.com/WikiRik)","name":"@types/validator","version":"13.15.3","description":"TypeScript definitions for validator","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.15.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/validator@13.15.3","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/validator","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/validator:13.15.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/validator/package.json"}]},{"bom-ref":"pkg:npm/%40types/ws@8.5.3?package-id=bc7a53b52d363adb","type":"library","author":"Paul Loyd (https://github.com/loyd), Margus Lamp (https://github.com/mlamp), Philippe D'Alva (https://github.com/TitaneBoy), reduckted (https://github.com/reduckted), teidesu (https://github.com/teidesu), Bartosz Wojtkowiak (https://github.com/wojtkowiak), Kyle Hensel (https://github.com/k-yle), Samuel Skeen (https://github.com/cwadrupldijjit)","name":"@types/ws","version":"8.5.3","description":"TypeScript definitions for ws","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/ws:8.5.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/ws@8.5.3","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/ws:\\@types\\/ws:8.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/ws/package.json"}]},{"bom-ref":"pkg:npm/abbrev@1.1.1?package-id=7797aed52ef29847","type":"library","author":"Isaac Z. Schlueter ","name":"abbrev","version":"1.1.1","description":"Like ruby's abbrev module, but in js","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/abbrev@1.1.1","externalReferences":[{"url":"http://github.com/isaacs/abbrev-js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/abbrev/package.json"}]},{"bom-ref":"pkg:npm/abbrev@3.0.1?package-id=bfcf5eaa5daa3133","type":"library","author":"GitHub Inc.","name":"abbrev","version":"3.0.1","description":"Like ruby's abbrev module, but in js","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/abbrev@3.0.1","externalReferences":[{"url":"git+https://github.com/npm/abbrev-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json"}]},{"bom-ref":"pkg:npm/abitype@0.7.1?package-id=663ac1c9b870ce8a","type":"library","name":"abitype","version":"0.7.1","description":"Strict TypeScript types for Ethereum ABIs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wagmi-dev:abitype:0.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/abitype@0.7.1","externalReferences":[{"url":"https://github.com/wagmi-dev/abitype.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:abitype:abitype:0.7.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/abitype/package.json"}]},{"bom-ref":"pkg:npm/abort-controller@3.0.0?package-id=7832aa1cacf310b2","type":"library","author":"Toru Nagashima (https://github.com/mysticatea)","name":"abort-controller","version":"3.0.0","description":"An implementation of WHATWG AbortController interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/abort-controller@3.0.0","externalReferences":[{"url":"git+https://github.com/mysticatea/abort-controller.git","type":"distribution"},{"url":"https://github.com/mysticatea/abort-controller#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/abort-controller/package.json"}]},{"bom-ref":"pkg:npm/accepts@1.3.8?package-id=fe1f2ff03fb9475c","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"accepts","version":"1.3.8","description":"Higher-level content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/accepts@1.3.8","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/accepts/package.json"}]},{"bom-ref":"pkg:npm/acorn@7.4.1?package-id=c0f7127acbceb420","type":"library","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","name":"acorn","version":"7.4.1","description":"ECMAScript parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:acornjs:acorn:7.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/acorn@7.4.1","externalReferences":[{"url":"https://github.com/acornjs/acorn.git","type":"distribution"},{"url":"https://github.com/acornjs/acorn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json"}]},{"bom-ref":"pkg:npm/acorn@8.15.0?package-id=facfba058a0afa86","type":"library","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","name":"acorn","version":"8.15.0","description":"ECMAScript parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:acornjs:acorn:8.15.0:*:*:*:*:*:*:*","purl":"pkg:npm/acorn@8.15.0","externalReferences":[{"url":"git+https://github.com/acornjs/acorn.git","type":"distribution"},{"url":"https://github.com/acornjs/acorn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn:acorn:8.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/acorn/package.json"}]},{"bom-ref":"pkg:npm/acorn-walk@8.3.4?package-id=dbdb98fb9b57cb53","type":"library","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","name":"acorn-walk","version":"8.3.4","description":"ECMAScript (ESTree) AST walker","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:acorn-walk:acorn-walk:8.3.4:*:*:*:*:*:*:*","purl":"pkg:npm/acorn-walk@8.3.4","externalReferences":[{"url":"https://github.com/acornjs/acorn.git","type":"distribution"},{"url":"https://github.com/acornjs/acorn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn-walk:acorn_walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn_walk:acorn-walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn_walk:acorn_walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acornjs:acorn-walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acornjs:acorn_walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn:acorn-walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn:acorn_walk:8.3.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/acorn-walk/package.json"}]},{"bom-ref":"pkg:npm/aes-js@4.0.0-beta.5?package-id=6ad4b0036eebc3a0","type":"library","author":"Richard Moore ","name":"aes-js","version":"4.0.0-beta.5","description":"A pure JavaScript implementation of the AES block cipher and all common modes of operation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","purl":"pkg:npm/aes-js@4.0.0-beta.5","externalReferences":[{"url":"git://github.com/ricmoo/aes-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aes-js/package.json"}]},{"bom-ref":"pkg:npm/agent-base@6.0.2?package-id=aeef16c972765f3c","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"agent-base","version":"6.0.2","description":"Turn a function into an `http.Agent` instance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/agent-base@6.0.2","externalReferences":[{"url":"git://github.com/TooTallNate/node-agent-base.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/agent-base/package.json"}]},{"bom-ref":"pkg:npm/agent-base@7.1.4?package-id=96ecb0353e427e76","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"agent-base","version":"7.1.4","description":"Turn a function into an `http.Agent` instance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/agent-base@7.1.4","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json"}]},{"bom-ref":"pkg:npm/agent-base@7.1.4?package-id=89a76184ab2e6db2","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"agent-base","version":"7.1.4","description":"Turn a function into an `http.Agent` instance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/agent-base@7.1.4","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json"}]},{"bom-ref":"pkg:npm/agentkeepalive@4.6.0?package-id=c6a7724321f5beae","type":"library","author":"fengmk2 (https://github.com/fengmk2)","name":"agentkeepalive","version":"4.6.0","description":"Missing keepalive http.Agent","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/agentkeepalive@4.6.0","externalReferences":[{"url":"git://github.com/node-modules/agentkeepalive.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/agentkeepalive/package.json"}]},{"bom-ref":"pkg:npm/aggregate-error@3.1.0?package-id=7cedce27af4fa8d6","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"aggregate-error","version":"3.1.0","description":"Create an error from multiple errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/aggregate-error@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aggregate-error/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=ba5607392e56dee9","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=2b280fc78a93d0b1","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=b93db3f55b850b14","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@3.0.1?package-id=dddd120589f7009b","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-regex","version":"3.0.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@5.0.1?package-id=215b7da2acde9858","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-regex","version":"5.0.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@5.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@6.2.0?package-id=3f33beb59e12eb10","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"ansi-regex","version":"6.2.0","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@6.2.0?package-id=c7daa267534d8282","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"ansi-regex","version":"6.2.0","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@2.2.1?package-id=65b4c3eb14b71ee6","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)","name":"ansi-styles","version":"2.2.1","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@2.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@3.2.1?package-id=f879ff424c2ec284","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-styles","version":"3.2.1","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@3.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=c3f3679aac65318b","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=c365b03d53f8ca80","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=f3dee5a49bb85e72","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@6.2.1?package-id=8270a49368d729a2","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"ansi-styles","version":"6.2.1","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:6.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@6.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/anymatch@3.1.3?package-id=1fdc06fdab01441e","type":"library","author":"Elan Shanker (https://github.com/es128)","name":"anymatch","version":"3.1.3","description":"Matches strings against configurable strings, globs, regular expressions, and/or functions","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:jonschlinkert:anymatch:3.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/anymatch@3.1.3","externalReferences":[{"url":"https://github.com/micromatch/anymatch","type":"distribution"},{"url":"https://github.com/micromatch/anymatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/anymatch/package.json"}]},{"bom-ref":"pkg:npm/append-field@1.0.0?package-id=40d1f9967f309c48","type":"library","author":"Linus Unnebäck ","name":"append-field","version":"1.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/append-field@1.0.0","externalReferences":[{"url":"http://github.com/LinusU/node-append-field.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:LinusU:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:LinusU:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/append-field/package.json"}]},{"bom-ref":"pkg:npm/aproba@1.2.0?package-id=81de4b22dbb401d0","type":"library","author":"Rebecca Turner ","name":"aproba","version":"1.2.0","description":"A ridiculously light-weight argument validator (now browser friendly)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/aproba@1.2.0","externalReferences":[{"url":"https://github.com/iarna/aproba","type":"distribution"},{"url":"https://github.com/iarna/aproba","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:aproba:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aproba/package.json"}]},{"bom-ref":"pkg:npm/archive-type@4.0.0?package-id=3fb8ce78823b4311","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"archive-type","version":"4.0.0","description":"Detect the archive type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/archive-type@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive-type:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive_type:archive-type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive_type:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive:archive-type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archive-type/package.json"}]},{"bom-ref":"pkg:npm/archiver@1.3.0?package-id=dec4b5088a113d49","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"archiver","version":"1.3.0","description":"a streaming interface for archive generation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiverjs:archiver:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/archiver@1.3.0","externalReferences":[{"url":"https://github.com/archiverjs/node-archiver.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-archiver","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/package.json"}]},{"bom-ref":"pkg:npm/archiver-utils@1.3.0?package-id=35ab1a4a9ad1f907","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"archiver-utils","version":"1.3.0","description":"utility functions for archiver","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/archiver-utils@1.3.0","externalReferences":[{"url":"https://github.com/archiverjs/archiver-utils.git","type":"distribution"},{"url":"https://github.com/archiverjs/archiver-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/package.json"}]},{"bom-ref":"pkg:npm/are-we-there-yet@1.1.7?package-id=38e39a5c3788e5c4","type":"library","author":"Rebecca Turner (http://re-becca.org)","name":"are-we-there-yet","version":"1.1.7","description":"Keep track of the overall completion of many disparate processes","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/are-we-there-yet@1.1.7","externalReferences":[{"url":"https://github.com/iarna/are-we-there-yet.git","type":"distribution"},{"url":"https://github.com/iarna/are-we-there-yet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/are-we-there-yet/package.json"}]},{"bom-ref":"pkg:npm/are-we-there-yet@3.0.1?package-id=a1e5dbdcb445cc0b","type":"library","author":"GitHub Inc.","name":"are-we-there-yet","version":"3.0.1","description":"Keep track of the overall completion of many disparate processes","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/are-we-there-yet@3.0.1","externalReferences":[{"url":"https://github.com/npm/are-we-there-yet.git","type":"distribution"},{"url":"https://github.com/npm/are-we-there-yet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json"}]},{"bom-ref":"pkg:npm/arg@4.1.3?package-id=1d7fb08b7a508a14","type":"library","author":"Josh Junon ","name":"arg","version":"4.1.3","description":"Another simple argument parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:arg:arg:4.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/arg@4.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/arg/package.json"}]},{"bom-ref":"pkg:npm/argparse@1.0.10?package-id=d60313d70eaae47d","type":"library","author":"Eugene Shkuropat, Paul Jacobson","name":"argparse","version":"1.0.10","description":"Very powerful CLI arguments parser. Native port of argparse - python's options parsing library","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*","purl":"pkg:npm/argparse@1.0.10","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/argparse/package.json"}]},{"bom-ref":"pkg:npm/arr-diff@4.0.0?package-id=79c9f00f6f2bc886","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com)","name":"arr-diff","version":"4.0.0","description":"Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:arr-diff:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/arr-diff@4.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/arr-diff","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:arr_diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-diff:arr-diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-diff:arr_diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_diff:arr-diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_diff:arr_diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr-diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr_diff:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/arr-diff/package.json"}]},{"bom-ref":"pkg:npm/arr-flatten@1.1.0?package-id=af48b36479290ede","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Luke Edwards (https://lukeed.com)","name":"arr-flatten","version":"1.1.0","description":"Recursively flatten an array or arrays.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:arr-flatten:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/arr-flatten@1.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/arr-flatten","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:arr_flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-flatten:arr-flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-flatten:arr_flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_flatten:arr-flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_flatten:arr_flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr-flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr_flatten:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/arr-flatten/package.json"}]},{"bom-ref":"pkg:npm/arr-union@3.1.0?package-id=93ff899831bd49b7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"arr-union","version":"3.1.0","description":"Combines a list of arrays, returning a single array with unique values, using strict equality for comparisons.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:arr-union:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/arr-union@3.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/arr-union","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:arr_union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-union:arr-union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr-union:arr_union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_union:arr-union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr_union:arr_union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr-union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:arr:arr_union:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/arr-union/package.json"}]},{"bom-ref":"pkg:npm/array-buffer-byte-length@1.0.2?package-id=f2867470e7b27597","type":"library","author":"Jordan Harband ","name":"array-buffer-byte-length","version":"1.0.2","description":"Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/array-buffer-byte-length@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/array-buffer-byte-length.git","type":"distribution"},{"url":"https://github.com/inspect-js/array-buffer-byte-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-buffer-byte-length/package.json"}]},{"bom-ref":"pkg:npm/array-each@1.0.1?package-id=7aadb2fc6095104c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"array-each","version":"1.0.1","description":"Loop over each item in an array and call the given function on every element.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:array-each:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/array-each@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/array-each","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-each:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-each:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_each:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_each:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-each/package.json"}]},{"bom-ref":"pkg:npm/array-flatten@1.1.1?package-id=5041c141565d0833","type":"library","author":"Blake Embrey (http://blakeembrey.me)","name":"array-flatten","version":"1.1.1","description":"Flatten an array of nested arrays into a single flat array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/array-flatten@1.1.1","externalReferences":[{"url":"git://github.com/blakeembrey/array-flatten.git","type":"distribution"},{"url":"https://github.com/blakeembrey/array-flatten","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-flatten/package.json"}]},{"bom-ref":"pkg:npm/array-slice@1.1.0?package-id=a261f10f751ab469","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"array-slice","version":"1.1.0","description":"Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:array-slice:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/array-slice@1.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/array-slice","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-slice:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-slice:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_slice:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_slice:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-slice/package.json"}]},{"bom-ref":"pkg:npm/array-unique@0.3.2?package-id=9bb35b54a028e73b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"array-unique","version":"0.3.2","description":"Remove duplicate values from an array. Fastest ES5 implementation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:array-unique:0.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/array-unique@0.3.2","externalReferences":[{"url":"https://github.com/jonschlinkert/array-unique","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:array_unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-unique:array-unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-unique:array_unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_unique:array-unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_unique:array_unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_unique:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-unique/package.json"}]},{"bom-ref":"pkg:npm/asap@2.0.6?package-id=1c54e38011c51e5b","type":"library","name":"asap","version":"2.0.6","description":"High-priority task queue for Node.js and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/asap@2.0.6","externalReferences":[{"url":"https://github.com/kriskowal/asap.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/asap/package.json"}]},{"bom-ref":"pkg:npm/assert-never@1.4.0?package-id=e57cc97cb7061a4e","type":"library","author":"Daniel Lytkin ","name":"assert-never","version":"1.4.0","description":"Helper function for exhaustive checks of discriminated unions in TypeScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:assert-never:assert-never:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/assert-never@1.4.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert-never:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert_never:assert-never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert_never:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert:assert-never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/assert-never/package.json"}]},{"bom-ref":"pkg:npm/assign-symbols@1.0.0?package-id=e6db49d199a690ef","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"assign-symbols","version":"1.0.0","description":"Assign the enumerable es6 Symbol properties from an object (or objects) to the first object passed on the arguments. Can be used as a supplement to other extend, assign or merge methods as a polyfill for the Symbols part of the es6 Object.assign method.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:assign-symbols:assign-symbols:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/assign-symbols@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/assign-symbols","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:assign-symbols:assign_symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assign_symbols:assign-symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assign_symbols:assign_symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:assign-symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:assign_symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assign:assign-symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assign:assign_symbols:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/assign-symbols/package.json"}]},{"bom-ref":"pkg:npm/async@2.6.4?package-id=50f2f4c26ff2ccab","type":"library","author":"Caolan McMahon","name":"async","version":"2.6.4","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/async@2.6.4","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/async@2.6.4?package-id=5aa21ddd678e2c5a","type":"library","author":"Caolan McMahon","name":"async","version":"2.6.4","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/async@2.6.4","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/portscanner/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/async@3.2.6?package-id=6753e2a5837ba461","type":"library","author":"Caolan McMahon","name":"async","version":"3.2.6","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*","purl":"pkg:npm/async@3.2.6","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/at-least-node@1.0.0?package-id=dd9e19320bbf0929","type":"library","author":"Ryan Zimmerman ","name":"at-least-node","version":"1.0.0","description":"Lightweight Node.js version sniffing/comparison","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/at-least-node@1.0.0","externalReferences":[{"url":"git+https://github.com/RyanZim/at-least-node.git","type":"distribution"},{"url":"https://github.com/RyanZim/at-least-node#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least-node:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least_node:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least_node:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/at-least-node/package.json"}]},{"bom-ref":"pkg:npm/atob@2.1.2?package-id=27aacb47fbbddd97","type":"library","author":"AJ ONeal (https://coolaj86.com)","name":"atob","version":"2.1.2","description":"atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)","licenses":[{"expression":"MIT OR Apache-2.0"}],"cpe":"cpe:2.3:a:atob_project:atob:2.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/atob@2.1.2","externalReferences":[{"url":"git://git.coolaj86.com/coolaj86/atob.js.git","type":"distribution"},{"url":"https://git.coolaj86.com/coolaj86/atob.js.git","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/atob/package.json"}]},{"bom-ref":"pkg:npm/available-typed-arrays@1.0.7?package-id=91c13e4c18804052","type":"library","author":"Jordan Harband ","name":"available-typed-arrays","version":"1.0.7","description":"Returns an array of Typed Array names that are available in the current environment","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/available-typed-arrays@1.0.7","externalReferences":[{"url":"git+https://github.com/inspect-js/available-typed-arrays.git","type":"distribution"},{"url":"https://github.com/inspect-js/available-typed-arrays#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/available-typed-arrays/package.json"}]},{"bom-ref":"pkg:npm/babel-walk@3.0.0-canary-5?package-id=716281520579424d","type":"library","author":"Timothy Gu ","name":"babel-walk","version":"3.0.0-canary-5","description":"Lightweight Babel AST traversal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:babel-walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","purl":"pkg:npm/babel-walk@3.0.0-canary-5","externalReferences":[{"url":"https://github.com/pugjs/babel-walk.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel-walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel_walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel_walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/babel-walk/package.json"}]},{"bom-ref":"pkg:npm/balanced-match@1.0.2?package-id=956658d078dc7d57","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"balanced-match","version":"1.0.2","description":"Match balanced character pairs, like \"{\" and \"}\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/balanced-match@1.0.2","externalReferences":[{"url":"git://github.com/juliangruber/balanced-match.git","type":"distribution"},{"url":"https://github.com/juliangruber/balanced-match","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/balanced-match/package.json"}]},{"bom-ref":"pkg:npm/base@0.11.2?package-id=1921674c9fb6eba8","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), John O'Donnell (https://github.com/criticalmash), Jon Schlinkert (http://twitter.com/jonschlinkert), tunnckoCore (https://i.am.charlike.online), , Brian Woodward (https://github.com/doowb), Jon Schlinkert (https://github.com/jonschlinkert)","name":"base","version":"0.11.2","description":"base is the foundation for creating modular, unit testable and highly pluggable node.js applications, starting with a handful of common methods, like `set`, `get`, `del` and `use`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-base:base:0.11.2:*:*:*:*:*:*:*","purl":"pkg:npm/base@0.11.2","externalReferences":[{"url":"https://github.com/node-base/base","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:base:base:0.11.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base/package.json"}]},{"bom-ref":"pkg:deb/debian/base-files@12.4%2Bdeb12u11?arch=amd64&distro=debian-12&package-id=c91bc2e84142f428","type":"library","publisher":"Santiago Vila ","name":"base-files","version":"12.4+deb12u11","licenses":[{"license":{"name":"GPL"}}],"cpe":"cpe:2.3:a:base-files:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*","purl":"pkg:deb/debian/base-files@12.4%2Bdeb12u11?arch=amd64&distro=debian-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:base-files:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base_files:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base_files:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/base-files"},{"name":"syft:location:1:layerID","value":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35"},{"name":"syft:location:1:path","value":"/usr/share/doc/base-files/copyright"},{"name":"syft:location:2:layerID","value":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/base-files.md5sums"},{"name":"syft:metadata:installedSize","value":"341"}]},{"bom-ref":"pkg:npm/base64-arraybuffer@0.1.4?package-id=7b4063d10599bfae","type":"library","author":"Niklas von Hertzen (http://hertzen.com)","name":"base64-arraybuffer","version":"0.1.4","description":"Encode/decode base64 data into ArrayBuffers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/base64-arraybuffer@0.1.4","externalReferences":[{"url":"https://github.com/niklasvh/base64-arraybuffer","type":"distribution"},{"url":"https://github.com/niklasvh/base64-arraybuffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:niklasvh:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:niklasvh:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64-arraybuffer/package.json"}]},{"bom-ref":"pkg:npm/base64-js@0.0.8?package-id=6f1f1a7796cb63d0","type":"library","author":"T. Jameson Little ","name":"base64-js","version":"0.0.8","description":"Base64 encoding/decoding in pure JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beatgammit:base64-js:0.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/base64-js@0.0.8","externalReferences":[{"url":"git://github.com/beatgammit/base64-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beatgammit:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json"}]},{"bom-ref":"pkg:npm/base64-js@1.5.1?package-id=c493a9a41b36da0b","type":"library","author":"T. Jameson Little ","name":"base64-js","version":"1.5.1","description":"Base64 encoding/decoding in pure JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/base64-js@1.5.1","externalReferences":[{"url":"git://github.com/beatgammit/base64-js.git","type":"distribution"},{"url":"https://github.com/beatgammit/base64-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64-js/package.json"}]},{"bom-ref":"pkg:npm/base64id@2.0.0?package-id=d1750eb90689f1a4","type":"library","author":"Kristian Faeldt ","name":"base64id","version":"2.0.0","description":"Generates a base64 id","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/base64id@2.0.0","externalReferences":[{"url":"https://github.com/faeldt/base64id.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:faeldt:base64id:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64id/package.json"}]},{"bom-ref":"pkg:npm/base64url@0.0.6?package-id=2f8a9d6c7656ba10","type":"library","author":"Brian J Brennan","name":"base64url","version":"0.0.6","description":"For encoding to/from base64urls","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:base64url:0.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/base64url@0.0.6","externalReferences":[{"url":"git://github.com/brianloveswords/base64url.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64url/package.json"}]},{"bom-ref":"pkg:npm/basic-auth@2.0.1?package-id=580ca5f2beaae938","type":"library","name":"basic-auth","version":"2.0.1","description":"node.js basic auth parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/basic-auth@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json"}]},{"bom-ref":"pkg:npm/batch@0.6.1?package-id=344c43aaf43bb8dc","type":"library","author":"TJ Holowaychuk ","name":"batch","version":"0.6.1","description":"Simple async batch with concurrency control and progress reporting.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:visionmedia:batch:0.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/batch@0.6.1","externalReferences":[{"url":"https://github.com/visionmedia/batch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/batch/package.json"}]},{"bom-ref":"pkg:npm/baz?package-id=99a08ef6ddd74ba7","type":"library","name":"baz","version":"UNKNOWN","cpe":"cpe:2.3:a:baz:baz:*:*:*:*:*:*:*:*","purl":"pkg:npm/baz","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json"}]},{"bom-ref":"pkg:npm/beep-boop@1.2.3?package-id=ac8f35c9bc6d4edc","type":"library","name":"beep-boop","version":"1.2.3","cpe":"cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/beep-boop@1.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/github-from-package/example/package.json"}]},{"bom-ref":"pkg:npm/big-integer@1.6.52?package-id=6efaee3d2e9117ff","type":"library","author":"Peter Olson ","name":"big-integer","version":"1.6.52","description":"An arbitrary length integer library for Javascript","licenses":[{"license":{"id":"Unlicense"}}],"cpe":"cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*","purl":"pkg:npm/big-integer@1.6.52","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/big-integer/package.json"}]},{"bom-ref":"pkg:npm/binary@0.3.0?package-id=aac28aacec14e6f2","type":"library","author":"James Halliday (http://substack.net)","name":"binary","version":"0.3.0","description":"Unpack multibyte binary values from buffers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/binary@0.3.0","externalReferences":[{"url":"http://github.com/substack/node-binary.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/binary/package.json"}]},{"bom-ref":"pkg:npm/binary-extensions@2.3.0?package-id=cdea7c486a93d741","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"binary-extensions","version":"2.3.0","description":"List of binary file extensions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:binary-extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/binary-extensions@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary-extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary_extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary_extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary:binary-extensions:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary:binary_extensions:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/binary-extensions/package.json"}]},{"bom-ref":"pkg:npm/bindings@1.5.0?package-id=848e919a5348c76e","type":"library","author":"Nathan Rajlich (http://tootallnate.net)","name":"bindings","version":"1.5.0","description":"Helper module for loading your native module's .node file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/bindings@1.5.0","externalReferences":[{"url":"git://github.com/TooTallNate/node-bindings.git","type":"distribution"},{"url":"https://github.com/TooTallNate/node-bindings","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bindings/package.json"}]},{"bom-ref":"pkg:npm/bintrees@1.0.2?package-id=db53f4ebaee4e2cf","type":"library","author":"Vadim Graboys ","name":"bintrees","version":"1.0.2","description":"Binary Search Trees","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bintrees:bintrees:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/bintrees@1.0.2","externalReferences":[{"url":"git://github.com/vadimg/js_bintrees.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:vadimg:bintrees:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bintrees/package.json"}]},{"bom-ref":"pkg:npm/bl@1.2.3?package-id=1d71c68896a44c86","type":"library","author":"Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)","name":"bl","version":"1.2.3","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/bl@1.2.3","externalReferences":[{"url":"https://github.com/rvagg/bl.git","type":"distribution"},{"url":"https://github.com/rvagg/bl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bl/package.json"}]},{"bom-ref":"pkg:npm/bl@4.1.0?package-id=846a0edd607229fd","type":"library","author":"Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)","name":"bl","version":"4.1.0","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/bl@4.1.0","externalReferences":[{"url":"https://github.com/rvagg/bl.git","type":"distribution"},{"url":"https://github.com/rvagg/bl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json"}]},{"bom-ref":"pkg:npm/bluebird@3.4.7?package-id=441b568aa058ddd4","type":"library","author":"Petka Antonov (http://github.com/petkaantonov/)","name":"bluebird","version":"3.4.7","description":"Full featured Promises/A+ implementation with exceptionally good performance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:petkaantonov:bluebird:3.4.7:*:*:*:*:*:*:*","purl":"pkg:npm/bluebird@3.4.7","externalReferences":[{"url":"git://github.com/petkaantonov/bluebird.git","type":"distribution"},{"url":"https://github.com/petkaantonov/bluebird","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bluebird:bluebird:3.4.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json"}]},{"bom-ref":"pkg:npm/bluebird@3.7.2?package-id=45ec017cc93f373c","type":"library","author":"Petka Antonov (http://github.com/petkaantonov/)","name":"bluebird","version":"3.7.2","description":"Full featured Promises/A+ implementation with exceptionally good performance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:petkaantonov:bluebird:3.7.2:*:*:*:*:*:*:*","purl":"pkg:npm/bluebird@3.7.2","externalReferences":[{"url":"git://github.com/petkaantonov/bluebird.git","type":"distribution"},{"url":"https://github.com/petkaantonov/bluebird","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bluebird/package.json"}]},{"bom-ref":"pkg:npm/body-parser@1.20.3?package-id=d8348f0566c46229","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"body-parser","version":"1.20.3","description":"Node.js body parsing middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:openjsf:body-parser:1.20.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/body-parser@1.20.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/body-parser/package.json"}]},{"bom-ref":"pkg:npm/bower-config@1.4.3?package-id=2c560d35b75226b0","type":"library","author":"Twitter","name":"bower-config","version":"1.4.3","description":"The Bower config reader and writer.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bower-config:bower-config:1.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/bower-config@1.4.3","externalReferences":[{"url":"https://github.com/bower/bower/tree/master/packages/bower-config","type":"distribution"},{"url":"http://bower.io","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bower-config:bower_config:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bower_config:bower-config:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bower_config:bower_config:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bower:bower-config:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bower:bower_config:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bower-config/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=79ca6b57cb6da8f4","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=edfc435f78ffbb1c","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=38ff028c7c458475","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=c861e69821b6b8fe","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=70266c742ac992ba","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=e9b43263265b984a","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=28fb5bb71047516a","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=098d823421bc1197","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=17d5b1f1f2c265c0","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=ec01b45e50a80fc7","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.12?package-id=204df6e1c0323307","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"1.1.12","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@1.1.12","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@2.0.2?package-id=1fcda56aa7b9b39c","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"brace-expansion","version":"2.0.2","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/brace-expansion@2.0.2","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace-expansion:brace_expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace-expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace_expansion:brace_expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace-expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:brace_expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace-expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brace:brace_expansion:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/braces@2.3.2?package-id=e18c817c2057c675","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"braces","version":"2.3.2","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:braces_project:braces:2.3.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/braces@2.3.2","externalReferences":[{"url":"https://github.com/micromatch/braces","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:braces:2.3.2:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/braces/package.json"}]},{"bom-ref":"pkg:npm/braces@3.0.3?package-id=1fea4d70444c02f0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"braces","version":"3.0.3","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/braces@3.0.3","externalReferences":[{"url":"https://github.com/micromatch/braces","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json"}]},{"bom-ref":"pkg:npm/braces@3.0.3?package-id=05e4a42f1d20184c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"braces","version":"3.0.3","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/braces@3.0.3","externalReferences":[{"url":"https://github.com/micromatch/braces","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/braces/package.json"}]},{"bom-ref":"pkg:npm/braces@3.0.3?package-id=7300fec6ea68a472","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"braces","version":"3.0.3","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/braces@3.0.3","externalReferences":[{"url":"https://github.com/micromatch/braces","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/braces/package.json"}]},{"bom-ref":"pkg:npm/brotli@1.3.3?package-id=470bc485996d4bbe","type":"library","author":"Devon Govett ","name":"brotli","version":"1.3.3","description":"A port of the Brotli compression algorithm as used in WOFF2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:brotli:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/brotli@1.3.3","externalReferences":[{"url":"https://github.com/devongovett/brotli.js.git","type":"distribution"},{"url":"https://github.com/devongovett/brotli.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/brotli/package.json"}]},{"bom-ref":"pkg:npm/browser_field?package-id=0ec800aec91252a5","type":"library","name":"browser_field","version":"UNKNOWN","cpe":"cpe:2.3:a:browser-field:browser-field:*:*:*:*:*:*:*:*","purl":"pkg:npm/browser_field","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser-field:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser_field:browser-field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser_field:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser:browser-field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json"}]},{"bom-ref":"pkg:npm/buffer@5.7.1?package-id=8160d61272f16fc2","type":"library","author":"Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ","name":"buffer","version":"5.7.1","description":"Node.js Buffer API, for the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/buffer@5.7.1","externalReferences":[{"url":"git://github.com/feross/buffer.git","type":"distribution"},{"url":"https://github.com/feross/buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer/package.json"}]},{"bom-ref":"pkg:npm/buffer@6.0.3?package-id=b34920cb2184e6ad","type":"library","author":"Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ","name":"buffer","version":"6.0.3","description":"Node.js Buffer API, for the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/buffer@6.0.3","externalReferences":[{"url":"git://github.com/feross/buffer.git","type":"distribution"},{"url":"https://github.com/feross/buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json"}]},{"bom-ref":"pkg:npm/buffer-alloc@1.2.0?package-id=0215db4a4aa6cd05","type":"library","name":"buffer-alloc","version":"1.2.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-alloc@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-alloc/package.json"}]},{"bom-ref":"pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=72525885a05217f9","type":"library","name":"buffer-alloc-unsafe","version":"1.1.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-alloc-unsafe@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json"}]},{"bom-ref":"pkg:npm/buffer-crc32@0.2.13?package-id=018e707480d9a394","type":"library","author":"Brian J. Brennan , Vladimir Kuznetsov","name":"buffer-crc32","version":"0.2.13","description":"A pure javascript CRC32 algorithm that plays nice with binary data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-crc32@0.2.13","externalReferences":[{"url":"git://github.com/brianloveswords/buffer-crc32.git","type":"distribution"},{"url":"https://github.com/brianloveswords/buffer-crc32","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-crc32/package.json"}]},{"bom-ref":"pkg:npm/buffer-fill@1.0.0?package-id=b5b4b05d23ef0590","type":"library","name":"buffer-fill","version":"1.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-fill@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-fill/package.json"}]},{"bom-ref":"pkg:npm/buffer-from@1.1.2?package-id=d2869a97005ddd30","type":"library","name":"buffer-from","version":"1.1.2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-from@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-from/package.json"}]},{"bom-ref":"pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=08bc6bd9a895200f","type":"library","author":"https://github.com/sarosia","name":"buffer-indexof-polyfill","version":"1.0.2","description":"This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-indexof-polyfill@1.0.2","externalReferences":[{"url":"git+https://github.com/sarosia/buffer-indexof-polyfill.git","type":"distribution"},{"url":"https://github.com/sarosia/buffer-indexof-polyfill#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json"}]},{"bom-ref":"pkg:npm/buffers@0.1.1?package-id=fd60bbd17e6803d8","type":"library","author":"James Halliday (http://substack.net)","name":"buffers","version":"0.1.1","description":"Treat a collection of Buffers as a single contiguous partially mutable Buffer.","cpe":"cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/buffers@0.1.1","externalReferences":[{"url":"http://github.com/substack/node-buffers.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffers/package.json"}]},{"bom-ref":"pkg:npm/busboy@1.6.0?package-id=72b84630ff8aade7","type":"library","author":"Brian White ","name":"busboy","version":"1.6.0","description":"A streaming parser for HTML form data for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/busboy@1.6.0","externalReferences":[{"url":"http://github.com/mscdex/busboy.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mscdex:busboy:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/busboy/package.json"}]},{"bom-ref":"pkg:npm/byline@4.2.2?package-id=1db66371bc7880de","type":"library","author":"John Hewson","name":"byline","version":"4.2.2","description":"simple line-by-line stream reader","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jahewson:byline:4.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/byline@4.2.2","externalReferences":[{"url":"https://github.com/jahewson/node-byline","type":"distribution"},{"url":"https://github.com/jahewson/node-byline","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:byline:byline:4.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/byline/package.json"}]},{"bom-ref":"pkg:npm/bytes@3.1.2?package-id=1d0cce2090c4dc09","type":"library","author":"TJ Holowaychuk (http://tjholowaychuk.com), Jed Watson , Théo FIDRY ","name":"bytes","version":"3.1.2","description":"Utility to parse a string bytes to bytes and vice-versa","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/bytes@3.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bytes/package.json"}]},{"bom-ref":"pkg:npm/cacache@15.3.0?package-id=f5c0681a2e946e2d","type":"library","name":"cacache","version":"15.3.0","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cacache:cacache:15.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/cacache@15.3.0","externalReferences":[{"url":"https://github.com/npm/cacache","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:cacache:15.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json"}]},{"bom-ref":"pkg:npm/cacache@19.0.1?package-id=ace0af3ce948f36b","type":"library","author":"GitHub Inc.","name":"cacache","version":"19.0.1","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/cacache@19.0.1","externalReferences":[{"url":"git+https://github.com/npm/cacache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacache/package.json"}]},{"bom-ref":"pkg:npm/cache-base@1.0.1?package-id=baaa5d54fe4a3c13","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"cache-base","version":"1.0.1","description":"Basic object cache with `get`, `set`, `del`, and `has` methods for node.js/javascript projects.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cache-base_project:cache-base:1.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/cache-base@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/cache-base","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cache-base/package.json"}]},{"bom-ref":"pkg:npm/cacheable-request@2.1.4?package-id=346e1627c1f72870","type":"library","author":"Luke Childs (http://lukechilds.co.uk)","name":"cacheable-request","version":"2.1.4","description":"Wrap native HTTP requests with RFC compliant cache support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/cacheable-request@2.1.4","externalReferences":[{"url":"git+https://github.com/lukechilds/cacheable-request.git","type":"distribution"},{"url":"https://github.com/lukechilds/cacheable-request","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable-request:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable_request:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable_request:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/package.json"}]},{"bom-ref":"pkg:npm/call-bind@1.0.8?package-id=b538562043029461","type":"library","author":"Jordan Harband ","name":"call-bind","version":"1.0.8","description":"Robustly `.call.bind()` a function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bind:call-bind:1.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/call-bind@1.0.8","externalReferences":[{"url":"git+https://github.com/ljharb/call-bind.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bind#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call_bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call-bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call_bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bind:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bind/package.json"}]},{"bom-ref":"pkg:npm/call-bind-apply-helpers@1.0.2?package-id=0d18b02f5378691f","type":"library","author":"Jordan Harband ","name":"call-bind-apply-helpers","version":"1.0.2","description":"Helper functions around Function call/apply/bind, for use in `call-bind`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/call-bind-apply-helpers@1.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/call-bind-apply-helpers.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bind-apply-helpers#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bind-apply-helpers/package.json"}]},{"bom-ref":"pkg:npm/call-bound@1.0.4?package-id=44af6e189fe32d87","type":"library","author":"Jordan Harband ","name":"call-bound","version":"1.0.4","description":"Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/call-bound@1.0.4","externalReferences":[{"url":"git+https://github.com/ljharb/call-bound.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bound#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bound/package.json"}]},{"bom-ref":"pkg:npm/camelcase@5.3.1?package-id=92e4f8e8e365d6ef","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"camelcase","version":"5.3.1","description":"Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/camelcase@5.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/camelcase/package.json"}]},{"bom-ref":"pkg:npm/chainsaw@0.1.0?package-id=6e4c3d3622249d54","type":"library","author":"James Halliday (http://substack.net)","name":"chainsaw","version":"0.1.0","description":"Build chainable fluent interfaces the easy way... with a freakin' chainsaw!","licenses":[{"license":{"name":"MIT/X11"}}],"cpe":"cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/chainsaw@0.1.0","externalReferences":[{"url":"http://github.com/substack/node-chainsaw.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chainsaw/package.json"}]},{"bom-ref":"pkg:npm/chalk@1.1.3?package-id=af9826c69b6847f8","type":"library","author":"Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","name":"chalk","version":"1.1.3","description":"Terminal string styling done right. Much color.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@1.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/chalk@2.4.2?package-id=015bdd0e54562d25","type":"library","name":"chalk","version":"2.4.2","description":"Terminal string styling done right","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@2.4.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/chalk@4.1.2?package-id=7fe24d7225fc8b9a","type":"library","name":"chalk","version":"4.1.2","description":"Terminal string styling done right","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@4.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/character-parser@2.2.0?package-id=34bd9ccc72e70b6f","type":"library","author":"ForbesLindesay","name":"character-parser","version":"2.2.0","description":"Parse JavaScript one character at a time to look for snippets in Templates. This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:character-parser:character-parser:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/character-parser@2.2.0","externalReferences":[{"url":"https://github.com/ForbesLindesay/character-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:character-parser:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character_parser:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character_parser:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ForbesLindesay:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ForbesLindesay:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/character-parser/package.json"}]},{"bom-ref":"pkg:npm/check-dependencies@1.1.1?package-id=0eb2e961c16ff8ae","type":"library","author":"Michał Gołębiowski-Owczarek ","name":"check-dependencies","version":"1.1.1","description":"Checks if currently installed npm/bower dependencies are installed in the exact same versions that are specified in package.json/bower.json","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:check-dependencies:check-dependencies:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/check-dependencies@1.1.1","externalReferences":[{"url":"https://github.com/mgol/check-dependencies.git","type":"distribution"},{"url":"https://github.com/mgol/check-dependencies","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-dependencies:check_dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_dependencies:check-dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_dependencies:check_dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check-dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check_dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mgol:check-dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mgol:check_dependencies:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-dependencies/package.json"}]},{"bom-ref":"pkg:npm/check-internet-connected@2.0.6?package-id=c843870ea5cc0a9b","type":"library","author":"Ankur Deep Jaiswal ","name":"check-internet-connected","version":"2.0.6","description":"Utility to check if internet is connected or not","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:check-internet-connected:check-internet-connected:2.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/check-internet-connected@2.0.6","externalReferences":[{"url":"https://github.com/aankur/check-internet-connected","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-internet-connected:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_internet_connected:check-internet-connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_internet_connected:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-internet:check-internet-connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-internet:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_internet:check-internet-connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_internet:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aankur:check-internet-connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aankur:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check-internet-connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check_internet_connected:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-internet-connected/package.json"}]},{"bom-ref":"pkg:npm/check-types@6.0.0?package-id=85b9eff83ffcd831","type":"library","author":"Phil Booth (https://github.com/philbooth)","name":"check-types","version":"6.0.0","description":"A little library for asserting types and values.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/check-types@6.0.0","externalReferences":[{"url":"https://github.com/philbooth/check-types.js.git","type":"distribution"},{"url":"https://github.com/philbooth/check-types.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:philbooth:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:philbooth:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-types/package.json"}]},{"bom-ref":"pkg:npm/chokidar@3.5.1?package-id=4d185a05cefa7d0a","type":"library","author":"Paul Miller (https://paulmillr.com), Paul Miller (https://paulmillr.com), Elan Shanker","name":"chokidar","version":"3.5.1","description":"Minimal and efficient cross-platform file watching library","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:paulmillr:chokidar:3.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/chokidar@3.5.1","externalReferences":[{"url":"git+https://github.com/paulmillr/chokidar.git","type":"distribution"},{"url":"https://github.com/paulmillr/chokidar","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:chokidar:chokidar:3.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/package.json"}]},{"bom-ref":"pkg:npm/chownr@1.1.4?package-id=7ebcfb2902378122","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"chownr","version":"1.1.4","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@1.1.4","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@1.1.4?package-id=671f64716b19d5fb","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"chownr","version":"1.1.4","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@1.1.4","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@2.0.0?package-id=3189617deb2bc884","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"chownr","version":"2.0.0","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@2.0.0","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@3.0.0?package-id=fffff6468e7930c0","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"chownr","version":"3.0.0","description":"like `chown -R`","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@3.0.0","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/clarinet@0.12.6?package-id=6cef1d3c36e6024e","type":"library","author":"Nuno Job (http://nunojob.com/), Jann Horn (https://github.com/thejh), Justin Makeig (http://www.audiblepop.com), Roly Fentanes (http://about.me/roly), John Lancaster (http://jlank.com)","name":"clarinet","version":"0.12.6","description":"SAX based evented streaming JSON parser in JavaScript (browser and node)","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:clarinet:clarinet:0.12.6:*:*:*:*:*:*:*","purl":"pkg:npm/clarinet@0.12.6","externalReferences":[{"url":"http://github.com/dscape/clarinet.git","type":"distribution"},{"url":"https://github.com/dscape/clarinet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dscape:clarinet:0.12.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clarinet/package.json"}]},{"bom-ref":"pkg:npm/class-utils@0.3.6?package-id=a7e36e39ff61aea5","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"class-utils","version":"0.3.6","description":"Utils for working with JavaScript classes and prototype methods.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:class-utils:0.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/class-utils@0.3.6","externalReferences":[{"url":"https://github.com/jonschlinkert/class-utils","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:class_utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class-utils:class-utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class-utils:class_utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class_utils:class-utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class_utils:class_utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class:class-utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:class:class_utils:0.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/class-utils/package.json"}]},{"bom-ref":"pkg:npm/clean-stack@2.2.0?package-id=08eaf1d1a1378cc5","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"clean-stack","version":"2.2.0","description":"Clean up error stack traces","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/clean-stack@2.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clean-stack/package.json"}]},{"bom-ref":"pkg:npm/cliui@6.0.0?package-id=6fb115e3b5d5d3f2","type":"library","author":"Ben Coe ","name":"cliui","version":"6.0.0","description":"easily create complex multi-column command-line-interfaces","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/cliui@6.0.0","externalReferences":[{"url":"http://github.com/yargs/cliui.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:cliui:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/cliui/package.json"}]},{"bom-ref":"pkg:npm/clone@2.1.2?package-id=080e255664d33bc7","type":"library","author":"Paul Vorbach (http://paul.vorba.ch/), Blake Miner (http://www.blakeminer.com/), Tian You (http://blog.axqd.net/), George Stagas (http://stagas.com/), Tobiasz Cudnik (https://github.com/TobiaszCudnik), Pavel Lang (https://github.com/langpavel), Dan MacTough (http://yabfog.com/), w1nk (https://github.com/w1nk), Hugh Kennedy (http://twitter.com/hughskennedy), Dustin Diaz (http://dustindiaz.com), Ilya Shaisultanov (https://github.com/diversario), Nathan MacInnes (http://macinn.es/), Benjamin E. Coe (https://twitter.com/benjamincoe), Nathan Zadoks (https://github.com/nathan7), Róbert Oroszi (https://github.com/oroce), Aurélio A. Heckert (http://softwarelivre.org/aurium), Guy Ellis (http://www.guyellisrocks.com/), fscherwi (https://fscherwi.github.io), rictic (https://github.com/rictic), Martin Jurča (https://github.com/jurca), Misery Lee (https://github.com/miserylee), Clemens Wolff (https://github.com/c-w)","name":"clone","version":"2.1.2","description":"deep cloning of objects and arrays","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/clone@2.1.2","externalReferences":[{"url":"git://github.com/pvorb/node-clone.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pvorb:clone:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clone/package.json"}]},{"bom-ref":"pkg:npm/clone-response@1.0.2?package-id=1ca687973f79cd5a","type":"library","author":"Luke Childs (http://lukechilds.co.uk)","name":"clone-response","version":"1.0.2","description":"Clone a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/clone-response@1.0.2","externalReferences":[{"url":"git+https://github.com/lukechilds/clone-response.git","type":"distribution"},{"url":"https://github.com/lukechilds/clone-response","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone-response:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone_response:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone_response:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clone-response/package.json"}]},{"bom-ref":"pkg:npm/code-point-at@1.1.0?package-id=15db8f5283662b54","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"code-point-at","version":"1.1.0","description":"ES2015 `String#codePointAt()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/code-point-at@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/code-point-at/package.json"}]},{"bom-ref":"pkg:npm/collection-visit@1.0.0?package-id=d87950bd24d66a30","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"collection-visit","version":"1.0.0","description":"Visit a method over the items in an object, or map visit over the objects in an array.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:collection-visit:collection-visit:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/collection-visit@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/collection-visit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:collection-visit:collection_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:collection_visit:collection-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:collection_visit:collection_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:collection-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:collection_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:collection:collection-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:collection:collection_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/collection-visit/package.json"}]},{"bom-ref":"pkg:npm/color@3.2.1?package-id=2774fa6f21932145","type":"library","author":"Josh Junon , Heather Arthur , Maxime Thirouin","name":"color","version":"3.2.1","description":"Color conversion and manipulation with CSS string support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color:color:3.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/color@3.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color/package.json"}]},{"bom-ref":"pkg:npm/color-convert@1.9.3?package-id=832fbb197a382df6","type":"library","author":"Heather Arthur ","name":"color-convert","version":"1.9.3","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@1.9.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=ad73ceb607fdd321","type":"library","author":"Heather Arthur ","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=c216a258a2dd7fdf","type":"library","author":"Heather Arthur ","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=d7906a8074d4b4f9","type":"library","author":"Heather Arthur ","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.3?package-id=92662d8a3adbe0c9","type":"library","author":"DY ","name":"color-name","version":"1.1.3","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.3","externalReferences":[{"url":"https://github.com/dfcreative/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=a184510682ce4734","type":"library","author":"DY ","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=a80b99ad61e48555","type":"library","author":"DY ","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=01c750f52978cfc6","type":"library","author":"DY ","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-string@1.9.1?package-id=7e888fa51e3748f2","type":"library","author":"Heather Arthur , Maxime Thirouin, Dyma Ywanov , Josh Junon","name":"color-string","version":"1.9.1","description":"Parser and generator for CSS color strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-string_project:color-string:1.9.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/color-string@1.9.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-string/package.json"}]},{"bom-ref":"pkg:npm/color-support@1.1.3?package-id=a1e232528ce637f4","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"color-support","version":"1.1.3","description":"A module which will endeavor to guess your terminal's level of color support.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-support@1.1.3","externalReferences":[{"url":"git+https://github.com/isaacs/color-support.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-support/package.json"}]},{"bom-ref":"pkg:npm/colors@1.1.2?package-id=774e316934f12a96","type":"library","author":"Marak Squires","name":"colors","version":"1.1.2","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/colors@1.1.2","externalReferences":[{"url":"http://github.com/Marak/colors.js.git","type":"distribution"},{"url":"https://github.com/Marak/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Marak:colors:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json"}]},{"bom-ref":"pkg:npm/colors@1.4.0?package-id=ba9f99e8572f2682","type":"library","author":"Marak Squires, DABH (https://github.com/DABH)","name":"colors","version":"1.4.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:colors:colors:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/colors@1.4.0","externalReferences":[{"url":"http://github.com/Marak/colors.js.git","type":"distribution"},{"url":"https://github.com/Marak/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Marak:colors:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/colors/package.json"}]},{"bom-ref":"pkg:npm/colorspace@1.1.4?package-id=84bcfa432cfdd0d0","type":"library","author":"Arnout Kazemier","name":"colorspace","version":"1.1.4","description":"Generate HEX colors for a given namespace.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:colorspace:colorspace:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/colorspace@1.1.4","externalReferences":[{"url":"https://github.com/3rd-Eden/colorspace","type":"distribution"},{"url":"https://github.com/3rd-Eden/colorspace","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:colorspace:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/colorspace/package.json"}]},{"bom-ref":"pkg:npm/commander@2.20.3?package-id=23da7748c749bc68","type":"library","author":"TJ Holowaychuk ","name":"commander","version":"2.20.3","description":"the complete solution for node.js command-line programs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","purl":"pkg:npm/commander@2.20.3","externalReferences":[{"url":"https://github.com/tj/commander.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json"}]},{"bom-ref":"pkg:npm/commander@2.20.3?package-id=3facda85b5f59f2a","type":"library","author":"TJ Holowaychuk ","name":"commander","version":"2.20.3","description":"the complete solution for node.js command-line programs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","purl":"pkg:npm/commander@2.20.3","externalReferences":[{"url":"https://github.com/tj/commander.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json"}]},{"bom-ref":"pkg:npm/component-emitter@1.3.1?package-id=ebc8491ac18b63ae","type":"library","name":"component-emitter","version":"1.3.1","description":"Event emitter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:component-emitter:component-emitter:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/component-emitter@1.3.1","externalReferences":[{"url":"https://github.com/sindresorhus/component-emitter.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:component-emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_emitter:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sindresorhus:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sindresorhus:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/component-emitter/package.json"}]},{"bom-ref":"pkg:npm/component-type@1.2.1?package-id=e91a1227114ad372","type":"library","name":"component-type","version":"1.2.1","description":"Cross-browser type assertions (less broken typeof)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:component-type:component-type:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/component-type@1.2.1","externalReferences":[{"url":"https://github.com/component/type.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:component-type:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_type:component-type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_type:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component-type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/component-type/package.json"}]},{"bom-ref":"pkg:npm/compress-commons@1.2.2?package-id=798bc97add5e6f68","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"compress-commons","version":"1.2.2","description":"a library that defines a common interface for working with archive formats within node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/compress-commons@1.2.2","externalReferences":[{"url":"https://github.com/archiverjs/node-compress-commons.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-compress-commons","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compress-commons/package.json"}]},{"bom-ref":"pkg:npm/compressible@2.0.18?package-id=d33659b98b525c44","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), Jeremiah Senkpiel (https://searchbeam.jit.su)","name":"compressible","version":"2.0.18","description":"Compressible Content-Type / mime checking","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*","purl":"pkg:npm/compressible@2.0.18","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compressible/package.json"}]},{"bom-ref":"pkg:npm/compression@1.8.1?package-id=828f0284d303f177","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"compression","version":"1.8.1","description":"Node.js compression middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*","purl":"pkg:npm/compression@1.8.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compression/package.json"}]},{"bom-ref":"pkg:npm/concat-map@0.0.1?package-id=e899cd35e0ecfcf6","type":"library","author":"James Halliday (http://substack.net)","name":"concat-map","version":"0.0.1","description":"concatenative mapdashery","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/concat-map@0.0.1","externalReferences":[{"url":"git://github.com/substack/node-concat-map.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/concat-map/package.json"}]},{"bom-ref":"pkg:npm/concat-stream@1.6.2?package-id=3cf686e52af98b9c","type":"library","author":"Max Ogden ","name":"concat-stream","version":"1.6.2","description":"writable stream that concatenates strings or binary data and calls a callback with the result","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/concat-stream@1.6.2","externalReferences":[{"url":"http://github.com/maxogden/concat-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/concat-stream/package.json"}]},{"bom-ref":"pkg:npm/config@3.3.12?package-id=f5d30e88e089520d","type":"library","author":"Loren West ","name":"config","version":"3.3.12","description":"Configuration control for production node deployments","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-config:config:3.3.12:*:*:*:*:*:*:*","purl":"pkg:npm/config@3.3.12","externalReferences":[{"url":"http://github.com/node-config/node-config.git","type":"distribution"},{"url":"http://github.com/node-config/node-config.git","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:config:config:3.3.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/config/package.json"}]},{"bom-ref":"pkg:npm/console-control-strings@1.1.0?package-id=62af6322c8da5d46","type":"library","author":"Rebecca Turner (http://re-becca.org/)","name":"console-control-strings","version":"1.1.0","description":"A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/console-control-strings@1.1.0","externalReferences":[{"url":"https://github.com/iarna/console-control-strings","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/console-control-strings/package.json"}]},{"bom-ref":"pkg:npm/constantinople@4.0.1?package-id=64ecabe801d13657","type":"library","author":"ForbesLindesay","name":"constantinople","version":"4.0.1","description":"Determine whether a JavaScript expression evaluates to a constant","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ForbesLindesay:constantinople:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/constantinople@4.0.1","externalReferences":[{"url":"https://github.com/ForbesLindesay/constantinople.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:constantinople:constantinople:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/constantinople/package.json"}]},{"bom-ref":"pkg:npm/content-disposition@0.5.4?package-id=6d99ffbaf9a3dbf2","type":"library","author":"Douglas Christopher Wilson ","name":"content-disposition","version":"0.5.4","description":"Create and parse Content-Disposition header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*","purl":"pkg:npm/content-disposition@0.5.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/content-disposition/package.json"}]},{"bom-ref":"pkg:npm/content-type@1.0.5?package-id=1e680466175b93f0","type":"library","author":"Douglas Christopher Wilson ","name":"content-type","version":"1.0.5","description":"Create and parse HTTP Content-Type header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/content-type@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/content-type/package.json"}]},{"bom-ref":"pkg:npm/cookie@0.4.2?package-id=299182936c2fe78a","type":"library","author":"Roman Shtylman , Douglas Christopher Wilson ","name":"cookie","version":"0.4.2","description":"HTTP server cookie parsing and serialization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/cookie@0.4.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json"}]},{"bom-ref":"pkg:npm/cookie@0.7.1?package-id=5f1423a9340f2ecc","type":"library","author":"Roman Shtylman , Douglas Christopher Wilson ","name":"cookie","version":"0.7.1","description":"HTTP server cookie parsing and serialization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie:cookie:0.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/cookie@0.7.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express/node_modules/cookie/package.json"}]},{"bom-ref":"pkg:npm/cookie@0.7.2?package-id=f30613fbb68ad643","type":"library","author":"Roman Shtylman , Douglas Christopher Wilson ","name":"cookie","version":"0.7.2","description":"HTTP server cookie parsing and serialization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*","purl":"pkg:npm/cookie@0.7.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie/package.json"}]},{"bom-ref":"pkg:npm/cookie-parser@1.4.7?package-id=52b0adc8ff09f017","type":"library","author":"TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson ","name":"cookie-parser","version":"1.4.7","description":"Parse HTTP request cookies","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*","purl":"pkg:npm/cookie-parser@1.4.7","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie-parser/package.json"}]},{"bom-ref":"pkg:npm/cookie-signature@1.0.6?package-id=f7961879936cc1c0","type":"library","author":"TJ Holowaychuk ","name":"cookie-signature","version":"1.0.6","description":"Sign and unsign cookies","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/cookie-signature@1.0.6","externalReferences":[{"url":"https://github.com/visionmedia/node-cookie-signature.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie-signature/package.json"}]},{"bom-ref":"pkg:npm/copy-descriptor@0.1.1?package-id=84bc1ef1a454e04d","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"copy-descriptor","version":"0.1.1","description":"Copy a descriptor from object A to object B","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:copy-descriptor:copy-descriptor:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/copy-descriptor@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/copy-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:copy-descriptor:copy_descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:copy_descriptor:copy-descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:copy_descriptor:copy_descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:copy-descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:copy_descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:copy:copy-descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:copy:copy_descriptor:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/copy-descriptor/package.json"}]},{"bom-ref":"pkg:npm/core-util-is@1.0.2?package-id=36ced86f8d381680","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"core-util-is","version":"1.0.2","description":"The `util.is*` functions introduced in Node v0.12.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/core-util-is@1.0.2","externalReferences":[{"url":"git://github.com/isaacs/core-util-is","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/core-util-is/package.json"}]},{"bom-ref":"pkg:npm/cors@2.8.5?package-id=9f4d3a70130c3163","type":"library","author":"Troy Goode (https://github.com/troygoode/)","name":"cors","version":"2.8.5","description":"Node.js CORS middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cors:cors:2.8.5:*:*:*:*:*:*:*","purl":"pkg:npm/cors@2.8.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cors/package.json"}]},{"bom-ref":"pkg:npm/crc@3.8.0?package-id=5e060917a7b152aa","type":"library","author":"Alex Gorbatchev (https://github.com/alexgorbatchev)","name":"crc","version":"3.8.0","description":"Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:alexgorbatchev:crc:3.8.0:*:*:*:*:*:*:*","purl":"pkg:npm/crc@3.8.0","externalReferences":[{"url":"git://github.com/alexgorbatchev/node-crc.git","type":"distribution"},{"url":"https://github.com/alexgorbatchev/node-crc","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crc/package.json"}]},{"bom-ref":"pkg:npm/crc-32@1.2.2?package-id=65ce75ba55690187","type":"library","author":"sheetjs","name":"crc-32","version":"1.2.2","description":"Pure-JS CRC-32","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:SheetJS:crc-32:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/crc-32@1.2.2","externalReferences":[{"url":"git://github.com/SheetJS/js-crc32.git","type":"distribution"},{"url":"https://sheetjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:SheetJS:crc_32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc-32:crc-32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc-32:crc_32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc_32:crc-32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc_32:crc_32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc:crc-32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc:crc_32:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crc-32/package.json"}]},{"bom-ref":"pkg:npm/crc32-stream@2.0.0?package-id=828196a2c6a9e027","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"crc32-stream","version":"2.0.0","description":"a streaming CRC32 checksumer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/crc32-stream@2.0.0","externalReferences":[{"url":"https://github.com/archiverjs/node-crc32-stream.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-crc32-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crc32-stream/package.json"}]},{"bom-ref":"pkg:npm/create-require@1.1.1?package-id=fbc0fafe2877b078","type":"library","author":"Maël Nison , Paul Soporan , Pooya Parsa ","name":"create-require","version":"1.1.1","description":"Polyfill for Node.js module.createRequire (<= v12.2.0)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:create-require:create-require:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/create-require@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:create-require:create_require:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:create_require:create-require:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:create_require:create_require:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:create:create-require:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:create:create_require:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/create-require/package.json"}]},{"bom-ref":"pkg:npm/cross-fetch@4.1.0?package-id=28238b546a501760","type":"library","author":"Leonardo Quixada ","name":"cross-fetch","version":"4.1.0","description":"Universal WHATWG Fetch API for Node, Browsers and React Native","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cross-fetch_project:cross-fetch:4.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/cross-fetch@4.1.0","externalReferences":[{"url":"https://github.com/lquixada/cross-fetch.git","type":"distribution"},{"url":"https://github.com/lquixada/cross-fetch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cross-fetch/package.json"}]},{"bom-ref":"pkg:npm/cross-fetch-polyfill@0.0.0?package-id=50b42809242de976","type":"library","name":"cross-fetch-polyfill","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cross-fetch-polyfill:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/cross-fetch-polyfill@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross-fetch-polyfill:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_fetch_polyfill:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_fetch_polyfill:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross-fetch:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross-fetch:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_fetch:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_fetch:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cross-fetch/polyfill/package.json"}]},{"bom-ref":"pkg:npm/cross-spawn@7.0.6?package-id=1b99c2dc3022043f","type":"library","author":"André Cruz ","name":"cross-spawn","version":"7.0.6","description":"Cross platform child_process#spawn and child_process#spawnSync","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/cross-spawn@7.0.6","externalReferences":[{"url":"https://github.com/moxystudio/node-cross-spawn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cross-spawn/package.json"}]},{"bom-ref":"pkg:npm/crypto-js@3.3.0?package-id=c00a8b8b043aae72","type":"library","author":"Evan Vosberg (http://github.com/evanvosberg)","name":"crypto-js","version":"3.3.0","description":"JavaScript library of crypto standards.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:crypto-js:crypto-js:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/crypto-js@3.3.0","externalReferences":[{"url":"http://github.com/brix/crypto-js.git","type":"distribution"},{"url":"http://github.com/brix/crypto-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto-js:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto_js:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto_js:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brix:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brix:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crypto-js/package.json"}]},{"bom-ref":"pkg:npm/dateformat@4.6.3?package-id=a64626d34d414995","type":"library","author":"Steven Levithan, Steven Levithan, Felix Geisendörfer , Christoph Tavan , Jon Schlinkert (https://github.com/jonschlinkert), Felix Geisendörfer ","name":"dateformat","version":"4.6.3","description":"A node.js package for Steven Levithan's excellent dateFormat() function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dateformat:dateformat:4.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/dateformat@4.6.3","externalReferences":[{"url":"https://github.com/felixge/node-dateformat.git","type":"distribution"},{"url":"https://github.com/felixge/node-dateformat","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:dateformat:4.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dateformat/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=13ce5d31ef865754","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=07994462f17337cd","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compression/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=18b6649e0a78c9a1","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=36ba4b44e6e4cfc1","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=7ef811ee564508d1","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=1eaad6013e183bbc","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=5cd11cba890ff1a4","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=f11df905caf46abe","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=9bcaeee9e2f6d815","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@3.2.7?package-id=264ab504b40249b9","type":"library","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"3.2.7","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:3.2.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@3.2.7","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/needle/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.3.7?package-id=7a71fe082d21843f","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","name":"debug","version":"4.3.7","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.3.7","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/decamelize@1.2.0?package-id=0373f8c69a364fc0","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"decamelize","version":"1.2.0","description":"Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/decamelize@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decamelize/package.json"}]},{"bom-ref":"pkg:npm/decode-uri-component@0.2.2?package-id=74df95998cf0457f","type":"library","author":"Sam Verschueren (github.com/SamVerschueren)","name":"decode-uri-component","version":"0.2.2","description":"A better decodeURIComponent","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decode-uri-component_project:decode-uri-component:0.2.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/decode-uri-component@0.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decode-uri-component/package.json"}]},{"bom-ref":"pkg:npm/decompress@4.2.1?package-id=6b277cfffb36ff6b","type":"library","author":"Kevin Mårtensson (github.com/kevva)","name":"decompress","version":"4.2.1","description":"Extracting archives made easy","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress_project:decompress:4.2.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/decompress@4.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@3.3.0?package-id=677d9609cb5a01bc","type":"library","author":"Sindre Sorhus (sindresorhus.com), Vsevolod Strukchinsky (github.com/floatdrop)","name":"decompress-response","version":"3.3.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@3.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@4.2.1?package-id=a1d858a92cd4e324","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"decompress-response","version":"4.2.1","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:4.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@4.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@6.0.0?package-id=4181e152e271bc83","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"decompress-response","version":"6.0.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@6.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@6.0.0?package-id=ab3ad7acc2109685","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"decompress-response","version":"6.0.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@6.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-tar@4.1.1?package-id=1935244d7cb90f17","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"decompress-tar","version":"4.1.1","description":"decompress tar plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-tar@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tar:decompress-tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tar/package.json"}]},{"bom-ref":"pkg:npm/decompress-tarbz2@4.1.1?package-id=ebabda097779037b","type":"library","author":"Kevin Mårtensson (github.com/kevva)","name":"decompress-tarbz2","version":"4.1.1","description":"decompress tar.bz2 plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-tarbz2@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tarbz2/package.json"}]},{"bom-ref":"pkg:npm/decompress-targz@4.1.1?package-id=9dc81698c9e5e345","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"decompress-targz","version":"4.1.1","description":"decompress tar.gz plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-targz@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_targz:decompress-targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-targz/package.json"}]},{"bom-ref":"pkg:npm/decompress-unzip@4.0.1?package-id=8979cd9c25111673","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"decompress-unzip","version":"4.0.1","description":"decompress zip plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-unzip@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/package.json"}]},{"bom-ref":"pkg:npm/deep-equal@2.2.3?package-id=ddff5e641b501fb1","type":"library","author":"James Halliday (http://substack.net), James Halliday (https://substack.net), Jordan Harband ","name":"deep-equal","version":"2.2.3","description":"node's assert.deepEqual algorithm","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:deep-equal:deep-equal:2.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/deep-equal@2.2.3","externalReferences":[{"url":"http://github.com/inspect-js/node-deep-equal.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep-equal:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep_equal:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep_equal:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/deep-equal/package.json"}]},{"bom-ref":"pkg:npm/deep-extend@0.6.0?package-id=8b13bde9c77e7706","type":"library","author":"Viacheslav Lotsmanov , Romain Prieto (https://github.com/rprieto), Max Maximov (https://github.com/maxmaximov), Marshall Bowers (https://github.com/maxdeviant), Misha Wakerman (https://github.com/mwakerman)","name":"deep-extend","version":"0.6.0","description":"Recursive object extending","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/deep-extend@0.6.0","externalReferences":[{"url":"git://github.com/unclechu/node-deep-extend.git","type":"distribution"},{"url":"https://github.com/unclechu/node-deep-extend","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/deep-extend/package.json"}]},{"bom-ref":"pkg:npm/define-data-property@1.1.4?package-id=1cebccf42426559d","type":"library","author":"Jordan Harband ","name":"define-data-property","version":"1.1.4","description":"Define a data property on an object. Will fall back to assignment in an engine without descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-data-property:define-data-property:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/define-data-property@1.1.4","externalReferences":[{"url":"git+https://github.com/ljharb/define-data-property.git","type":"distribution"},{"url":"https://github.com/ljharb/define-data-property#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data-property:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data_property:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data_property:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/define-data-property/package.json"}]},{"bom-ref":"pkg:npm/define-properties@1.2.1?package-id=c3e457ef9955cb09","type":"library","author":"Jordan Harband ","name":"define-properties","version":"1.2.1","description":"Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-properties:define-properties:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/define-properties@1.2.1","externalReferences":[{"url":"git://github.com/ljharb/define-properties.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-properties:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_properties:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_properties:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/define-properties/package.json"}]},{"bom-ref":"pkg:npm/define-property@0.2.5?package-id=3a79a5d0272bea87","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"0.2.5","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:0.2.5:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@0.2.5","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/class-utils/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@0.2.5?package-id=9f64bed1a766b435","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"0.2.5","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:0.2.5:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@0.2.5","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@0.2.5?package-id=0f4cca99d6b629d4","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"0.2.5","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:0.2.5:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@0.2.5","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-copy/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@0.2.5?package-id=96692873fd0a7a53","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"0.2.5","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:0.2.5:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@0.2.5","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@0.2.5?package-id=55cba39ef2a44cfd","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"0.2.5","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:0.2.5:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@0.2.5","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/static-extend/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@1.0.0?package-id=89fcb3115ce3f9a5","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"1.0.0","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@1.0.0?package-id=3fd36781609a076e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"1.0.0","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extglob/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@1.0.0?package-id=04046e4e9ef398c3","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"define-property","version":"1.0.0","description":"Define a non-enumerable property on an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon-node/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/define-property@2.0.2?package-id=081fa4cf2d20ec5e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"define-property","version":"2.0.2","description":"Define a non-enumerable property on an object. Uses Reflect.defineProperty when available, otherwise Object.defineProperty.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-property:define-property:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/define-property@2.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/define-property","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-property:define_property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define-property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_property:define_property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define-property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:define_property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_property:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/define-property/package.json"}]},{"bom-ref":"pkg:npm/delegates@1.0.0?package-id=36ba8b211a3558dd","type":"library","name":"delegates","version":"1.0.0","description":"delegate methods and accessors to another property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/delegates@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/delegates/package.json"}]},{"bom-ref":"pkg:npm/depd@1.1.2?package-id=d03c5ad5ccf7e9e9","type":"library","author":"Douglas Christopher Wilson ","name":"depd","version":"1.1.2","description":"Deprecate all the things","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/depd@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/depd/package.json"}]},{"bom-ref":"pkg:npm/depd@2.0.0?package-id=bdc1789d5398f38c","type":"library","author":"Douglas Christopher Wilson ","name":"depd","version":"2.0.0","description":"Deprecate all the things","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/depd@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/depd/package.json"}]},{"bom-ref":"pkg:npm/destroy@1.2.0?package-id=a84307f7c46d36c4","type":"library","author":"Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson ","name":"destroy","version":"1.2.0","description":"destroy a stream if possible","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/destroy@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/destroy/package.json"}]},{"bom-ref":"pkg:npm/detect-file@1.0.0?package-id=7900e478eb751255","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"detect-file","version":"1.0.0","description":"Detects if a file exists and returns the resolved filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:detect-file:detect-file:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/detect-file@1.0.0","externalReferences":[{"url":"https://github.com/doowb/detect-file","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-file:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_file:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_file:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/detect-file/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@1.0.3?package-id=f7f8634dce77a9d4","type":"library","author":"Lovell Fuller , Niklas Salmoukas ","name":"detect-libc","version":"1.0.3","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@1.0.3","externalReferences":[{"url":"git://github.com/lovell/detect-libc","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@2.0.4?package-id=5cc1c675372358ec","type":"library","author":"Lovell Fuller , Niklas Salmoukas , Vinícius Lourenço ","name":"detect-libc","version":"2.0.4","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@2.0.4","externalReferences":[{"url":"git://github.com/lovell/detect-libc","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@2.0.4?package-id=be20ab4625b6f7cf","type":"library","author":"Lovell Fuller , Niklas Salmoukas , Vinícius Lourenço ","name":"detect-libc","version":"2.0.4","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@2.0.4","externalReferences":[{"url":"git://github.com/lovell/detect-libc","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/dfa@1.2.0?package-id=bf5c1ed7af4e574c","type":"library","author":"Devon Govett ","name":"dfa","version":"1.2.0","description":"A state machine compiler","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:dfa:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/dfa@1.2.0","externalReferences":[{"url":"git+ssh://git@github.com/devongovett/dfa.git","type":"distribution"},{"url":"https://github.com/devongovett/dfa#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dfa/package.json"}]},{"bom-ref":"pkg:npm/diff@4.0.2?package-id=a4cf03c6615f9d2d","type":"library","author":"Kevin Decker (http://incaseofstairs.com)","name":"diff","version":"4.0.2","description":"A javascript text diff implementation.","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:kpdecker:jsdiff:4.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/diff@4.0.2","externalReferences":[{"url":"git://github.com/kpdecker/jsdiff.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/diff/package.json"}]},{"bom-ref":"pkg:npm/doctypes@1.1.0?package-id=3f4ef5f1be454910","type":"library","author":"ForbesLindesay","name":"doctypes","version":"1.1.0","description":"Shorthands for commonly used doctypes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:doctypes:doctypes:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/doctypes@1.1.0","externalReferences":[{"url":"https://github.com/pugjs/doctypes.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:doctypes:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/doctypes/package.json"}]},{"bom-ref":"pkg:npm/domelementtype@1.3.1?package-id=0d6ad87159c99050","type":"library","author":"Felix Boehm ","name":"domelementtype","version":"1.3.1","description":"all the types of nodes in htmlparser2's dom","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/domelementtype@1.3.1","externalReferences":[{"url":"git://github.com/fb55/domelementtype.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:domelementtype:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json"}]},{"bom-ref":"pkg:npm/domhandler@2.1.0?package-id=a2a50cc71f9f1510","type":"library","author":"Felix Boehm ","name":"domhandler","version":"2.1.0","description":"handler for htmlparser2 that turns pages into a dom","licenses":[{"license":{"name":"sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"}}],"cpe":"cpe:2.3:a:domhandler:domhandler:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/domhandler@2.1.0","externalReferences":[{"url":"git://github.com/fb55/domhandler.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:domhandler:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json"}]},{"bom-ref":"pkg:npm/domutils@1.1.6?package-id=66e2979442791477","type":"library","author":"Felix Boehm ","name":"domutils","version":"1.1.6","description":"utilities for working with htmlparser2's dom","licenses":[{"license":{"name":"sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"}}],"cpe":"cpe:2.3:a:domutils:domutils:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/domutils@1.1.6","externalReferences":[{"url":"git://github.com/FB55/domutils.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:FB55:domutils:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json"}]},{"bom-ref":"pkg:npm/dottie@2.0.6?package-id=2a9aa5060d0355d3","type":"library","author":"Mick Hansen ","name":"dottie","version":"2.0.6","description":"Fast and safe nested object access and manipulation in JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dottie_project:dottie:2.0.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/dottie@2.0.6","externalReferences":[{"url":"git://github.com/mickhansen/dottie.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dottie/package.json"}]},{"bom-ref":"pkg:npm/double-ended-queue@0.9.7?package-id=5725c7f9e5544384","type":"library","author":"Petka Antonov (http://github.com/petkaantonov/)","name":"double-ended-queue","version":"0.9.7","description":"Extremely fast double-ended queue implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:double-ended-queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*","purl":"pkg:npm/double-ended-queue@0.9.7","externalReferences":[{"url":"git://github.com/petkaantonov/deque.git","type":"distribution"},{"url":"https://github.com/petkaantonov/deque","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended-queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended_queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended_queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:petkaantonov:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:petkaantonov:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/double-ended-queue/package.json"}]},{"bom-ref":"pkg:npm/download@8.0.0?package-id=303671788db63ed8","type":"library","author":"Kevin Mårtensson (github.com/kevva)","name":"download","version":"8.0.0","description":"Download and extract files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:download:download:8.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/download@8.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/download/package.json"}]},{"bom-ref":"pkg:npm/dunder-proto@1.0.1?package-id=c93aa5bde2f41455","type":"library","author":"Jordan Harband ","name":"dunder-proto","version":"1.0.1","description":"If available, the `Object.prototype.__proto__` accessor and mutator, call-bound","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/dunder-proto@1.0.1","externalReferences":[{"url":"git+https://github.com/es-shims/dunder-proto.git","type":"distribution"},{"url":"https://github.com/es-shims/dunder-proto#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dunder-proto/package.json"}]},{"bom-ref":"pkg:npm/duplexer2@0.1.4?package-id=937130df2f15286c","type":"library","author":"Conrad Pankoff (http://www.fknsrs.biz/)","name":"duplexer2","version":"0.1.4","description":"Like duplexer but using streams3","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/duplexer2@0.1.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/duplexer2/package.json"}]},{"bom-ref":"pkg:npm/duplexer3@0.1.5?package-id=48435aec46970511","type":"library","name":"duplexer3","version":"0.1.5","description":"Like duplexer but using streams3","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/duplexer3@0.1.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/duplexer3/package.json"}]},{"bom-ref":"pkg:npm/dynamic-dedupe@0.3.0?package-id=6cff1eb378f9137c","type":"library","author":"Thorsten Lorenz (http://thlorenz.com)","name":"dynamic-dedupe","version":"0.3.0","description":"Dedupes node modules as they are being required which works even when dependencies are linked via ln -s or npm link.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dynamic-dedupe:dynamic-dedupe:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/dynamic-dedupe@0.3.0","externalReferences":[{"url":"git://github.com/thlorenz/dynamic-dedupe.git","type":"distribution"},{"url":"https://github.com/thlorenz/dynamic-dedupe","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dynamic-dedupe:dynamic_dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dynamic_dedupe:dynamic-dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dynamic_dedupe:dynamic_dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thlorenz:dynamic-dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thlorenz:dynamic_dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dynamic:dynamic-dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dynamic:dynamic_dedupe:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dynamic-dedupe/package.json"}]},{"bom-ref":"pkg:npm/eastasianwidth@0.2.0?package-id=ea06a962daee959b","type":"library","author":"Masaki Komagata","name":"eastasianwidth","version":"0.2.0","description":"Get East Asian Width from a character.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/eastasianwidth@0.2.0","externalReferences":[{"url":"git://github.com/komagata/eastasianwidth.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eastasianwidth/package.json"}]},{"bom-ref":"pkg:npm/ee-first@1.1.1?package-id=5a203220d6135893","type":"library","author":"Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson ","name":"ee-first","version":"1.1.1","description":"return the first event in a set of ee/event pairs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/ee-first@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ee-first/package.json"}]},{"bom-ref":"pkg:npm/eivindfjeldstad-dot@0.0.1?package-id=11589b7a5b7cc74d","type":"library","name":"eivindfjeldstad-dot","version":"0.0.1","description":"Get and set object properties with dot notation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/eivindfjeldstad-dot@0.0.1","externalReferences":[{"url":"https://github.com/eivindfjeldstad/dot.git","type":"distribution"},{"url":"https://github.com/eivindfjeldstad/dot","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eivindfjeldstad-dot/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@8.0.0?package-id=1acb6377c4d1be44","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"8.0.0","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@8.0.0","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@9.2.2?package-id=01b12619eb310009","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"9.2.2","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@9.2.2","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@9.2.2?package-id=28604ba4f35e223d","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"9.2.2","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@9.2.2","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/enabled@2.0.0?package-id=4d6bcacb368fa08d","type":"library","author":"Arnout Kazemier","name":"enabled","version":"2.0.0","description":"Check if a certain debug flag is enabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:enabled:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/enabled@2.0.0","externalReferences":[{"url":"git://github.com/3rd-Eden/enabled.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:enabled:enabled:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/enabled/package.json"}]},{"bom-ref":"pkg:npm/encodeurl@1.0.2?package-id=cfcb4f73b7e7e78c","type":"library","author":"Douglas Christopher Wilson ","name":"encodeurl","version":"1.0.2","description":"Encode a URL to a percent-encoded form, excluding already-encoded sequences","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/encodeurl@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/node_modules/encodeurl/package.json"}]},{"bom-ref":"pkg:npm/encodeurl@2.0.0?package-id=b55917a42e374d3b","type":"library","author":"Douglas Christopher Wilson ","name":"encodeurl","version":"2.0.0","description":"Encode a URL to a percent-encoded form, excluding already-encoded sequences","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/encodeurl@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encodeurl/package.json"}]},{"bom-ref":"pkg:npm/encoding@0.1.13?package-id=6edb52dab3ea3e2a","type":"library","author":"Andris Reinman","name":"encoding","version":"0.1.13","description":"Convert encodings, uses iconv-lite","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*","purl":"pkg:npm/encoding@0.1.13","externalReferences":[{"url":"https://github.com/andris9/encoding.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encoding/package.json"}]},{"bom-ref":"pkg:npm/end-of-stream@1.4.5?package-id=b935e39bff7e678c","type":"library","author":"Mathias Buus ","name":"end-of-stream","version":"1.4.5","description":"Call a callback when a readable/writable/duplex stream has completed or failed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*","purl":"pkg:npm/end-of-stream@1.4.5","externalReferences":[{"url":"git://github.com/mafintosh/end-of-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/end-of-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/end-of-stream/package.json"}]},{"bom-ref":"pkg:npm/engine.io@4.1.2?package-id=8c4af4f22e5de7e4","type":"library","author":"Guillermo Rauch , Eugen Dueck, Afshin Mehrabani, Christoph Dorn, Mark Mokryn ","name":"engine.io","version":"4.1.2","description":"The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:engine.io:4.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/engine.io@4.1.2","externalReferences":[{"url":"https://github.com/socketio/engine.io","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/package.json"}]},{"bom-ref":"pkg:npm/engine.io-parser@4.0.3?package-id=1c0c027153be229a","type":"library","name":"engine.io-parser","version":"4.0.3","description":"Parser for the client for the realtime Engine","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:engine.io-parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/engine.io-parser@4.0.3","externalReferences":[{"url":"https://github.com/socketio/engine.io-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io-parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io_parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io_parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io-parser/package.json"}]},{"bom-ref":"pkg:npm/env-paths@2.2.1?package-id=8a04a7a9aa4f21f3","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"env-paths","version":"2.2.1","description":"Get paths for storing things like data, config, cache, etc","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/env-paths@2.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/env-paths/package.json"}]},{"bom-ref":"pkg:npm/err-code@1.1.2?package-id=7254c58c1b07f3fa","type":"library","author":"IndigoUnited (http://indigounited.com)","name":"err-code","version":"1.1.2","description":"Create an error with a code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:IndigoUnited:err-code:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/err-code@1.1.2","externalReferences":[{"url":"git://github.com/IndigoUnited/js-err-code.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:err_code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err-code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err_code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err-code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err_code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err-code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err_code:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proper-lockfile/node_modules/err-code/package.json"}]},{"bom-ref":"pkg:npm/err-code@2.0.3?package-id=eb67f19cafbd6c3f","type":"library","author":"IndigoUnited (http://indigounited.com)","name":"err-code","version":"2.0.3","description":"Create an error with a code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/err-code@2.0.3","externalReferences":[{"url":"git://github.com/IndigoUnited/js-err-code.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/err-code/package.json"}]},{"bom-ref":"pkg:npm/errorhandler@1.5.1?package-id=da646f395608d818","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"errorhandler","version":"1.5.1","description":"Development-only error handler middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:errorhandler:errorhandler:1.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/errorhandler@1.5.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/errorhandler/package.json"}]},{"bom-ref":"pkg:npm/es-define-property@1.0.1?package-id=cbcde0a9a6111387","type":"library","author":"Jordan Harband ","name":"es-define-property","version":"1.0.1","description":"`Object.defineProperty`, but not IE 8's broken one.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/es-define-property@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/es-define-property.git","type":"distribution"},{"url":"https://github.com/ljharb/es-define-property#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-define-property/package.json"}]},{"bom-ref":"pkg:npm/es-errors@1.3.0?package-id=b80402f3b1ddfc9d","type":"library","author":"Jordan Harband ","name":"es-errors","version":"1.3.0","description":"A simple cache for a few of the JS Error constructors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/es-errors@1.3.0","externalReferences":[{"url":"git+https://github.com/ljharb/es-errors.git","type":"distribution"},{"url":"https://github.com/ljharb/es-errors#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-errors/package.json"}]},{"bom-ref":"pkg:npm/es-get-iterator@1.1.3?package-id=916d823925222e15","type":"library","author":"Jordan Harband ","name":"es-get-iterator","version":"1.1.3","description":"Get an iterator for any JS language value. Works robustly across all environments, all versions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-get-iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/es-get-iterator@1.1.3","externalReferences":[{"url":"git+https://github.com/ljharb/es-get-iterator.git","type":"distribution"},{"url":"https://github.com/ljharb/es-get-iterator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get-iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get_iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get_iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-get-iterator/package.json"}]},{"bom-ref":"pkg:npm/es-object-atoms@1.1.1?package-id=2d8cc620cca5c55e","type":"library","author":"Jordan Harband ","name":"es-object-atoms","version":"1.1.1","description":"ES Object-related atoms: Object, ToObject, RequireObjectCoercible","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/es-object-atoms@1.1.1","externalReferences":[{"url":"git+https://github.com/ljharb/es-object-atoms.git","type":"distribution"},{"url":"https://github.com/ljharb/es-object-atoms#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-object-atoms/package.json"}]},{"bom-ref":"pkg:npm/escape-html@1.0.3?package-id=9f83c2eadc36cf52","type":"library","name":"escape-html","version":"1.0.3","description":"Escape string for use in HTML","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/escape-html@1.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/escape-html/package.json"}]},{"bom-ref":"pkg:npm/escape-string-regexp@1.0.5?package-id=6ec01e61f077601f","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl)","name":"escape-string-regexp","version":"1.0.5","description":"Escape RegExp special characters","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/escape-string-regexp@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/escape-string-regexp/package.json"}]},{"bom-ref":"pkg:npm/escodegen@2.1.0?package-id=e3085b59b5e52c5c","type":"library","author":"Yusuke Suzuki ","name":"escodegen","version":"2.1.0","description":"ECMAScript code generator","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:escodegen:escodegen:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/escodegen@2.1.0","externalReferences":[{"url":"http://github.com/estools/escodegen.git","type":"distribution"},{"url":"http://github.com/estools/escodegen","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:estools:escodegen:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/escodegen/package.json"}]},{"bom-ref":"pkg:npm/esprima@1.0.4?package-id=6ca86a7d5c3b7019","type":"library","author":"Ariya Hidayat ","name":"esprima","version":"1.0.4","description":"ECMAScript parsing infrastructure for multipurpose analysis","licenses":[{"license":{"name":"BSD"}}],"cpe":"cpe:2.3:a:esprima:esprima:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/esprima@1.0.4","externalReferences":[{"url":"http://github.com/ariya/esprima.git","type":"distribution"},{"url":"http://esprima.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ariya:esprima:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/notevil/node_modules/esprima/package.json"}]},{"bom-ref":"pkg:npm/esprima@4.0.1?package-id=d77e18bbba704dde","type":"library","author":"Ariya Hidayat , Ariya Hidayat ","name":"esprima","version":"4.0.1","description":"ECMAScript parsing infrastructure for multipurpose analysis","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/esprima@4.0.1","externalReferences":[{"url":"https://github.com/jquery/esprima.git","type":"distribution"},{"url":"http://esprima.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jquery:esprima:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/esprima/package.json"}]},{"bom-ref":"pkg:npm/estraverse@5.3.0?package-id=faff644b5f623635","type":"library","author":"Yusuke Suzuki ","name":"estraverse","version":"5.3.0","description":"ECMAScript JS AST traversal functions","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:estraverse:estraverse:5.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/estraverse@5.3.0","externalReferences":[{"url":"http://github.com/estools/estraverse.git","type":"distribution"},{"url":"https://github.com/estools/estraverse","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:estools:estraverse:5.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/estraverse/package.json"}]},{"bom-ref":"pkg:npm/esutils@2.0.3?package-id=901d2fac8bf8cc48","type":"library","author":"Yusuke Suzuki ","name":"esutils","version":"2.0.3","description":"utility box for ECMAScript language tools","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:estools:esutils:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/esutils@2.0.3","externalReferences":[{"url":"http://github.com/estools/esutils.git","type":"distribution"},{"url":"https://github.com/estools/esutils","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:esutils:esutils:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/esutils/package.json"}]},{"bom-ref":"pkg:npm/etag@1.8.1?package-id=5bf7a215d5351e40","type":"library","author":"Douglas Christopher Wilson , David Björklund ","name":"etag","version":"1.8.1","description":"Create simple HTTP ETags","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*","purl":"pkg:npm/etag@1.8.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/etag/package.json"}]},{"bom-ref":"pkg:npm/ethereum-cryptography@2.2.1?package-id=af0d5950cecf76a6","type":"library","author":"Patricio Palladino , Paul Miller (https://paulmillr.com)","name":"ethereum-cryptography","version":"2.2.1","description":"All the cryptographic primitives used in Ethereum","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ethereum-cryptography:ethereum-cryptography:2.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ethereum-cryptography@2.2.1","externalReferences":[{"url":"https://github.com/ethereum/js-ethereum-cryptography","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum-cryptography:ethereum_cryptography:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum_cryptography:ethereum-cryptography:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum_cryptography:ethereum_cryptography:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:ethereum-cryptography:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:ethereum_cryptography:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethereum-cryptography/package.json"}]},{"bom-ref":"pkg:npm/ethers@6.15.0?package-id=243ac5642c50a9b3","type":"library","author":"Richard Moore ","name":"ethers","version":"6.15.0","description":"A complete and compact Ethereum library, for dapps, wallets and any other tools.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ethers-io:ethers:6.15.0:*:*:*:*:*:*:*","purl":"pkg:npm/ethers@6.15.0","externalReferences":[{"url":"git://github.com/ethers-io/ethers.js.git","type":"distribution"},{"url":"https://ethers.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethers:ethers:6.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/package.json"}]},{"bom-ref":"pkg:npm/event-target-shim@5.0.1?package-id=38d2981e57e00f35","type":"library","author":"Toru Nagashima","name":"event-target-shim","version":"5.0.1","description":"An implementation of WHATWG EventTarget interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/event-target-shim@5.0.1","externalReferences":[{"url":"https://github.com/mysticatea/event-target-shim.git","type":"distribution"},{"url":"https://github.com/mysticatea/event-target-shim","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target-shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target_shim:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target_shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/event-target-shim/package.json"}]},{"bom-ref":"pkg:npm/eventemitter2@0.4.14?package-id=f97beb76cff278cb","type":"library","author":"Eric Elliott, , , , ","name":"eventemitter2","version":"0.4.14","description":"A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventemitter2:eventemitter2:0.4.14:*:*:*:*:*:*:*","purl":"pkg:npm/eventemitter2@0.4.14","externalReferences":[{"url":"git://github.com/hij1nx/EventEmitter2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hij1nx:eventemitter2:0.4.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json"}]},{"bom-ref":"pkg:npm/eventemitter3@1.1.1?package-id=f0eebc0770347f36","type":"library","author":"Arnout Kazemier","name":"eventemitter3","version":"1.1.1","description":"EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventemitter3:eventemitter3:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/eventemitter3@1.1.1","externalReferences":[{"url":"git://github.com/primus/eventemitter3.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:primus:eventemitter3:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/marsdb/node_modules/eventemitter3/package.json"}]},{"bom-ref":"pkg:npm/eventemitter3@5.0.1?package-id=7e5ac1ded3550c78","type":"library","author":"Arnout Kazemier","name":"eventemitter3","version":"5.0.1","description":"EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventemitter3:eventemitter3:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/eventemitter3@5.0.1","externalReferences":[{"url":"git://github.com/primus/eventemitter3.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:primus:eventemitter3:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-utils/node_modules/eventemitter3/package.json"}]},{"bom-ref":"pkg:npm/events@3.3.0?package-id=a91d0202fa8ea285","type":"library","author":"Irakli Gozalishvili (http://jeditoolkit.com)","name":"events","version":"3.3.0","description":"Node's event emitter for all engines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Gozala:events:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/events@3.3.0","externalReferences":[{"url":"git://github.com/Gozala/events.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/events/package.json"}]},{"bom-ref":"pkg:npm/exit@0.1.2?package-id=8803d0f682f78ae8","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"exit","version":"0.1.2","description":"A replacement for process.exit that ensures stdio are fully drained before exiting.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cowboy:exit:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/exit@0.1.2","externalReferences":[{"url":"git://github.com/cowboy/node-exit.git","type":"distribution"},{"url":"https://github.com/cowboy/node-exit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/exit/package.json"}]},{"bom-ref":"pkg:npm/expand-brackets@2.1.4?package-id=f80cf8ecf9019c6b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (http://kolarik.sk)","name":"expand-brackets","version":"2.1.4","description":"Expand POSIX bracket expressions (character classes) in glob patterns.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:expand-brackets:expand-brackets:2.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/expand-brackets@2.1.4","externalReferences":[{"url":"https://github.com/jonschlinkert/expand-brackets","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-brackets:expand_brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_brackets:expand-brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_brackets:expand_brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:expand-brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:expand_brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand-brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand_brackets:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/package.json"}]},{"bom-ref":"pkg:npm/expand-template@2.0.3?package-id=1308274036073bda","type":"library","author":"LM ","name":"expand-template","version":"2.0.3","description":"Expand placeholders in a template string","licenses":[{"expression":"MIT OR WTFPL"}],"cpe":"cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/expand-template@2.0.3","externalReferences":[{"url":"https://github.com/ralphtheninja/expand-template.git","type":"distribution"},{"url":"https://github.com/ralphtheninja/expand-template","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-template:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_template:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_template:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ralphtheninja:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ralphtheninja:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-template/package.json"}]},{"bom-ref":"pkg:npm/expand-tilde@2.0.2?package-id=bbefedd1ec4b8ed7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"expand-tilde","version":"2.0.2","description":"Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:expand-tilde:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/expand-tilde@2.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/expand-tilde","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-tilde/package.json"}]},{"bom-ref":"pkg:npm/exponential-backoff@3.1.2?package-id=5f56b6bd4ac19a74","type":"library","author":"Sami Sayegh","name":"exponential-backoff","version":"3.1.2","description":"A utility that allows retrying a function with an exponential delay between attempts.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/exponential-backoff@3.1.2","externalReferences":[{"url":"git+https://github.com/coveooss/exponential-backoff.git","type":"distribution"},{"url":"https://github.com/coveooss/exponential-backoff#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential:exponential-backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential:exponential_backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:coveooss:exponential-backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:coveooss:exponential_backoff:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/exponential-backoff/package.json"}]},{"bom-ref":"pkg:npm/express@4.21.2?package-id=1f1f95355908c6a4","type":"library","author":"TJ Holowaychuk , Aaron Heckmann , Ciaran Jessup , Douglas Christopher Wilson , Guillermo Rauch , Jonathan Ong , Roman Shtylman , Young Jae Sim ","name":"express","version":"4.21.2","description":"Fast, unopinionated, minimalist web framework","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:openjsf:express:4.21.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/express@4.21.2","externalReferences":[{"url":"http://expressjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express/package.json"}]},{"bom-ref":"pkg:npm/express-ipfilter@1.3.2?package-id=75d9ab2bfad32d05","type":"library","author":"jetersen","name":"express-ipfilter","version":"1.3.2","description":"A light-weight IP address based filtering system","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-ipfilter:express-ipfilter:1.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/express-ipfilter@1.3.2","externalReferences":[{"url":"https://github.com/jetersen/express-ipfilter","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-ipfilter:express_ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_ipfilter:express-ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_ipfilter:express_ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jetersen:express-ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jetersen:express_ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_ipfilter:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-ipfilter/package.json"}]},{"bom-ref":"pkg:npm/express-jwt@0.1.3?package-id=b057e452c5702954","type":"library","author":"Matias Woloski (https://www.auth0.com/)","name":"express-jwt","version":"0.1.3","description":"JWT authentication middleware.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:express-jwt:0.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/express-jwt@0.1.3","externalReferences":[{"url":"git://github.com/auth0/express-jwt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/package.json"}]},{"bom-ref":"pkg:npm/express-rate-limit@7.5.1?package-id=7b3c60ae93ab123f","type":"library","author":"Nathan Friedly (http://nfriedly.com/)","name":"express-rate-limit","version":"7.5.1","description":"Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-rate-limit:express-rate-limit:7.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/express-rate-limit@7.5.1","externalReferences":[{"url":"git+https://github.com/express-rate-limit/express-rate-limit.git","type":"distribution"},{"url":"https://github.com/express-rate-limit/express-rate-limit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-rate-limit:express_rate_limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_rate_limit:express-rate-limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_rate_limit:express_rate_limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-rate:express-rate-limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-rate:express_rate_limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_rate:express-rate-limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_rate:express_rate_limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-rate-limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_rate_limit:7.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-rate-limit/package.json"}]},{"bom-ref":"pkg:npm/express-robots-txt@0.4.1?package-id=fea0077673d1ae89","type":"library","author":"modosc (http://github.com/modosc), ashaffer (http://github.com/ashaffer), ","name":"express-robots-txt","version":"0.4.1","description":"Express middleware to serve and generate robots.txt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-robots-txt:express-robots-txt:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/express-robots-txt@0.4.1","externalReferences":[{"url":"https://github.com/modosc/express-robots-txt","type":"distribution"},{"url":"https://github.com/modosc/express-robots-txt","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots-txt:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots_txt:express-robots-txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots_txt:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots:express-robots-txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots:express-robots-txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-robots-txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modosc:express-robots-txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modosc:express_robots_txt:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-robots-txt/package.json"}]},{"bom-ref":"pkg:npm/express-security.txt@2.0.0?package-id=a5e9507bd21efb6e","type":"library","name":"express-security.txt","version":"2.0.0","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:express-security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/express-security.txt@2.0.0","externalReferences":[{"url":"git+https://github.com/gergelyke/express-security.txt.git","type":"distribution"},{"url":"https://github.com/gergelyke/express-security.txt#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gergelyke:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gergelyke:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-security.txt/package.json"}]},{"bom-ref":"pkg:npm/ext-list@2.2.2?package-id=42eb35c00aa55cff","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"ext-list","version":"2.2.2","description":"List of known file extensions and their MIME types","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/ext-list@2.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext-list:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_list:ext-list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_list:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext-list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ext-list/package.json"}]},{"bom-ref":"pkg:npm/ext-name@5.0.0?package-id=738d43aeb5b7acf8","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"ext-name","version":"5.0.0","description":"Get the file extension and MIME type from a file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/ext-name@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext-name:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_name:ext-name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_name:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext-name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ext-name/package.json"}]},{"bom-ref":"pkg:npm/extend@3.0.2?package-id=68ec8b67c7986d90","type":"library","author":"Stefan Thomas (http://www.justmoon.net), Jordan Harband (https://github.com/ljharb)","name":"extend","version":"3.0.2","description":"Port of jQuery.extend for node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/extend@3.0.2","externalReferences":[{"url":"https://github.com/justmoon/node-extend.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extend/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=833280271d2baf76","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/braces/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=bffdf65cb5e952fc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=545e3a755dcdb140","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extglob/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=5174737bf6ceba30","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fill-range/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=a5e11c343c6874d8","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-value/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@2.0.1?package-id=e208cf1dd2e981ce","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"extend-shallow","version":"2.0.1","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extend-shallow@3.0.2?package-id=31c36275ba86b6e4","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Peter deHaan (http://about.me/peterdehaan)","name":"extend-shallow","version":"3.0.2","description":"Extend an object with the properties of additional objects. node.js/javascript util.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend-shallow:extend-shallow:3.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/extend-shallow@3.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/extend-shallow","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend-shallow:extend_shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend-shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend_shallow:extend_shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend-shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:extend_shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend-shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:extend:extend_shallow:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extend-shallow/package.json"}]},{"bom-ref":"pkg:npm/extglob@2.0.4?package-id=12381ef1cda11d4c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Isiah Meadows (https://www.isiahmeadows.com), Jon Schlinkert (http://twitter.com/jonschlinkert), Matt Bierner (http://mattbierner.com), Shinnosuke Watanabe (https://shinnn.github.io)","name":"extglob","version":"2.0.4","description":"Extended glob support for JavaScript. Adds (almost) the expressive power of regular expressions to glob patterns.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:micromatch:extglob:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/extglob@2.0.4","externalReferences":[{"url":"https://github.com/micromatch/extglob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:extglob:extglob:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extglob/package.json"}]},{"bom-ref":"pkg:npm/false_main?package-id=3d00c14a77d4b177","type":"library","name":"false_main","version":"UNKNOWN","cpe":"cpe:2.3:a:false-main:false-main:*:*:*:*:*:*:*:*","purl":"pkg:npm/false_main","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:false-main:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false_main:false-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false_main:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false:false-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/false_main/package.json"}]},{"bom-ref":"pkg:npm/fast.js@0.1.1?package-id=097fffa0302024b5","type":"library","author":"Charles Pick ","name":"fast.js","version":"0.1.1","description":"Faster user-land reimplementations of native functions with extra helpers.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:codemix:fast.js:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fast.js@0.1.1","externalReferences":[{"url":"http://github.com/codemix/fast.js","type":"distribution"},{"url":"https://github.com/codemix/fast.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fast.js:fast.js:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fast.js/package.json"}]},{"bom-ref":"pkg:npm/fd-slicer@1.1.0?package-id=b27ace599789b7aa","type":"library","author":"Andrew Kelley ","name":"fd-slicer","version":"1.1.0","description":"safely create multiple ReadStream or WriteStream objects from the same file descriptor","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fd-slicer@1.1.0","externalReferences":[{"url":"git://github.com/andrewrk/node-fd-slicer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd-slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd_slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd_slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:andrewrk:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:andrewrk:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fd-slicer/package.json"}]},{"bom-ref":"pkg:npm/fdir@6.5.0?package-id=153d959dba8cb29c","type":"library","author":"thecodrr ","name":"fdir","version":"6.5.0","description":"The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/fdir@6.5.0","externalReferences":[{"url":"git+https://github.com/thecodrr/fdir.git","type":"distribution"},{"url":"https://github.com/thecodrr/fdir#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json"}]},{"bom-ref":"pkg:npm/feature-policy@0.5.0?package-id=9c10d6da5801ebd4","type":"library","author":"Evan Hahn (https://evanhahn.com)","name":"feature-policy","version":"0.5.0","description":"Middleware to set the Feature-Policy HTTP header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:feature-policy:feature-policy:0.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/feature-policy@0.5.0","externalReferences":[{"url":"git://github.com/helmetjs/feature-policy.git","type":"distribution"},{"url":"https://helmetjs.github.io/docs/feature-policy/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature-policy:feature_policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature_policy:feature-policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature_policy:feature_policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmetjs:feature-policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmetjs:feature_policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature:feature-policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature:feature_policy:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/feature-policy/package.json"}]},{"bom-ref":"pkg:npm/fecha@4.2.3?package-id=4c7f9896237220f1","type":"library","author":"Taylor Hakes","name":"fecha","version":"4.2.3","description":"Date formatting and parsing","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:taylorhakes:fecha:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/fecha@4.2.3","externalReferences":[{"url":"https://taylorhakes@github.com/taylorhakes/fecha.git","type":"distribution"},{"url":"https://github.com/taylorhakes/fecha","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fecha:fecha:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fecha/package.json"}]},{"bom-ref":"pkg:npm/file-js@0.3.0?package-id=c361f24f5a8fa3ce","type":"library","author":"nspragg@gmail.com","name":"file-js","version":"0.3.0","description":"Abstract representation of a pathname","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-js:file-js:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/file-js@0.3.0","externalReferences":[{"url":"https://github.com/nspragg/file-js.git","type":"distribution"},{"url":"https://github.com/nspragg/file-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-js:file_js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_js:file-js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_js:file_js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:file-js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:file_js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file-js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file_js:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-js/package.json"}]},{"bom-ref":"pkg:npm/file-stream-rotator@1.0.0?package-id=15f34f70f0b92af7","type":"library","author":"Roger Castells","name":"file-stream-rotator","version":"1.0.0","description":"Automated stream rotation useful for log files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-stream-rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/file-stream-rotator@1.0.0","externalReferences":[{"url":"git://github.com/rogerc/file-stream-rotator.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream-rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream_rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream_rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogerc:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogerc:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-stream-rotator/package.json"}]},{"bom-ref":"pkg:npm/file-type@11.1.0?package-id=67d7e8ff46ed8cb6","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"11.1.0","description":"Detect the file type of a Buffer/Uint8Array/ArrayBuffer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:11.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@11.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/download/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@16.5.4?package-id=e880d91c1999c011","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"file-type","version":"16.5.4","description":"Detect the file type of a Buffer/Uint8Array/ArrayBuffer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:16.5.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@16.5.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@3.9.0?package-id=2fb960c1da2a5460","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"3.9.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:3.9.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@3.9.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@4.4.0?package-id=e058a6a6b902e7b6","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"4.4.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:4.4.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@4.4.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archive-type/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@5.2.0?package-id=fe078f258a41aa0a","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"5.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:5.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@5.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@5.2.0?package-id=fe9dadf27623df81","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"5.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:5.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@5.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@6.2.0?package-id=ac71d0dd845ff856","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"file-type","version":"6.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-type_project:file-type:6.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-uri-to-path@1.0.0?package-id=8e20623301b2c459","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"file-uri-to-path","version":"1.0.0","description":"Convert a file: URI to a file path","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/file-uri-to-path@1.0.0","externalReferences":[{"url":"git://github.com/TooTallNate/file-uri-to-path.git","type":"distribution"},{"url":"https://github.com/TooTallNate/file-uri-to-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-uri-to-path/package.json"}]},{"bom-ref":"pkg:npm/filehound@1.17.6?package-id=af7a8fa65087160b","type":"library","name":"filehound","version":"1.17.6","description":"Find files the easy way","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:filehound:filehound:1.17.6:*:*:*:*:*:*:*","purl":"pkg:npm/filehound@1.17.6","externalReferences":[{"url":"https://github.com/nspragg/filehound.git","type":"distribution"},{"url":"https://github.com/nspragg/filehound","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:filehound:1.17.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filehound/package.json"}]},{"bom-ref":"pkg:npm/filename-reserved-regex@2.0.0?package-id=9f4d2bdf1bb829e5","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"filename-reserved-regex","version":"2.0.0","description":"Regular expression for matching reserved filename characters","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/filename-reserved-regex@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved-regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved_regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved_regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filename-reserved-regex/package.json"}]},{"bom-ref":"pkg:npm/filenamify@3.0.0?package-id=14ccb7336c2a219a","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"filenamify","version":"3.0.0","description":"Convert a string to a valid safe filename","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:filenamify:filenamify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/filenamify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filenamify/package.json"}]},{"bom-ref":"pkg:npm/filesniffer@1.0.3?package-id=d432c829b196e657","type":"library","name":"filesniffer","version":"1.0.3","description":"Search files the easy way.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:filesniffer:filesniffer:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/filesniffer@1.0.3","externalReferences":[{"url":"https://github.com/nspragg/filesniffer.git","type":"distribution"},{"url":"https://github.com/nspragg/filesniffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:filesniffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filesniffer/package.json"}]},{"bom-ref":"pkg:npm/fill-range@4.0.0?package-id=e3a1c7234ebf51b8","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com)","name":"fill-range","version":"4.0.0","description":"Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:fill-range:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/fill-range@4.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/fill-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fill_range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill-range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill_range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill-range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill_range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill-range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill_range:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fill-range/package.json"}]},{"bom-ref":"pkg:npm/fill-range@7.1.1?package-id=70ecd1a5e82b119c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ","name":"fill-range","version":"7.1.1","description":"Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fill-range@7.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/fill-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/fill-range/package.json"}]},{"bom-ref":"pkg:npm/fill-range@7.1.1?package-id=54452892cc4c02e7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ","name":"fill-range","version":"7.1.1","description":"Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fill-range@7.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/fill-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/fill-range/package.json"}]},{"bom-ref":"pkg:npm/fill-range@7.1.1?package-id=63fcfac6770d5cfd","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ","name":"fill-range","version":"7.1.1","description":"Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fill-range@7.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/fill-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/fill-range/package.json"}]},{"bom-ref":"pkg:npm/finale-rest@1.2.2?package-id=0081831c03dd4ad6","type":"library","author":"Tom Juszczyk , Matt Broadstone , David Chester , Renzo Rozza Gonzalez ","name":"finale-rest","version":"1.2.2","description":"Create REST resources and controllers with Sequelize and Express or Restify","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tommybananas:finale-rest:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/finale-rest@1.2.2","externalReferences":[{"url":"https://github.com/tommybananas/finale.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommybananas:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale-rest:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale-rest:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale_rest:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale_rest:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finale-rest/package.json"}]},{"bom-ref":"pkg:npm/finalhandler@1.3.1?package-id=087f19597709d843","type":"library","author":"Douglas Christopher Wilson ","name":"finalhandler","version":"1.3.1","description":"Node.js final http responder","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:finalhandler:finalhandler:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/finalhandler@1.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finalhandler/package.json"}]},{"bom-ref":"pkg:npm/find-up@4.1.0?package-id=3413282984ba957b","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"find-up","version":"4.1.0","description":"Find a file or directory by walking up parent directories","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/find-up@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:find-up:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find_up:find-up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find_up:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find:find-up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/find-up/package.json"}]},{"bom-ref":"pkg:npm/findup-sync@2.0.0?package-id=054d0f025a7e9b70","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com)","name":"findup-sync","version":"2.0.0","description":"Find the first file matching a given pattern in the current directory or the nearest ancestor directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:findup-sync:findup-sync:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/findup-sync@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup-sync:findup_sync:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup-sync:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup_sync:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup-sync:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup_sync:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/findup-sync/package.json"}]},{"bom-ref":"pkg:npm/findup-sync@4.0.0?package-id=6a5e9cbc54d4e98e","type":"library","author":"Gulp Team (https://gulpjs.com/), Ben Alman , Tyler Kellen , Jon Schlinkert , Blaine Bublitz ","name":"findup-sync","version":"4.0.0","description":"Find the first file matching a given pattern in the current directory or the nearest ancestor directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:findup-sync:findup-sync:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/findup-sync@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup-sync:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup-sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup-sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json"}]},{"bom-ref":"pkg:npm/findup-sync@5.0.0?package-id=0912938d70ddfe7e","type":"library","author":"Gulp Team (https://gulpjs.com/), Ben Alman , Tyler Kellen , Jon Schlinkert , Blaine Bublitz ","name":"findup-sync","version":"5.0.0","description":"Find the first file matching a given pattern in the current directory or the nearest ancestor directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:findup-sync:findup-sync:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/findup-sync@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup-sync:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup-sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup-sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/findup-sync/package.json"}]},{"bom-ref":"pkg:npm/fined@1.2.0?package-id=d4103ef83c6d123b","type":"library","author":"Gulp Team (http://gulpjs.com/), Takayuki Sato , Blaine Bublitz ","name":"fined","version":"1.2.0","description":"Find a file given a declaration of locations.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fined:fined:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/fined@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fined/package.json"}]},{"bom-ref":"pkg:npm/flagged-respawn@1.0.1?package-id=cb10ed4f13e99eda","type":"library","author":"Gulp Team (http://gulpjs.com/), Takayuki Sato , Bertrand Marron , Tyler Kellen , Blaine Bublitz ","name":"flagged-respawn","version":"1.0.1","description":"A tool for respawning node binaries when special flags are present.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:flagged-respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/flagged-respawn@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged-respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged_respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged_respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged:flagged-respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/flagged-respawn/package.json"}]},{"bom-ref":"pkg:npm/fn.name@1.1.0?package-id=b0ab3f38f00f9e67","type":"library","author":"Arnout Kazemier","name":"fn.name","version":"1.1.0","description":"Extract names from functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:fn.name:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fn.name@1.1.0","externalReferences":[{"url":"https://github.com/3rd-Eden/fn.name","type":"distribution"},{"url":"https://github.com/3rd-Eden/fn.name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fn.name:fn.name:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fn.name/package.json"}]},{"bom-ref":"pkg:npm/fontkit@1.9.0?package-id=4d71c5f55dc211a8","type":"library","author":"Devon Govett ","name":"fontkit","version":"1.9.0","description":"An advanced font engine for Node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:foliojs:fontkit:1.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/fontkit@1.9.0","externalReferences":[{"url":"git://github.com/foliojs/fontkit.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fontkit:fontkit:1.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fontkit/package.json"}]},{"bom-ref":"pkg:npm/for-each@0.3.5?package-id=a555afc10b78c8e9","type":"library","author":"Raynos , Jake Verbaten, Jordan Harband (https://github.com/ljharb)","name":"for-each","version":"0.3.5","description":"A better forEach","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:for-each:for-each:0.3.5:*:*:*:*:*:*:*","purl":"pkg:npm/for-each@0.3.5","externalReferences":[{"url":"https://github.com/Raynos/for-each.git","type":"distribution"},{"url":"https://github.com/Raynos/for-each","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-each:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_each:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_each:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-each/package.json"}]},{"bom-ref":"pkg:npm/for-in@1.0.2?package-id=967e44e4af521888","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Irish (http://paulirish.com)","name":"for-in","version":"1.0.2","description":"Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:for-in:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/for-in@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/for-in","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-in:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-in:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_in:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_in:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-in/package.json"}]},{"bom-ref":"pkg:npm/for-own@1.0.0?package-id=411a3440348fb71b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Javier Cejudo (https://www.javiercejudo.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"for-own","version":"1.0.0","description":"Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:for-own:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/for-own@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/for-own","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-own:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-own:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_own:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_own:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-own/package.json"}]},{"bom-ref":"pkg:npm/foreachasync@3.0.0?package-id=386d38aff1a706fc","type":"library","author":"AJ ONeal (http://coolaj86.com/)","name":"foreachasync","version":"3.0.0","description":"A node- and browser-ready async counterpart of Array.prototype.forEach","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:foreachasync:foreachasync:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/foreachasync@3.0.0","externalReferences":[{"url":"git://github.com/FuturesJS/forEachAsync.git","type":"distribution"},{"url":"https://github.com/FuturesJS/forEachAsync","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:FuturesJS:foreachasync:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreachasync/package.json"}]},{"bom-ref":"pkg:npm/foreground-child@3.3.1?package-id=49b05c8a83bc898e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"foreground-child","version":"3.3.1","description":"Run a child as if it's the foreground process. Give it stdio. Exit when it exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/foreground-child@3.3.1","externalReferences":[{"url":"git+https://github.com/tapjs/foreground-child.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreground-child/package.json"}]},{"bom-ref":"pkg:npm/formatio@1.1.1?package-id=25b6907c6253d72b","type":"library","author":"Christian Johansen, Christian Johansen (http://cjohansen.no), August Lilleaas (http://augustl.com), Dave Geddes , Stein Magnus Jodal , Tek Nynja ","name":"formatio","version":"1.1.1","description":"Human-readable object formatting","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:busterjs:formatio:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/formatio@1.1.1","externalReferences":[{"url":"https://github.com/busterjs/formatio.git","type":"distribution"},{"url":"http://busterjs.org/docs/formatio/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:formatio:formatio:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/formatio/package.json"}]},{"bom-ref":"pkg:npm/forwarded@0.2.0?package-id=cf9f575adc30e843","type":"library","author":"Douglas Christopher Wilson ","name":"forwarded","version":"0.2.0","description":"Parse HTTP X-Forwarded-For header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/forwarded@0.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/forwarded/package.json"}]},{"bom-ref":"pkg:npm/fragment-cache@0.2.1?package-id=03b44cfbf2789c52","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"fragment-cache","version":"0.2.1","description":"A cache for managing namespaced sub-caches","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fragment-cache:fragment-cache:0.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/fragment-cache@0.2.1","externalReferences":[{"url":"https://github.com/jonschlinkert/fragment-cache","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fragment-cache:fragment_cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fragment_cache:fragment-cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fragment_cache:fragment_cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fragment-cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fragment_cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fragment:fragment-cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fragment:fragment_cache:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fragment-cache/package.json"}]},{"bom-ref":"pkg:npm/fresh@0.5.2?package-id=c33f6af8ffbc3ffd","type":"library","author":"TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"fresh","version":"0.5.2","description":"HTTP response freshness testing","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/fresh@0.5.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fresh/package.json"}]},{"bom-ref":"pkg:npm/from2@2.3.0?package-id=f049b24706a2c914","type":"library","author":"Hugh Kennedy (http://hughsk.io/), Mathias Buus ","name":"from2","version":"2.3.0","description":"Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/from2@2.3.0","externalReferences":[{"url":"git://github.com/hughsk/from2","type":"distribution"},{"url":"https://github.com/hughsk/from2","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:from2:from2:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/from2/package.json"}]},{"bom-ref":"pkg:npm/frontend@19.0.0?package-id=8bed5f460f412d65","type":"library","name":"frontend","version":"19.0.0","cpe":"cpe:2.3:a:frontend:frontend:19.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/frontend@19.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/frontend/package.json"}]},{"bom-ref":"pkg:npm/fs-constants@1.0.0?package-id=702abc5d79be7e46","type":"library","author":"Mathias Buus (@mafintosh)","name":"fs-constants","version":"1.0.0","description":"Require constants across node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-constants@1.0.0","externalReferences":[{"url":"https://github.com/mafintosh/fs-constants.git","type":"distribution"},{"url":"https://github.com/mafintosh/fs-constants","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-constants/package.json"}]},{"bom-ref":"pkg:npm/fs-extra@9.1.0?package-id=59256da7fb4a7586","type":"library","author":"JP Richardson ","name":"fs-extra","version":"9.1.0","description":"fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-extra@9.1.0","externalReferences":[{"url":"https://github.com/jprichardson/node-fs-extra","type":"distribution"},{"url":"https://github.com/jprichardson/node-fs-extra","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jprichardson:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-extra:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-extra:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_extra:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_extra:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-extra/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@1.2.7?package-id=d8cf35e6758fddb2","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"fs-minipass","version":"1.2.7","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@1.2.7","externalReferences":[{"url":"git+https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@2.1.0?package-id=34b0337b00752017","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"fs-minipass","version":"2.1.0","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@2.1.0","externalReferences":[{"url":"git+https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@3.0.3?package-id=ddb32fc1590fd08c","type":"library","author":"GitHub Inc.","name":"fs-minipass","version":"3.0.3","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@3.0.3","externalReferences":[{"url":"https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs.realpath@1.0.0?package-id=5215a4272ae071b5","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"fs.realpath","version":"1.0.0","description":"Use node's fs.realpath, but fall back to the JS implementation if the native one fails","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs.realpath@1.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/fs.realpath.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs.realpath/package.json"}]},{"bom-ref":"pkg:npm/fstream@1.0.12?package-id=a2282a5fe21d6573","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"fstream","version":"1.0.12","description":"Advanced file system stream things","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*","purl":"pkg:npm/fstream@1.0.12","externalReferences":[{"url":"https://github.com/npm/fstream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fstream:1.0.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/package.json"}]},{"bom-ref":"pkg:npm/function-bind@1.1.2?package-id=e034b9e16a017cc2","type":"library","author":"Raynos , Raynos, Jordan Harband (https://github.com/ljharb)","name":"function-bind","version":"1.1.2","description":"Implementation of Function.prototype.bind","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/function-bind@1.1.2","externalReferences":[{"url":"https://github.com/Raynos/function-bind.git","type":"distribution"},{"url":"https://github.com/Raynos/function-bind","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/function-bind/package.json"}]},{"bom-ref":"pkg:npm/functions-have-names@1.2.3?package-id=b2e38e0035342c0b","type":"library","author":"Jordan Harband ","name":"functions-have-names","version":"1.2.3","description":"Does this JS environment support the `name` property on functions?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:functions-have-names:functions-have-names:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/functions-have-names@1.2.3","externalReferences":[{"url":"git+https://github.com/inspect-js/functions-have-names.git","type":"distribution"},{"url":"https://github.com/inspect-js/functions-have-names#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have-names:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have_names:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have_names:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/functions-have-names/package.json"}]},{"bom-ref":"pkg:npm/fuzzball@1.4.0?package-id=c0e00fe039d56314","type":"library","author":"Nolan Kaplan ","name":"fuzzball","version":"1.4.0","description":"Fuzzy string matching algorithms and utilities, port of the fuzzywuzzy Python library.","licenses":[{"license":{"id":"GPL-2.0-only"}}],"cpe":"cpe:2.3:a:fuzzball:fuzzball:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/fuzzball@1.4.0","externalReferences":[{"url":"https://github.com/nol13/fuzzball.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nol13:fuzzball:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fuzzball/package.json"}]},{"bom-ref":"pkg:npm/gauge@2.7.4?package-id=d33d667d43d843b2","type":"library","author":"Rebecca Turner ","name":"gauge","version":"2.7.4","description":"A terminal based horizontal guage","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*","purl":"pkg:npm/gauge@2.7.4","externalReferences":[{"url":"https://github.com/iarna/gauge","type":"distribution"},{"url":"https://github.com/iarna/gauge","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:gauge:2.7.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/package.json"}]},{"bom-ref":"pkg:npm/gauge@4.0.4?package-id=3ebce6a81a69f49f","type":"library","author":"GitHub Inc.","name":"gauge","version":"4.0.4","description":"A terminal based horizontal gauge","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/gauge@4.0.4","externalReferences":[{"url":"https://github.com/npm/gauge.git","type":"distribution"},{"url":"https://github.com/npm/gauge","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:gauge:4.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json"}]},{"bom-ref":"pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=0a534483a88e1e33&upstream=gcc-12","type":"library","publisher":"Debian GCC Maintainers ","name":"gcc-12-base","version":"12.2.0-14+deb12u1","licenses":[{"license":{"id":"GFDL-1.2-only"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"GPL-3.0-only"}},{"license":{"name":"Artistic"}},{"license":{"name":"GPL"}},{"license":{"name":"LGPL"}}],"cpe":"cpe:2.3:a:gcc-12-base:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&upstream=gcc-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-12-base:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_12_base:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_12_base:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-12:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-12:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_12:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_12:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc-12-base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc_12_base:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/gcc-12-base"},{"name":"syft:location:1:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:1:path","value":"/usr/share/doc/gcc-12-base/copyright"},{"name":"syft:location:2:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/gcc-12-base.md5sums"},{"name":"syft:metadata:installedSize","value":"100"},{"name":"syft:metadata:source","value":"gcc-12"}]},{"bom-ref":"pkg:npm/geojson-utils@1.1.0?package-id=ad6fe893f4863fc3","type":"library","author":"Max Ogden","name":"geojson-utils","version":"1.1.0","description":"GeoJSON Utilities for JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:geojson-utils:geojson-utils:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/geojson-utils@1.1.0","externalReferences":[{"url":"git://github.com/maxogden/geojson-js-utils.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson-utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson_utils:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson_utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/geojson-utils/package.json"}]},{"bom-ref":"pkg:npm/get-caller-file@2.0.5?package-id=546d53bc24510f43","type":"library","author":"Stefan Penner","name":"get-caller-file","version":"2.0.5","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/get-caller-file@2.0.5","externalReferences":[{"url":"git+https://github.com/stefanpenner/get-caller-file.git","type":"distribution"},{"url":"https://github.com/stefanpenner/get-caller-file#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanpenner:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanpenner:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-caller-file/package.json"}]},{"bom-ref":"pkg:npm/get-intrinsic@1.3.0?package-id=fd30384e3e731beb","type":"library","author":"Jordan Harband ","name":"get-intrinsic","version":"1.3.0","description":"Get and robustly cache all JS language-level intrinsics at first require time","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-intrinsic@1.3.0","externalReferences":[{"url":"git+https://github.com/ljharb/get-intrinsic.git","type":"distribution"},{"url":"https://github.com/ljharb/get-intrinsic#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-intrinsic/package.json"}]},{"bom-ref":"pkg:npm/get-proto@1.0.1?package-id=f140446776201e12","type":"library","author":"Jordan Harband ","name":"get-proto","version":"1.0.1","description":"Robustly get the [[Prototype]] of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/get-proto@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/get-proto.git","type":"distribution"},{"url":"https://github.com/ljharb/get-proto#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-proto/package.json"}]},{"bom-ref":"pkg:npm/get-stream@2.3.1?package-id=2cd76cc08fac13f8","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"get-stream","version":"2.3.1","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@2.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@3.0.0?package-id=529f1c9fb766b433","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"get-stream","version":"3.0.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@3.0.0?package-id=a688b423aa001971","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"get-stream","version":"3.0.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@4.1.0?package-id=09ae98551bcf5cd8","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"get-stream","version":"4.1.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-value@2.0.6?package-id=205a063352cf1be5","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"get-value","version":"2.0.6","description":"Use property paths (`a.b.c`) to get a nested value from an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:get-value:2.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/get-value@2.0.6","externalReferences":[{"url":"https://github.com/jonschlinkert/get-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:get_value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-value:get-value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-value:get_value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_value:get-value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_value:get_value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_value:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-value/package.json"}]},{"bom-ref":"pkg:npm/getobject@1.0.2?package-id=206b7d3d675e4f94","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"getobject","version":"1.0.2","description":"get.and.set.deep.objects.easily = true","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:getobject_project:getobject:1.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/getobject@1.0.2","externalReferences":[{"url":"git://github.com/cowboy/node-getobject.git","type":"distribution"},{"url":"https://github.com/cowboy/node-getobject","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/getobject/package.json"}]},{"bom-ref":"pkg:npm/github-from-package@0.0.0?package-id=9021b88a5ab51ee3","type":"library","author":"James Halliday (http://substack.net)","name":"github-from-package","version":"0.0.0","description":"return the github url from a package.json file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/github-from-package@0.0.0","externalReferences":[{"url":"git://github.com/substack/github-from-package.git","type":"distribution"},{"url":"https://github.com/substack/github-from-package","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/github-from-package/package.json"}]},{"bom-ref":"pkg:npm/glob@10.4.5?package-id=ba9bf93e12b9ecba","type":"library","author":"Isaac Z. Schlueter (https://blog.izs.me/)","name":"glob","version":"10.4.5","description":"the most correct and second fastest glob implementation in JavaScript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:10.4.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@10.4.5","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.1.7?package-id=0ff063b9149f88f9","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.1.7","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.1.7","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=cb1579e0fac84290","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=e2fd343720beab4f","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=659ed192f94df6a9","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=db8e9a22dfa90b9e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=acbfd4a89a1d4104","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=48e2cd171ff40be3","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=7ad2ad6aba89c8f7","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob-parent@5.1.2?package-id=7173d11d4da7d8e0","type":"library","author":"Gulp Team (https://gulpjs.com/), Elan Shanker (https://github.com/es128), Blaine Bublitz ","name":"glob-parent","version":"5.1.2","description":"Extract the non-magic parent path from a glob string.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:gulpjs:glob-parent:5.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob-parent@5.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/glob-parent/package.json"}]},{"bom-ref":"pkg:npm/global-modules@1.0.0?package-id=e51c05cfa6a53954","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Kiko Beats (https://kikobeats.com)","name":"global-modules","version":"1.0.0","description":"The directory used by npm for globally installed npm modules.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:global-modules:global-modules:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/global-modules@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/global-modules","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:global-modules:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_modules:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_modules:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-modules/package.json"}]},{"bom-ref":"pkg:npm/global-prefix@1.0.2?package-id=214a6e1e9476a5ef","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Alexandr Bogachev (https://github.com/rmbaad), Brian Woodward (https://twitter.com/doowb), Charlike Mike Reagent (https://i.am.charlike.online), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Jorrit Schippers (https://www.ncode.nl), Mathias Rasmussen (chrome://dino), Ross Fenning (http://rossfenning.co.uk)","name":"global-prefix","version":"1.0.2","description":"Get the npm global path prefix.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:global-prefix:global-prefix:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/global-prefix@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/global-prefix","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:global-prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_prefix:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/package.json"}]},{"bom-ref":"pkg:npm/gopd@1.2.0?package-id=83baf5c5b6922e77","type":"library","author":"Jordan Harband ","name":"gopd","version":"1.2.0","description":"`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ljharb:gopd:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/gopd@1.2.0","externalReferences":[{"url":"git+https://github.com/ljharb/gopd.git","type":"distribution"},{"url":"https://github.com/ljharb/gopd#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gopd/package.json"}]},{"bom-ref":"pkg:npm/got@8.3.2?package-id=5bd1b0995776246c","type":"library","author":"Sindre Sorhus (sindresorhus.com), Vsevolod Strukchinsky (github.com/floatdrop), Alexander Tesfamichael (alextes.me)","name":"got","version":"8.3.2","description":"Simplified HTTP requests","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:got:got:8.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/got@8.3.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/package.json"}]},{"bom-ref":"pkg:npm/graceful-fs@4.2.11?package-id=efbe6f20b1abe3a8","type":"library","name":"graceful-fs","version":"4.2.11","description":"A drop-in replacement for fs, making various improvements.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*","purl":"pkg:npm/graceful-fs@4.2.11","externalReferences":[{"url":"https://github.com/isaacs/node-graceful-fs","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/graceful-fs/package.json"}]},{"bom-ref":"pkg:npm/grunt@1.6.1?package-id=bd9bcefc5b67485e","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"grunt","version":"1.6.1","description":"The JavaScript Task Runner","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:gruntjs:grunt:1.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/grunt@1.6.1","externalReferences":[{"url":"https://github.com/gruntjs/grunt.git","type":"distribution"},{"url":"https://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/package.json"}]},{"bom-ref":"pkg:npm/grunt-cli@1.4.3?package-id=8c5b26ab2118f0b8","type":"library","author":"Grunt Development Team (http://gruntjs.com/development-team)","name":"grunt-cli","version":"1.4.3","description":"The grunt command line interface","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-cli:grunt-cli:1.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-cli@1.4.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-cli:grunt_cli:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_cli:grunt-cli:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_cli:grunt_cli:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-cli:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_cli:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/grunt-cli/package.json"}]},{"bom-ref":"pkg:npm/grunt-contrib-compress@1.6.0?package-id=96ee58510e0b9ecc","type":"library","author":"Grunt Team (http://gruntjs.com/)","name":"grunt-contrib-compress","version":"1.6.0","description":"Compress files and folders","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-contrib-compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-contrib-compress@1.6.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib-compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib_compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib_compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/package.json"}]},{"bom-ref":"pkg:npm/grunt-known-options@2.0.0?package-id=91f0ef5736e3a948","type":"library","author":"Grunt Development Team (http://gruntjs.com/development-team)","name":"grunt-known-options","version":"2.0.0","description":"The known options used in Grunt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-known-options:grunt-known-options:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-known-options@2.0.0","externalReferences":[{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known-options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known_options:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known_options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-known-options/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-log@3.0.0?package-id=ca2d30c3e712c6f5","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"grunt-legacy-log","version":"3.0.0","description":"The Grunt 0.4.x logger.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-log:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-log@3.0.0","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-log.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_log:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-log-utils@2.1.0?package-id=65ad9c1d39ae15b0","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"grunt-legacy-log-utils","version":"2.1.0","description":"Static methods for the Grunt 0.4.x logger.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-log-utils:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-log-utils@2.1.0","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-log-utils.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log-utils:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log_utils:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log_utils:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-log-utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_log_utils:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-util@2.0.1?package-id=edc94cd854e80348","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"grunt-legacy-util","version":"2.0.1","description":"Some old grunt utils provided for backwards compatibility.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-util:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-util@2.0.1","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-util.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-util:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_util:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_util:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_util:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-util/package.json"}]},{"bom-ref":"pkg:npm/grunt-replace-json@0.1.0?package-id=33dc445c60254c99","type":"library","author":"Agustin Croce ","name":"grunt-replace-json","version":"0.1.0","description":"Updates attributes of json files.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-replace-json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-replace-json@0.1.0","externalReferences":[{"url":"https://github.com/exo-dev/grunt-replace-json.git","type":"distribution"},{"url":"https://github.com/exo-dev/grunt-replace-json","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace-json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace_json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace_json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exo-dev:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exo-dev:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-replace-json/package.json"}]},{"bom-ref":"pkg:npm/handlebars@4.7.7?package-id=efc4e18f86eb05ae","type":"library","author":"Yehuda Katz","name":"handlebars","version":"4.7.7","description":"Handlebars provides the power necessary to let you build semantic templates effectively with no frustration","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:handlebars.js_project:handlebars.js:4.7.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/handlebars@4.7.7","externalReferences":[{"url":"https://github.com/wycats/handlebars.js.git","type":"distribution"},{"url":"http://www.handlebarsjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:handlebarsjs:handlebars:4.7.7:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/handlebars/package.json"}]},{"bom-ref":"pkg:npm/has-ansi@2.0.0?package-id=e42b36bf3b02ccb2","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)","name":"has-ansi","version":"2.0.0","description":"Check if a string has ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-ansi@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_ansi:has-ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-ansi/package.json"}]},{"bom-ref":"pkg:npm/has-bigints@1.1.0?package-id=71687501ff0fe52a","type":"library","author":"Jordan Harband ","name":"has-bigints","version":"1.1.0","description":"Determine if the JS environment has BigInt support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-bigints:has-bigints:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-bigints@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/has-bigints.git","type":"distribution"},{"url":"https://github.com/ljharb/has-bigints#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_bigints:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-bigints/package.json"}]},{"bom-ref":"pkg:npm/has-flag@3.0.0?package-id=3d7118b6bb8495c1","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"has-flag","version":"3.0.0","description":"Check if argv has a specific flag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-flag@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-flag/package.json"}]},{"bom-ref":"pkg:npm/has-flag@4.0.0?package-id=886bedfa751a610e","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"has-flag","version":"4.0.0","description":"Check if argv has a specific flag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-flag@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-flag:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has-flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json"}]},{"bom-ref":"pkg:npm/has-property-descriptors@1.0.2?package-id=8da3543c9f5d677c","type":"library","author":"Jordan Harband ","name":"has-property-descriptors","version":"1.0.2","description":"Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-property-descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-property-descriptors@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/has-property-descriptors.git","type":"distribution"},{"url":"https://github.com/inspect-js/has-property-descriptors#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property-descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property_descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property_descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-property-descriptors/package.json"}]},{"bom-ref":"pkg:npm/has-symbol-support-x@1.4.2?package-id=9cdc3fbb4c69858e","type":"library","author":"Graham Fairweather ","name":"has-symbol-support-x","version":"1.4.2","description":"Tests if ES6 Symbol is supported.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-symbol-support-x@1.4.2","externalReferences":[{"url":"https://github.com/Xotic750/has-symbol-support-x.git","type":"distribution"},{"url":"https://github.com/Xotic750/has-symbol-support-x","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support-x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support_x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support_x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-symbol-support-x/package.json"}]},{"bom-ref":"pkg:npm/has-symbols@1.1.0?package-id=d11db59abbaaff57","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"has-symbols","version":"1.1.0","description":"Determine if the JS environment has Symbol support. Supports spec, or shams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-symbols@1.1.0","externalReferences":[{"url":"git://github.com/inspect-js/has-symbols.git","type":"distribution"},{"url":"https://github.com/ljharb/has-symbols#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-symbols/package.json"}]},{"bom-ref":"pkg:npm/has-to-string-tag-x@1.4.1?package-id=57099c5b40b3237c","type":"library","author":"Graham Fairweather ","name":"has-to-string-tag-x","version":"1.4.1","description":"Tests if ES6 @@toStringTag is supported.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/has-to-string-tag-x@1.4.1","externalReferences":[{"url":"https://github.com/Xotic750/has-to-string-tag-x.git","type":"distribution"},{"url":"https://github.com/Xotic750/has-to-string-tag-x","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag-x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag_x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag_x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-to-string-tag-x/package.json"}]},{"bom-ref":"pkg:npm/has-tostringtag@1.0.2?package-id=e022fba37335d6bc","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"has-tostringtag","version":"1.0.2","description":"Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-tostringtag@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/has-tostringtag.git","type":"distribution"},{"url":"https://github.com/inspect-js/has-tostringtag#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-tostringtag/package.json"}]},{"bom-ref":"pkg:npm/has-unicode@2.0.1?package-id=3e71117dc4558f9f","type":"library","author":"Rebecca Turner ","name":"has-unicode","version":"2.0.1","description":"Try to guess if your terminal supports unicode","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/has-unicode@2.0.1","externalReferences":[{"url":"https://github.com/iarna/has-unicode","type":"distribution"},{"url":"https://github.com/iarna/has-unicode","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-unicode/package.json"}]},{"bom-ref":"pkg:npm/has-value@0.3.1?package-id=50adfa8be7eb566d","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"has-value","version":"0.3.1","description":"Returns true if a value exists, false if empty. Works with deeply nested values using object paths.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:has-value:0.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/has-value@0.3.1","externalReferences":[{"url":"https://github.com/jonschlinkert/has-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:has_value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-value:has-value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-value:has_value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_value:has-value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_value:has_value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_value:0.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unset-value/node_modules/has-value/package.json"}]},{"bom-ref":"pkg:npm/has-value@1.0.0?package-id=a6e4385572efc7f0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Ryan M Harrison (https://linkedin.com/in/harrisonrm)","name":"has-value","version":"1.0.0","description":"Returns true if a value exists, false if empty. Works with deeply nested values using object paths.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:has-value:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-value@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/has-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:has_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-value:has-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-value:has_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_value:has-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_value:has_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-value/package.json"}]},{"bom-ref":"pkg:npm/has-values@0.1.4?package-id=f0f9c9a4990d9972","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"has-values","version":"0.1.4","description":"Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:has-values:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/has-values@0.1.4","externalReferences":[{"url":"https://github.com/jonschlinkert/has-values","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:has_values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-values:has-values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-values:has_values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_values:has-values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_values:has_values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_values:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unset-value/node_modules/has-values/package.json"}]},{"bom-ref":"pkg:npm/has-values@1.0.0?package-id=dc59d6de0c3fb176","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"has-values","version":"1.0.0","description":"Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:has-values:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-values@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/has-values","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:has_values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-values:has-values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-values:has_values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_values:has-values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_values:has_values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_values:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-values/package.json"}]},{"bom-ref":"pkg:npm/hashids@2.3.0?package-id=89162caca8f9959a","type":"library","author":"hashids.org (https://github.com/hashids), Ivan Akimov (https://twitter.com/IvanAkimov), Bazyli Brzóska (https://twitter.com/niieani)","name":"hashids","version":"2.3.0","description":"Generate YouTube-like ids from numbers. Use Hashids when you do not want to expose your database ids to the user.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hashids:hashids:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/hashids@2.3.0","externalReferences":[{"url":"https://github.com/niieani/hashids.js.git","type":"distribution"},{"url":"http://hashids.org/javascript","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:niieani:hashids:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hashids/package.json"}]},{"bom-ref":"pkg:npm/hashids-esm?package-id=4d7ad7732dcf2924","type":"library","name":"hashids-esm","version":"UNKNOWN","cpe":"cpe:2.3:a:hashids-esm:hashids-esm:*:*:*:*:*:*:*:*","purl":"pkg:npm/hashids-esm","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids-esm:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids_esm:hashids-esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids_esm:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids:hashids-esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hashids/esm/package.json"}]},{"bom-ref":"pkg:npm/hasown@2.0.2?package-id=be28cb688ac4d2e7","type":"library","author":"Jordan Harband ","name":"hasown","version":"2.0.2","description":"A robust, ES3 compatible, \"has own property\" predicate.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:hasown:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/hasown@2.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/hasOwn.git","type":"distribution"},{"url":"https://github.com/inspect-js/hasOwn#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hasown:hasown:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hasown/package.json"}]},{"bom-ref":"pkg:npm/hbs@4.2.0?package-id=08d9a2b192cdb45c","type":"library","author":"Don Park (http://blog.docuverse.com), Roman Shtylman ","name":"hbs","version":"4.2.0","description":"Express.js template engine plugin for Handlebars","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hbs_project:hbs:4.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/hbs@4.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hbs/package.json"}]},{"bom-ref":"pkg:npm/he@0.4.1?package-id=c1acb688ae0eb8a3","type":"library","author":"Mathias Bynens (http://mathiasbynens.be/)","name":"he","version":"0.4.1","description":"A robust HTML entities encoder/decoder with full Unicode support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:he:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/he@0.4.1","externalReferences":[{"url":"https://github.com/mathiasbynens/he.git","type":"distribution"},{"url":"http://mths.be/he","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:he:he:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/he/package.json"}]},{"bom-ref":"pkg:npm/heap@0.2.7?package-id=350f9bbe2f10d405","type":"library","author":"Xueqiao Xu ","name":"heap","version":"0.2.7","description":"binary heap (priority queue) algorithms (ported from Python's heapq module)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:heap:heap:0.2.7:*:*:*:*:*:*:*","purl":"pkg:npm/heap@0.2.7","externalReferences":[{"url":"git://github.com/qiao/heap.js.git","type":"distribution"},{"url":"https://github.com/qiao/heap.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:qiao:heap:0.2.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/heap/package.json"}]},{"bom-ref":"pkg:npm/helmet@4.6.0?package-id=78e8bd8351bc0a93","type":"library","author":"Adam Baldwin (https://evilpacket.net), Evan Hahn (https://evanhahn.com), Ameen Abdeen ","name":"helmet","version":"4.6.0","description":"help secure Express/Connect apps with various HTTP headers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:helmetjs:helmet:4.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/helmet@4.6.0","externalReferences":[{"url":"git://github.com/helmetjs/helmet.git","type":"distribution"},{"url":"https://helmetjs.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmet:helmet:4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/helmet/package.json"}]},{"bom-ref":"pkg:npm/hoister@0.0.2?package-id=2a78cde116b73996","type":"library","author":"Matt McKegg","name":"hoister","version":"0.0.2","description":"Put all function and variable declarations at the top of the scope in an AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hoister:hoister:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/hoister@0.0.2","externalReferences":[{"url":"https://github.com/mmckegg/hoister.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mmckegg:hoister:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hoister/package.json"}]},{"bom-ref":"pkg:npm/homedir-polyfill@1.0.3?package-id=8fe8e9465b9662f0","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"homedir-polyfill","version":"1.0.3","description":"Node.js os.homedir polyfill for older versions of node.js.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:homedir-polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/homedir-polyfill@1.0.3","externalReferences":[{"url":"https://github.com/doowb/homedir-polyfill","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir-polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir_polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir_polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/homedir-polyfill/package.json"}]},{"bom-ref":"pkg:npm/hooker@0.2.3?package-id=6e5642e695422045","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"hooker","version":"0.2.3","description":"Monkey-patch (hook) functions for debugging and stuff.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cowboy:hooker:0.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/hooker@0.2.3","externalReferences":[{"url":"git://github.com/cowboy/javascript-hooker.git","type":"distribution"},{"url":"http://github.com/cowboy/javascript-hooker","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hooker:hooker:0.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hooker/package.json"}]},{"bom-ref":"pkg:npm/html-entities@1.4.0?package-id=351099be57f5afec","type":"library","author":"Marat Dulin ","name":"html-entities","version":"1.4.0","description":"Faster HTML entities encode/decode library.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:html-entities:html-entities:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/html-entities@1.4.0","externalReferences":[{"url":"https://github.com/mdevils/node-html-entities.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:html-entities:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html_entities:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html_entities:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mdevils:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mdevils:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/html-entities/package.json"}]},{"bom-ref":"pkg:npm/htmlparser2@3.3.0?package-id=00e058af6a435f1c","type":"library","author":"Felix Boehm , Chris Winberry ","name":"htmlparser2","version":"3.3.0","description":"Fast & forgiving HTML/XML/RSS parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:htmlparser2:htmlparser2:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/htmlparser2@3.3.0","externalReferences":[{"url":"git://github.com/fb55/htmlparser2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:htmlparser2:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@3.8.1?package-id=bd9e0a0c5346494e","type":"library","author":"Kornel Lesiński (https://kornel.ski/)","name":"http-cache-semantics","version":"3.8.1","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:3.8.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@3.8.1","externalReferences":[{"url":"https://github.com/pornel/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@4.2.0?package-id=d0af3fbe4ae8a36c","type":"library","author":"Kornel Lesiński (https://kornel.ski/)","name":"http-cache-semantics","version":"4.2.0","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@4.2.0","externalReferences":[{"url":"git+https://github.com/kornelski/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@4.2.0?package-id=2a408450d3d46b54","type":"library","author":"Kornel Lesiński (https://kornel.ski/)","name":"http-cache-semantics","version":"4.2.0","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@4.2.0","externalReferences":[{"url":"git+https://github.com/kornelski/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-errors@1.6.3?package-id=9628d381c9f92c79","type":"library","author":"Jonathan Ong (http://jongleberry.com), Alan Plum , Douglas Christopher Wilson ","name":"http-errors","version":"1.6.3","description":"Create HTTP error objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-errors:http-errors:1.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/http-errors@1.6.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-errors:http_errors:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http-errors:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http_errors:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-errors:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_errors:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json"}]},{"bom-ref":"pkg:npm/http-errors@2.0.0?package-id=4c90f50cc7f3b883","type":"library","author":"Jonathan Ong (http://jongleberry.com), Alan Plum , Douglas Christopher Wilson ","name":"http-errors","version":"2.0.0","description":"Create HTTP error objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-errors:http-errors:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/http-errors@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-errors:http_errors:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http-errors:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http_errors:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-errors:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_errors:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-errors/package.json"}]},{"bom-ref":"pkg:npm/http-proxy-agent@4.0.1?package-id=33dca7266e02ca13","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"http-proxy-agent","version":"4.0.1","description":"An HTTP(s) proxy `http.Agent` implementation for HTTP","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-proxy-agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/http-proxy-agent@4.0.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-http-proxy-agent.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy-agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/http-proxy-agent@5.0.0?package-id=d623d653aaf02706","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"http-proxy-agent","version":"5.0.0","description":"An HTTP(s) proxy `http.Agent` implementation for HTTP","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/http-proxy-agent@5.0.0","externalReferences":[{"url":"git://github.com/TooTallNate/node-http-proxy-agent.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy-agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http-proxy-agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-proxy-agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_proxy_agent:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/http-proxy-agent@7.0.2?package-id=e6283736c57b339f","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"http-proxy-agent","version":"7.0.2","description":"An HTTP(s) proxy `http.Agent` implementation for HTTP","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/http-proxy-agent@7.0.2","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/node_modules/http-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/https-proxy-agent@5.0.1?package-id=d80b3b05f5964955","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"https-proxy-agent","version":"5.0.1","description":"An HTTP(s) proxy `http.Agent` implementation for HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:5.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/https-proxy-agent@5.0.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-https-proxy-agent.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/https-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/https-proxy-agent@7.0.6?package-id=c3998c7ef125b66f","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"https-proxy-agent","version":"7.0.6","description":"An HTTP(s) proxy `http.Agent` implementation for HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/https-proxy-agent@7.0.6","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/humanize-ms@1.2.1?package-id=47a025b2f115b17c","type":"library","author":"dead-horse (http://deadhorse.me)","name":"humanize-ms","version":"1.2.1","description":"transform humanize time to ms","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/humanize-ms@1.2.1","externalReferences":[{"url":"https://github.com/node-modules/humanize-ms","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/humanize-ms/package.json"}]},{"bom-ref":"pkg:npm/i18n@0.11.1?package-id=ff8810fe24462f72","type":"library","author":"Marcus Spiegel ","name":"i18n","version":"0.11.1","description":"lightweight translation module with dynamic json storage","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:i18n_project:i18n:0.11.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/i18n@0.11.1","externalReferences":[{"url":"http://github.com/mashpie/i18n-node.git","type":"distribution"},{"url":"http://github.com/mashpie/i18n-node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/i18n/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.4.24?package-id=ac38ce6689a29c62","type":"library","author":"Alexander Shtuchkin ","name":"iconv-lite","version":"0.4.24","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.4.24","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.6.3?package-id=e1003a119853fa51","type":"library","author":"Alexander Shtuchkin ","name":"iconv-lite","version":"0.6.3","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.6.3","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.6.3?package-id=8e503ff726974706","type":"library","author":"Alexander Shtuchkin ","name":"iconv-lite","version":"0.6.3","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.6.3","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/ieee754@1.2.1?package-id=6310f32d7b232558","type":"library","author":"Feross Aboukhadijeh (https://feross.org), Romain Beauxis ","name":"ieee754","version":"1.2.1","description":"Read/write IEEE754 floating point numbers from/to a Buffer or array-like object","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ieee754@1.2.1","externalReferences":[{"url":"git://github.com/feross/ieee754.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:ieee754:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ieee754/package.json"}]},{"bom-ref":"pkg:npm/ignore-walk@3.0.4?package-id=2e4b859fb5db53f0","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"ignore-walk","version":"3.0.4","description":"Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ignore-walk:ignore-walk:3.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/ignore-walk@3.0.4","externalReferences":[{"url":"git+https://github.com/isaacs/ignore-walk.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore-walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore_walk:ignore-walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore_walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore:ignore-walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ignore-walk/package.json"}]},{"bom-ref":"pkg:npm/iltorb@2.4.5?package-id=56389acc66e9bbcf","type":"library","author":"Nicolas Stepien , Hung Tran ","name":"iltorb","version":"2.4.5","description":"Brotli compression/decompression with native bindings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nstepien:iltorb:2.4.5:*:*:*:*:*:*:*","purl":"pkg:npm/iltorb@2.4.5","externalReferences":[{"url":"git://github.com/nstepien/iltorb.git","type":"distribution"},{"url":"https://github.com/nstepien/iltorb","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iltorb:iltorb:2.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/iltorb/package.json"}]},{"bom-ref":"pkg:npm/imurmurhash@0.1.4?package-id=09572f0a0bc74ba7","type":"library","author":"Jens Taylor (https://github.com/homebrewing)","name":"imurmurhash","version":"0.1.4","description":"An incremental implementation of MurmurHash3","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/imurmurhash@0.1.4","externalReferences":[{"url":"https://github.com/jensyt/imurmurhash-js","type":"distribution"},{"url":"https://github.com/jensyt/imurmurhash-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/imurmurhash/package.json"}]},{"bom-ref":"pkg:npm/indent-string@4.0.0?package-id=affc82d01eae8fae","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"indent-string","version":"4.0.0","description":"Indent each line in a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/indent-string@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent-string:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent_string:indent-string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent_string:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent:indent-string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/indent-string/package.json"}]},{"bom-ref":"pkg:npm/infer-owner@1.0.4?package-id=0ba5cda90a6ec74a","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"infer-owner","version":"1.0.4","description":"Infer the owner of a path based on the owner of its nearest existing parent","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/infer-owner@1.0.4","externalReferences":[{"url":"https://github.com/npm/infer-owner","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer-owner:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer_owner:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer_owner:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/infer-owner/package.json"}]},{"bom-ref":"pkg:npm/inflection@1.13.4?package-id=6e2671dca7da065a","type":"library","author":"dreamerslab , Ryan Schuft , Ben Lin , Lance Pollard , Dane O'Connor , David Miró , brandondewitt, luk3thomas, Marcel Klehr, Raymond Feng, Kane Cohen , Gianni Chiappetta , Eric Brody, overlookmotel, Patrick Mowrer, Greger Olsson, Jason Crawford , Ray Myers , Dillon Shook , Patrick Kuen ","name":"inflection","version":"1.13.4","description":"A port of inflection-js to node.js module","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dreamerslab:inflection:1.13.4:*:*:*:*:*:*:*","purl":"pkg:npm/inflection@1.13.4","externalReferences":[{"url":"https://github.com/dreamerslab/node.inflection.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inflection:inflection:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inflection/package.json"}]},{"bom-ref":"pkg:npm/inflight@1.0.6?package-id=ddef02a8605a5e19","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"inflight","version":"1.0.6","description":"Add callbacks to requests in flight to avoid async duplication","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/inflight@1.0.6","externalReferences":[{"url":"https://github.com/npm/inflight.git","type":"distribution"},{"url":"https://github.com/isaacs/inflight","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inflight/package.json"}]},{"bom-ref":"pkg:npm/inherits@2.0.3?package-id=54c7de61005913d4","type":"library","name":"inherits","version":"2.0.3","description":"Browser-friendly inheritance fully compatible with standard node.js inherits()","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/inherits@2.0.3","externalReferences":[{"url":"git://github.com/isaacs/inherits","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:inherits:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/inherits/package.json"}]},{"bom-ref":"pkg:npm/inherits@2.0.4?package-id=4446fbeb35a2fa36","type":"library","name":"inherits","version":"2.0.4","description":"Browser-friendly inheritance fully compatible with standard node.js inherits()","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/inherits@2.0.4","externalReferences":[{"url":"git://github.com/isaacs/inherits","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inherits/package.json"}]},{"bom-ref":"pkg:npm/ini@1.3.8?package-id=6ddd6811138876ea","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"ini","version":"1.3.8","description":"An ini encoder/decoder for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/ini@1.3.8","externalReferences":[{"url":"git://github.com/isaacs/ini.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/node_modules/ini/package.json"}]},{"bom-ref":"pkg:npm/ini@1.3.8?package-id=4df1b4c1b6e1b526","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"ini","version":"1.3.8","description":"An ini encoder/decoder for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/ini@1.3.8","externalReferences":[{"url":"git://github.com/isaacs/ini.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/node_modules/ini/package.json"}]},{"bom-ref":"pkg:npm/internal-slot@1.1.0?package-id=2cb332855f0978e4","type":"library","author":"Jordan Harband ","name":"internal-slot","version":"1.1.0","description":"ES spec-like internal slots","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:internal-slot:internal-slot:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/internal-slot@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/internal-slot.git","type":"distribution"},{"url":"https://github.com/ljharb/internal-slot#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal-slot:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal_slot:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal_slot:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/internal-slot/package.json"}]},{"bom-ref":"pkg:npm/interpret@1.1.0?package-id=ef0ffd4514fbc5b0","type":"library","author":"Tyler Kellen (http://goingslowly.com/)","name":"interpret","version":"1.1.0","description":"A dictionary of file extensions and associated module loaders.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:interpret:interpret:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/interpret@1.1.0","externalReferences":[{"url":"git://github.com/tkellen/node-interpret.git","type":"distribution"},{"url":"https://github.com/tkellen/node-interpret","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tkellen:interpret:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/interpret/package.json"}]},{"bom-ref":"pkg:npm/into-stream@3.1.0?package-id=fc003e7e8cee4468","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"into-stream","version":"3.1.0","description":"Convert a buffer/string/array/object/iterable/promise into a stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:into-stream:into-stream:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/into-stream@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:into-stream:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into_stream:into-stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into_stream:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into:into-stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/into-stream/package.json"}]},{"bom-ref":"pkg:npm/invalid_main?package-id=2320fb69c45985de","type":"library","name":"invalid_main","version":"UNKNOWN","cpe":"cpe:2.3:a:invalid-main:invalid-main:*:*:*:*:*:*:*:*","purl":"pkg:npm/invalid_main","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid-main:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid_main:invalid-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid_main:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid:invalid-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json"}]},{"bom-ref":"pkg:npm/invariant@2.2.4?package-id=2b89e9158c0c13bf","type":"library","author":"Andres Suarez ","name":"invariant","version":"2.2.4","description":"invariant","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*","purl":"pkg:npm/invariant@2.2.4","externalReferences":[{"url":"https://github.com/zertosh/invariant","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:invariant:2.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/invariant/package.json"}]},{"bom-ref":"pkg:npm/ip@2.0.1?package-id=80c437d1f8f690a8","type":"library","author":"Fedor Indutny ","name":"ip","version":"2.0.1","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fedorindutny:ip:2.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ip@2.0.1","externalReferences":[{"url":"http://github.com/indutny/node-ip.git","type":"distribution"},{"url":"https://github.com/indutny/node-ip","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ip/package.json"}]},{"bom-ref":"pkg:npm/ip-address@10.0.1?package-id=364790d08681a054","type":"library","author":"Beau Gunderson (https://beaugunderson.com/)","name":"ip-address","version":"10.0.1","description":"A library for parsing IPv4 and IPv6 IP addresses in node and the browser.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beaugunderson:ip-address:10.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/ip-address@10.0.1","externalReferences":[{"url":"git://github.com/beaugunderson/ip-address.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beaugunderson:ip_address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip-address:ip-address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip-address:ip_address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip_address:ip-address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip_address:ip_address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip:ip-address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip:ip_address:10.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ip-address/package.json"}]},{"bom-ref":"pkg:npm/ip6@0.2.11?package-id=eda681233b472873","type":"library","author":"Qian Chen","name":"ip6","version":"0.2.11","description":"IPv6 address helper utilities.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:elgs:ip6:0.2.11:*:*:*:*:*:*:*","purl":"pkg:npm/ip6@0.2.11","externalReferences":[{"url":"git+https://github.com/elgs/ip6.git","type":"distribution"},{"url":"https://github.com/elgs/ip6#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip6:ip6:0.2.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ip6/package.json"}]},{"bom-ref":"pkg:npm/ipaddr.js@1.9.1?package-id=e0e0b515b51cb94b","type":"library","author":"whitequark ","name":"ipaddr.js","version":"1.9.1","description":"A library for manipulating IPv4 and IPv6 addresses in JavaScript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/ipaddr.js@1.9.1","externalReferences":[{"url":"git://github.com/whitequark/ipaddr.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ipaddr.js/package.json"}]},{"bom-ref":"pkg:npm/is-absolute@1.0.0?package-id=0512f66f9555653e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Elan Shanker (https://github.com/es128), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io), ","name":"is-absolute","version":"1.0.0","description":"Returns true if a file path is absolute. Does not rely on the path module and can be used as a polyfill for node.js native `path.isAbolute`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-absolute:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-absolute@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-absolute","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-absolute/package.json"}]},{"bom-ref":"pkg:npm/is-accessor-descriptor@1.0.1?package-id=261b6517406b97d0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"is-accessor-descriptor","version":"1.0.1","description":"Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-accessor-descriptor:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-accessor-descriptor@1.0.1","externalReferences":[{"url":"git+https://github.com/inspect-js/is-accessor-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-accessor-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-accessor-descriptor:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_accessor_descriptor:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_accessor_descriptor:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-accessor:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-accessor:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_accessor:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_accessor:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-accessor-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_accessor_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-accessor-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-arguments@1.2.0?package-id=c249422b6e0036a2","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"is-arguments","version":"1.2.0","description":"Is this an arguments object? It's a harder question than you think.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-arguments:is-arguments:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-arguments@1.2.0","externalReferences":[{"url":"git://github.com/inspect-js/is-arguments.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-arguments","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arguments:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-arguments/package.json"}]},{"bom-ref":"pkg:npm/is-array-buffer@3.0.5?package-id=d9958b6373169d4d","type":"library","author":"Jordan Harband ","name":"is-array-buffer","version":"3.0.5","description":"Is this value a JS ArrayBuffer?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-array-buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/is-array-buffer@3.0.5","externalReferences":[{"url":"git+https://github.com/inspect-js/is-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array-buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array_buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array_buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/is-arrayish@0.3.2?package-id=c3d142b57853ee86","type":"library","author":"Qix (http://github.com/qix-)","name":"is-arrayish","version":"0.3.2","description":"Determines if an object can be used as an array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-arrayish:is-arrayish:0.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-arrayish@0.3.2","externalReferences":[{"url":"https://github.com/qix-/node-is-arrayish.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-arrayish:is_arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arrayish:is-arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arrayish:is_arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:qix-:is-arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:qix-:is_arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_arrayish:0.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-swizzle/node_modules/is-arrayish/package.json"}]},{"bom-ref":"pkg:npm/is-bigint@1.1.0?package-id=70e6035521bca2e6","type":"library","author":"Jordan Harband ","name":"is-bigint","version":"1.1.0","description":"Is this value an ES BigInt?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-bigint:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-bigint@1.1.0","externalReferences":[{"url":"git+https://github.com/inspect-js/is-bigint.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-bigint#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-bigint/package.json"}]},{"bom-ref":"pkg:npm/is-binary-path@2.1.0?package-id=e5ffa907a4ff10b5","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-binary-path","version":"2.1.0","description":"Check if a file path is a binary file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-binary-path:is-binary-path:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-binary-path@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-binary-path:is_binary_path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_binary_path:is-binary-path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_binary_path:is_binary_path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-binary:is-binary-path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-binary:is_binary_path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_binary:is-binary-path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_binary:is_binary_path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-binary-path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_binary_path:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-binary-path/package.json"}]},{"bom-ref":"pkg:npm/is-boolean-object@1.2.2?package-id=4f4be33a0614ffc4","type":"library","author":"Jordan Harband ","name":"is-boolean-object","version":"1.2.2","description":"Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-boolean-object:is-boolean-object:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-boolean-object@1.2.2","externalReferences":[{"url":"git://github.com/inspect-js/is-boolean-object.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean-object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean_object:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean_object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-boolean-object/package.json"}]},{"bom-ref":"pkg:npm/is-buffer@1.1.6?package-id=29924bb442285f92","type":"library","author":"Feross Aboukhadijeh (http://feross.org/)","name":"is-buffer","version":"1.1.6","description":"Determine if an object is a Buffer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-buffer:is-buffer:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/is-buffer@1.1.6","externalReferences":[{"url":"git://github.com/feross/is-buffer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-buffer:is_buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_buffer:is-buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_buffer:is_buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:is-buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:is_buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_buffer:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-buffer/package.json"}]},{"bom-ref":"pkg:npm/is-callable@1.2.7?package-id=e47af72ad358fc5c","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"is-callable","version":"1.2.7","description":"Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-callable@1.2.7","externalReferences":[{"url":"git://github.com/inspect-js/is-callable.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-callable:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_callable:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_callable:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-callable/package.json"}]},{"bom-ref":"pkg:npm/is-core-module@2.16.1?package-id=d3ad38a0c3e70d2b","type":"library","author":"Jordan Harband ","name":"is-core-module","version":"2.16.1","description":"Is this specifier a node.js core module?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-core-module:is-core-module:2.16.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-core-module@2.16.1","externalReferences":[{"url":"git+https://github.com/inspect-js/is-core-module.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-core-module","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core-module:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core_module:is-core-module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core_module:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-core-module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core:is-core-module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core:is-core-module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-core-module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_core_module:2.16.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-core-module/package.json"}]},{"bom-ref":"pkg:npm/is-data-descriptor@1.0.1?package-id=0f670ff9028a390b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jordan Harband (https://github.com/ljharb), Jon Schlinkert (https://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"is-data-descriptor","version":"1.0.1","description":"Returns true if a value has the characteristics of a valid JavaScript data descriptor.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-data-descriptor:is-data-descriptor:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-data-descriptor@1.0.1","externalReferences":[{"url":"git+https://github.com/inspect-js/is-data-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-data-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-data-descriptor:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_data_descriptor:is-data-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_data_descriptor:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-data-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-data:is-data-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-data:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_data:is-data-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_data:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-data-descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_data_descriptor:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-data-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-date-object@1.1.0?package-id=4d742be2d09ada71","type":"library","author":"Jordan Harband","name":"is-date-object","version":"1.1.0","description":"Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-date-object:is-date-object:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-date-object@1.1.0","externalReferences":[{"url":"git://github.com/inspect-js/is-date-object.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date-object:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date_object:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date_object:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-date-object/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@0.1.7?package-id=3db838bc5746b1d3","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"0.1.7","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@0.1.7","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/class-utils/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@0.1.7?package-id=376a23b75961e940","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"0.1.7","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@0.1.7","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@0.1.7?package-id=72cb87a4702f42f3","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"0.1.7","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@0.1.7","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-copy/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@0.1.7?package-id=6a680ba7d403a9a1","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"0.1.7","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@0.1.7","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@0.1.7?package-id=f9100cc646a7f958","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"0.1.7","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@0.1.7","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/static-extend/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-descriptor@1.0.3?package-id=6d00f3b19e2d6a29","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","name":"is-descriptor","version":"1.0.3","description":"Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-descriptor:is-descriptor:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-descriptor@1.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/is-descriptor.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-descriptor","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-descriptor:is_descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is-descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_descriptor:is_descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_descriptor:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-descriptor/package.json"}]},{"bom-ref":"pkg:npm/is-expression@4.0.0?package-id=025b1622a77b0169","type":"library","author":"Timothy Gu ","name":"is-expression","version":"4.0.0","description":"Check if a string is a valid JavaScript expression","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-expression:is-expression:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-expression@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/is-expression.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-expression:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_expression:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_expression:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-expression/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=187013333c664bda","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/braces/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=62aed0870d13b84e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=e7204e937fa0b58f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extglob/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=cbc38034437ab88d","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fill-range/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=13c53e0b42b1aa5d","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-value/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=66d8eaaa2c9043ec","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@0.1.1?package-id=4e2cfb872327e1d7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"0.1.1","description":"Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/union-value/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extendable@1.0.1?package-id=5e6eb51210dfeedc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extendable","version":"1.0.1","description":"Returns true if a value is a plain object, array or function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-extendable:is-extendable:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extendable@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extendable","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extendable:is_extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is-extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extendable:is_extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extendable:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-extendable/package.json"}]},{"bom-ref":"pkg:npm/is-extglob@2.1.1?package-id=7f72b5b8f89d7183","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extglob","version":"2.1.1","description":"Returns true if a string has an extglob.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-extglob:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extglob@2.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extglob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-extglob/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@1.0.0?package-id=68fe94da8f6466e7","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-fullwidth-code-point","version":"1.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@2.0.0?package-id=fac6f12e8720a1b3","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-fullwidth-code-point","version":"2.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@3.0.0?package-id=ceb97ce06d62ac60","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-fullwidth-code-point","version":"3.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-generator-function@1.1.0?package-id=1ff211b719fc3c63","type":"library","author":"Jordan Harband ","name":"is-generator-function","version":"1.1.0","description":"Determine if a function is a native generator function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-generator-function:is-generator-function:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-generator-function@1.1.0","externalReferences":[{"url":"git://github.com/inspect-js/is-generator-function.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-generator-function:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_generator_function:is-generator-function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_generator_function:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-generator:is-generator-function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-generator:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_generator:is-generator-function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_generator:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-generator-function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-generator-function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_generator_function:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-generator-function/package.json"}]},{"bom-ref":"pkg:npm/is-glob@3.1.0?package-id=77459d7d87565e33","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Daniel Perez (http://tuvistavie.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"is-glob","version":"3.1.0","description":"Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-glob:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-glob@3.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-glob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is-glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is_glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is-glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is_glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_glob:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/findup-sync/node_modules/is-glob/package.json"}]},{"bom-ref":"pkg:npm/is-glob@4.0.3?package-id=c962a2f9025eb914","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Daniel Perez (https://tuvistavie.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"is-glob","version":"4.0.3","description":"Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:micromatch:is-glob:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-glob@4.0.3","externalReferences":[{"url":"https://github.com/micromatch/is-glob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-glob/package.json"}]},{"bom-ref":"pkg:npm/is-lambda@1.0.1?package-id=d9cbeeda741b13b2","type":"library","author":"Thomas Watson Steen (https://twitter.com/wa7son)","name":"is-lambda","version":"1.0.1","description":"Detect if your code is running on an AWS Lambda server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-lambda@1.0.1","externalReferences":[{"url":"https://github.com/watson/is-lambda.git","type":"distribution"},{"url":"https://github.com/watson/is-lambda","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_lambda:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:watson:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:watson:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-lambda/package.json"}]},{"bom-ref":"pkg:npm/is-map@2.0.3?package-id=7aeb57cf02726c97","type":"library","author":"Jordan Harband ","name":"is-map","version":"2.0.3","description":"Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-map:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-map@2.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/is-map.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-map#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-map:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-map:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_map:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_map:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-map/package.json"}]},{"bom-ref":"pkg:npm/is-natural-number@4.0.1?package-id=5f3943fd8b1b46a9","type":"library","author":"Shinnosuke Watanabe (https://github.com/shinnn)","name":"is-natural-number","version":"4.0.1","description":"Check if a value is a natural number","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-natural-number@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural-number:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural_number:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural_number:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-natural-number/package.json"}]},{"bom-ref":"pkg:npm/is-number@3.0.0?package-id=24ba5c940fc7109a","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Charlike Mike Reagent (http://www.tunnckocore.tk), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"is-number","version":"3.0.0","description":"Returns true if the value is a number. comprehensive tests.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-number:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@3.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-number","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number/package.json"}]},{"bom-ref":"pkg:npm/is-number@7.0.0?package-id=8761336469cb5684","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)","name":"is-number","version":"7.0.0","description":"Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@7.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-number","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/is-number/package.json"}]},{"bom-ref":"pkg:npm/is-number@7.0.0?package-id=7662d75be15afc8b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)","name":"is-number","version":"7.0.0","description":"Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@7.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-number","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/is-number/package.json"}]},{"bom-ref":"pkg:npm/is-number@7.0.0?package-id=78352b906391841a","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)","name":"is-number","version":"7.0.0","description":"Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@7.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-number","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/is-number/package.json"}]},{"bom-ref":"pkg:npm/is-number-like@1.0.8?package-id=045ed23701e3dcd7","type":"library","author":"Vigour.io , Jim De Beer , Shawn Inder ","name":"is-number-like","version":"1.0.8","description":"Checks whether provided parameter looks like a number","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:is-number-like:is-number-like:1.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/is-number-like@1.0.8","externalReferences":[{"url":"git+https://github.com/vigour-io/is-number-like.git","type":"distribution"},{"url":"https://github.com/vigour-io/is-number-like#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number-like:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_like:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_like:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vigour-io:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vigour-io:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number-like/package.json"}]},{"bom-ref":"pkg:npm/is-number-object@1.1.1?package-id=e69c6205dff000a1","type":"library","author":"Jordan Harband ","name":"is-number-object","version":"1.1.1","description":"Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-number-object:is-number-object:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-number-object@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-number-object.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-number-object#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number-object:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_object:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_object:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number-object/package.json"}]},{"bom-ref":"pkg:npm/is-object@1.0.2?package-id=080098421fa0b116","type":"library","author":"Raynos , Raynos, Jordan Harband (https://github.com/ljharb)","name":"is-object","version":"1.0.2","description":"Checks whether a value is an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-object:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-object@1.0.2","externalReferences":[{"url":"git://github.com/inspect-js/is-object.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-object","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-object:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-object:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_object:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_object:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-object/package.json"}]},{"bom-ref":"pkg:npm/is-plain-obj@1.1.0?package-id=85335907c023e35c","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-plain-obj","version":"1.1.0","description":"Check if a value is a plain object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-plain-obj@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain-obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-plain-obj/package.json"}]},{"bom-ref":"pkg:npm/is-plain-object@2.0.4?package-id=0cdcb3b46bab4f76","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Osman Nuri Okumuş (http://onokumus.com), Steven Vachon (https://svachon.com), ","name":"is-plain-object","version":"2.0.4","description":"Returns true if an object was created by the `Object` constructor.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-plain-object:is-plain-object:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-plain-object@2.0.4","externalReferences":[{"url":"https://github.com/jonschlinkert/is-plain-object","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain-object:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_object:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_object:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-plain-object/package.json"}]},{"bom-ref":"pkg:npm/is-promise@2.2.2?package-id=06d9e6f32c28a5f8","type":"library","author":"ForbesLindesay","name":"is-promise","version":"2.2.2","description":"Test whether an object looks like a promises-a+ promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-promise:is-promise:2.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-promise@2.2.2","externalReferences":[{"url":"https://github.com/then/is-promise.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-promise:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_promise:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_promise:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-promise/package.json"}]},{"bom-ref":"pkg:npm/is-regex@1.2.1?package-id=eb42217c762c43fc","type":"library","author":"Jordan Harband ","name":"is-regex","version":"1.2.1","description":"Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-regex:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-regex@1.2.1","externalReferences":[{"url":"git://github.com/inspect-js/is-regex.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-regex:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-regex:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_regex:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_regex:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-regex/package.json"}]},{"bom-ref":"pkg:npm/is-relative@1.0.0?package-id=2efd093414ff4eab","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io)","name":"is-relative","version":"1.0.0","description":"Returns `true` if the path appears to be relative.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-relative:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-relative@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-relative","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-relative:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-relative:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_relative:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_relative:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-relative/package.json"}]},{"bom-ref":"pkg:npm/is-retry-allowed@1.2.0?package-id=4be8fdb80ba2df5a","type":"library","author":"Vsevolod Strukchinsky (github.com/floatdrop)","name":"is-retry-allowed","version":"1.2.0","description":"Is retry allowed for Error?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-retry-allowed@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry-allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry_allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry_allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-retry-allowed/package.json"}]},{"bom-ref":"pkg:npm/is-set@2.0.3?package-id=3636986997116379","type":"library","author":"Jordan Harband ","name":"is-set","version":"2.0.3","description":"Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-set:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-set@2.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/is-set.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-set#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-set:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-set:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_set:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_set:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-set/package.json"}]},{"bom-ref":"pkg:npm/is-shared-array-buffer@1.0.4?package-id=be5dd13ccee97384","type":"library","author":"Jordan Harband (http://ljharb.codes)","name":"is-shared-array-buffer","version":"1.0.4","description":"Is this value a JS SharedArrayBuffer?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-shared-array-buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-shared-array-buffer@1.0.4","externalReferences":[{"url":"git+https://github.com/inspect-js/is-shared-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-shared-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array-buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array_buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array_buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-shared-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/is-stream@1.1.0?package-id=ac3f97806ad63d60","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"is-stream","version":"1.1.0","description":"Check if something is a Node.js stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-stream@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-stream:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is-stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-stream/package.json"}]},{"bom-ref":"pkg:npm/is-stream@2.0.1?package-id=5b3d2863ea25c0ee","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"is-stream","version":"2.0.1","description":"Check if something is a Node.js stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-stream@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-stream:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is-stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/is-stream/package.json"}]},{"bom-ref":"pkg:npm/is-string@1.1.1?package-id=f7b87c51d707a2b4","type":"library","author":"Jordan Harband ","name":"is-string","version":"1.1.1","description":"Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-string:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-string@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-string.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-string:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-string:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_string:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_string:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-string/package.json"}]},{"bom-ref":"pkg:npm/is-symbol@1.1.1?package-id=865696304cc6c89b","type":"library","author":"Jordan Harband ","name":"is-symbol","version":"1.1.1","description":"Determine if a value is an ES6 Symbol or not.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-symbol:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-symbol@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-symbol.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-symbol/package.json"}]},{"bom-ref":"pkg:npm/is-typed-array@1.1.15?package-id=241515ad73bdd1d4","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"is-typed-array","version":"1.1.15","description":"Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-typed-array:is-typed-array:1.1.15:*:*:*:*:*:*:*","purl":"pkg:npm/is-typed-array@1.1.15","externalReferences":[{"url":"git://github.com/inspect-js/is-typed-array.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed-array:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed_array:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed_array:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-typed-array/package.json"}]},{"bom-ref":"pkg:npm/is-unc-path@1.0.0?package-id=ce172a3a7c21705f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-unc-path","version":"1.0.0","description":"Returns true if a filepath is a windows UNC file path.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-unc-path:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-unc-path@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-unc-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc-path:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc-path:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc_path:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc_path:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-unc-path/package.json"}]},{"bom-ref":"pkg:npm/is-weakmap@2.0.2?package-id=e45ebd1d0caec949","type":"library","author":"Jordan Harband ","name":"is-weakmap","version":"2.0.2","description":"Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-weakmap:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-weakmap@2.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/is-weakmap.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-weakmap#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-weakmap/package.json"}]},{"bom-ref":"pkg:npm/is-weakset@2.0.4?package-id=5c11a4ead031e5d5","type":"library","author":"Jordan Harband ","name":"is-weakset","version":"2.0.4","description":"Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-weakset:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-weakset@2.0.4","externalReferences":[{"url":"git+https://github.com/inspect-js/is-weakset.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-weakset#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-weakset/package.json"}]},{"bom-ref":"pkg:npm/is-windows@1.0.2?package-id=c97557a2dcbdd3a0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Simen Bekkhus (https://github.com/SimenB), 刘祺 (gucong.co.cc)","name":"is-windows","version":"1.0.2","description":"Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-windows:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-windows@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/is-windows","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-windows:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_windows:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_windows:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-windows/package.json"}]},{"bom-ref":"pkg:npm/isarray@0.0.1?package-id=bc50e5d6cbc7eb36","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"isarray","version":"0.0.1","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@0.0.1","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isarray@1.0.0?package-id=034deefb6c4b8769","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"isarray","version":"1.0.0","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@1.0.0","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isarray@1.0.0?package-id=46e3866397b34d42","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"isarray","version":"1.0.0","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@1.0.0","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unset-value/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isarray@2.0.5?package-id=ed8d984bcbb93ff5","type":"library","author":"Julian Gruber (http://juliangruber.com)","name":"isarray","version":"2.0.5","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:2.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@2.0.5","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isexe@2.0.0?package-id=f016a5f09c60797b","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"isexe","version":"2.0.0","description":"Minimal module to check if a file is executable.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isexe@2.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/isexe.git","type":"distribution"},{"url":"https://github.com/isaacs/isexe#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isexe/package.json"}]},{"bom-ref":"pkg:npm/isexe@3.1.1?package-id=be2e8582e1535ef2","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"isexe","version":"3.1.1","description":"Minimal module to check if a file is executable.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:isexe:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/isexe@3.1.1","externalReferences":[{"url":"https://github.com/isaacs/isexe","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isexe:isexe:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json"}]},{"bom-ref":"pkg:npm/isobject@2.1.0?package-id=402c02185fb0f68f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"isobject","version":"2.1.0","description":"Returns true if the value is an object and not an array or null.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:isobject:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/isobject@2.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/isobject","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isobject:isobject:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json"}]},{"bom-ref":"pkg:npm/isobject@3.0.1?package-id=71363469c72f98ea","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Magnús Dæhlen (https://github.com/magnudae), Tom MacWright (https://macwright.org)","name":"isobject","version":"3.0.1","description":"Returns true if the value is an object and not an array or null.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:isobject:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/isobject@3.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/isobject","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isobject:isobject:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isobject/package.json"}]},{"bom-ref":"pkg:npm/isomorphic-ws@5.0.0?package-id=853440d43ba086ed","type":"library","author":"@heineiuo","name":"isomorphic-ws","version":"5.0.0","description":"Isomorphic implementation of WebSocket","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isomorphic-ws:isomorphic-ws:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isomorphic-ws@5.0.0","externalReferences":[{"url":"git+https://github.com/heineiuo/isomorphic-ws.git","type":"distribution"},{"url":"https://github.com/heineiuo/isomorphic-ws#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isomorphic-ws:isomorphic_ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isomorphic_ws:isomorphic-ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isomorphic_ws:isomorphic_ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isomorphic:isomorphic-ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isomorphic:isomorphic_ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:heineiuo:isomorphic-ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:heineiuo:isomorphic_ws:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isomorphic-ws/package.json"}]},{"bom-ref":"pkg:npm/isurl@1.0.0?package-id=28254e996fa56b2a","type":"library","author":"Steven Vachon (https://www.svachon.com/)","name":"isurl","version":"1.0.0","description":"Checks whether a value is a WHATWG URL.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isurl@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isurl/package.json"}]},{"bom-ref":"pkg:npm/jackspeak@3.4.3?package-id=e96a52decca51432","type":"library","author":"Isaac Z. Schlueter ","name":"jackspeak","version":"3.4.3","description":"A very strict and proper argument parser.","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/jackspeak@3.4.3","externalReferences":[{"url":"git+https://github.com/isaacs/jackspeak.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jackspeak/package.json"}]},{"bom-ref":"pkg:npm/js-stringify@1.0.2?package-id=58ecb50896023cef","type":"library","author":"ForbesLindesay","name":"js-stringify","version":"1.0.2","description":"Stringify an object so it can be safely inlined in JavaScript code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:js-stringify:js-stringify:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/js-stringify@1.0.2","externalReferences":[{"url":"https://github.com/jadejs/js-stringify.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:js-stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_stringify:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-stringify/package.json"}]},{"bom-ref":"pkg:npm/js-tokens@4.0.0?package-id=3fc29f45ef8c9e41","type":"library","author":"Simon Lydell","name":"js-tokens","version":"4.0.0","description":"A regex that tokenizes JavaScript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/js-tokens@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-tokens/package.json"}]},{"bom-ref":"pkg:npm/js-yaml@3.14.1?package-id=2ec6fdae7536262a","type":"library","author":"Vladimir Zapparov , Aleksey V Zapparov (http://www.ixti.net/), Vitaly Puzrin (https://github.com/puzrin), Martin Grenfell (http://got-ravings.blogspot.com)","name":"js-yaml","version":"3.14.1","description":"YAML 1.2 parser and serializer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodeca:js-yaml:3.14.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/js-yaml@3.14.1","externalReferences":[{"url":"https://github.com/nodeca/js-yaml","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-yaml/package.json"}]},{"bom-ref":"pkg:npm/json-buffer@3.0.0?package-id=298ecde0ab662ada","type":"library","author":"Dominic Tarr (http://dominictarr.com)","name":"json-buffer","version":"3.0.0","description":"JSON parse & stringify that supports binary via bops & base64","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dominictarr:json-buffer:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/json-buffer@3.0.0","externalReferences":[{"url":"git://github.com/dominictarr/json-buffer.git","type":"distribution"},{"url":"https://github.com/dominictarr/json-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dominictarr:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json-buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json-buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json"}]},{"bom-ref":"pkg:npm/json5@2.2.3?package-id=ff0081c9bee3a9f6","type":"library","author":"Aseem Kishore , Max Nanasy , Andrew Eisenberg , Jordan Tucker ","name":"json5","version":"2.2.3","description":"JSON for Humans","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/json5@2.2.3","externalReferences":[{"url":"git+https://github.com/json5/json5.git","type":"distribution"},{"url":"http://json5.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/json5/package.json"}]},{"bom-ref":"pkg:npm/jsonfile@6.2.0?package-id=2d1dca397bb1c8bb","type":"library","author":"JP Richardson ","name":"jsonfile","version":"6.2.0","description":"Easily read/write JSON files.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jsonfile:jsonfile:6.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/jsonfile@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jsonfile/package.json"}]},{"bom-ref":"pkg:npm/jsonwebtoken@0.1.0?package-id=c29669d438fb9e38","type":"library","author":"auth0","name":"jsonwebtoken","version":"0.1.0","description":"JSON Web Token implementation (symmetric and asymmetric)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:jsonwebtoken:0.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/jsonwebtoken@0.1.0","externalReferences":[{"url":"https://github.com/auth0/node-jsonwebtoken","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json"}]},{"bom-ref":"pkg:npm/jsonwebtoken@0.4.0?package-id=1e23bc54c16fbe6d","type":"library","author":"auth0","name":"jsonwebtoken","version":"0.4.0","description":"JSON Web Token implementation (symmetric and asymmetric)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:jsonwebtoken:0.4.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/jsonwebtoken@0.4.0","externalReferences":[{"url":"https://github.com/auth0/node-jsonwebtoken","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jsonwebtoken/package.json"}]},{"bom-ref":"pkg:npm/jssha@3.3.1?package-id=7875bde5cf850352","type":"library","author":"Brian Turek ","name":"jssha","version":"3.3.1","description":"jsSHA implements the complete Secure Hash Standard (SHA) family (SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, SHAKE128/256, cSHAKE128/256, and KMAC128/256) with HMAC","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:Caligatio:jssha:3.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/jssha@3.3.1","externalReferences":[{"url":"https://github.com/Caligatio/jsSHA.git","type":"distribution"},{"url":"https://github.com/Caligatio/jsSHA","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jssha:jssha:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jssha/package.json"}]},{"bom-ref":"pkg:npm/jstransformer@1.0.0?package-id=cb3672db528c0205","type":"library","author":"ForbesLindesay","name":"jstransformer","version":"1.0.0","description":"Normalize the API of any jstransformer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jstransformers:jstransformer:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/jstransformer@1.0.0","externalReferences":[{"url":"https://github.com/jstransformers/jstransformer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jstransformer:jstransformer:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jstransformer/package.json"}]},{"bom-ref":"pkg:npm/juice-shop@19.0.0?package-id=1281c91cb86e1916","type":"library","author":"Björn Kimminich (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, ShubhamPalriwala, CaptainFreak, JuiceShopBot, Supratik Das, the-pro, Ziyang Li, Timo Pagel, aaryan10, ...","name":"juice-shop","version":"19.0.0","description":"Probably the most modern and sophisticated insecure web application","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juice-shop:juice-shop:19.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/juice-shop@19.0.0","externalReferences":[{"url":"https://github.com/juice-shop/juice-shop.git","type":"distribution"},{"url":"https://owasp-juice.shop","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice-shop:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice-shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice-shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/build/package.json"}]},{"bom-ref":"pkg:npm/juice-shop@19.0.0?package-id=c9def2150b0cbae3","type":"library","author":"Björn Kimminich (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, ShubhamPalriwala, CaptainFreak, JuiceShopBot, Supratik Das, the-pro, Ziyang Li, Timo Pagel, aaryan10, ...","name":"juice-shop","version":"19.0.0","description":"Probably the most modern and sophisticated insecure web application","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juice-shop:juice-shop:19.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/juice-shop@19.0.0","externalReferences":[{"url":"https://github.com/juice-shop/juice-shop.git","type":"distribution"},{"url":"https://owasp-juice.shop","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice-shop:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice-shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice-shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice_shop:19.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/package.json"}]},{"bom-ref":"pkg:npm/juicy-chat-bot@0.9.0?package-id=834800aee309824f","type":"library","author":"Björn Kimminich (https://kimminich.de), Scar26, Björn Kimminich","name":"juicy-chat-bot","version":"0.9.0","description":"A light-weight and totally \"secure\" library to easily deploy simple chat bots","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juicy-chat-bot:juicy-chat-bot:0.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/juicy-chat-bot@0.9.0","externalReferences":[{"url":"git+https://github.com/juice-shop/juicy-chat-bot.git","type":"distribution"},{"url":"https://owasp-juice.shop","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy-chat-bot:juicy_chat_bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy_chat_bot:juicy-chat-bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy_chat_bot:juicy_chat_bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy-chat:juicy-chat-bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy-chat:juicy_chat_bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy_chat:juicy-chat-bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy_chat:juicy_chat_bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy:juicy-chat-bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juicy:juicy_chat_bot:0.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/juicy-chat-bot/package.json"}]},{"bom-ref":"pkg:npm/jwa@0.0.1?package-id=1fe4d16b42282bbe","type":"library","author":"Brian J. Brennan","name":"jwa","version":"0.0.1","description":"JWA implementation (supports all JWS algorithms)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:jwa:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/jwa@0.0.1","externalReferences":[{"url":"git://github.com/brianloveswords/node-jwa.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jwa:jwa:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jwa/package.json"}]},{"bom-ref":"pkg:npm/jws@0.2.6?package-id=e3ae0c46d846c3b2","type":"library","author":"Brian J Brennan","name":"jws","version":"0.2.6","description":"Implementation of JSON Web Signatures","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:jws:0.2.6:*:*:*:*:*:*:*","purl":"pkg:npm/jws@0.2.6","externalReferences":[{"url":"git://github.com/brianloveswords/node-jws.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jws:jws:0.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jws/package.json"}]},{"bom-ref":"pkg:npm/keyv@3.0.0?package-id=8594e21b80d1e888","type":"library","author":"Luke Childs (http://lukechilds.co.uk)","name":"keyv","version":"3.0.0","description":"Simple key-value storage with support for multiple backends","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lukechilds:keyv:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/keyv@3.0.0","externalReferences":[{"url":"git+https://github.com/lukechilds/keyv.git","type":"distribution"},{"url":"https://github.com/lukechilds/keyv","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:keyv:keyv:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json"}]},{"bom-ref":"pkg:npm/kind-of@3.2.2?package-id=091d5337c6a363c0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan)","name":"kind-of","version":"3.2.2","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:3.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@3.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kind-of@3.2.2?package-id=1615ce8e3bbb8d71","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan)","name":"kind-of","version":"3.2.2","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:3.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@3.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-copy/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kind-of@3.2.2?package-id=dd0e514580f9e866","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan)","name":"kind-of","version":"3.2.2","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:3.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@3.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon-util/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kind-of@3.2.2?package-id=b925034c3569dbe8","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan)","name":"kind-of","version":"3.2.2","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:3.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@3.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:3.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-object-path/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kind-of@4.0.0?package-id=ee47a644187e7675","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan)","name":"kind-of","version":"4.0.0","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@4.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-values/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kind-of@6.0.3?package-id=c406772b04e5464c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), James (https://twitter.com/aretecode), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan), tunnckoCore (https://i.am.charlike.online)","name":"kind-of","version":"6.0.3","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:6.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@6.0.3","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kuler@2.0.0?package-id=ed79d2954c83dae0","type":"library","author":"Arnout Kazemier","name":"kuler","version":"2.0.0","description":"Color your terminal using CSS/hex color codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:kuler:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/kuler@2.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/kuler","type":"distribution"},{"url":"https://github.com/3rd-Eden/kuler","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:kuler:kuler:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/kuler/package.json"}]},{"bom-ref":"pkg:npm/lazystream@1.0.1?package-id=181999b6186ce408","type":"library","author":"Jonas Pommerening (https://npmjs.org/~jpommerening), Mario Casciaro ","name":"lazystream","version":"1.0.1","description":"Open Node Streams on demand.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jpommerening:lazystream:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/lazystream@1.0.1","externalReferences":[{"url":"https://github.com/jpommerening/node-lazystream.git","type":"distribution"},{"url":"https://github.com/jpommerening/node-lazystream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lazystream/package.json"}]},{"bom-ref":"pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc","type":"library","publisher":"GNU Libc Maintainers ","name":"libc6","version":"2.36-9+deb12u10","licenses":[{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"LGPL-2.1-only"}}],"cpe":"cpe:2.3:a:libc6:libc6:2.36-9\\+deb12u10:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&upstream=glibc","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:d5a3e014161bb602d87c2312e371ad2ea6f800c7f7af261af4faa67302b53c88"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libc6"},{"name":"syft:location:1:layerID","value":"sha256:d5a3e014161bb602d87c2312e371ad2ea6f800c7f7af261af4faa67302b53c88"},{"name":"syft:location:1:path","value":"/usr/share/doc/libc6/copyright"},{"name":"syft:location:2:layerID","value":"sha256:d5a3e014161bb602d87c2312e371ad2ea6f800c7f7af261af4faa67302b53c88"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libc6.md5sums"},{"name":"syft:metadata:installedSize","value":"12996"},{"name":"syft:metadata:source","value":"glibc"}]},{"bom-ref":"pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=74f0cf86f14f0675&upstream=gcc-12","type":"library","publisher":"Debian GCC Maintainers ","name":"libgcc-s1","version":"12.2.0-14+deb12u1","licenses":[{"license":{"id":"GFDL-1.2-only"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"GPL-3.0-only"}},{"license":{"name":"Artistic"}},{"license":{"name":"GPL"}},{"license":{"name":"LGPL"}}],"cpe":"cpe:2.3:a:libgcc-s1:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&upstream=gcc-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc-s1:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc_s1:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc_s1:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc:libgcc-s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc:libgcc_s1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:c3abae442368dc447f15c468933843c361f227f5d87b2bb86515b49f40583ed9"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libgcc-s1"},{"name":"syft:location:1:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:1:path","value":"/usr/share/doc/gcc-12-base/copyright"},{"name":"syft:location:2:layerID","value":"sha256:c3abae442368dc447f15c468933843c361f227f5d87b2bb86515b49f40583ed9"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libgcc-s1.md5sums"},{"name":"syft:metadata:installedSize","value":"140"},{"name":"syft:metadata:source","value":"gcc-12"}]},{"bom-ref":"pkg:deb/debian/libgomp1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=cd7473971e9d06dd&upstream=gcc-12","type":"library","publisher":"Debian GCC Maintainers ","name":"libgomp1","version":"12.2.0-14+deb12u1","licenses":[{"license":{"id":"GFDL-1.2-only"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"GPL-3.0-only"}},{"license":{"name":"Artistic"}},{"license":{"name":"GPL"}},{"license":{"name":"LGPL"}}],"cpe":"cpe:2.3:a:libgomp1:libgomp1:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libgomp1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&upstream=gcc-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:2401c5ea32a75452bc4b02a664c80cf63f197704653926fca19e22e6cbc85652"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libgomp1"},{"name":"syft:location:1:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:1:path","value":"/usr/share/doc/gcc-12-base/copyright"},{"name":"syft:location:2:layerID","value":"sha256:2401c5ea32a75452bc4b02a664c80cf63f197704653926fca19e22e6cbc85652"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libgomp1.md5sums"},{"name":"syft:metadata:installedSize","value":"312"},{"name":"syft:metadata:source","value":"gcc-12"}]},{"bom-ref":"pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&package-id=0f919d6ebdb73625&upstream=openssl","type":"library","publisher":"Debian OpenSSL Team ","name":"libssl3","version":"3.0.17-1~deb12u2","licenses":[{"license":{"id":"Apache-2.0"}},{"license":{"id":"GPL-1.0-only"}},{"license":{"id":"GPL-1.0-or-later"}},{"license":{"name":"Artistic"}}],"cpe":"cpe:2.3:a:libssl3:libssl3:3.0.17-1\\~deb12u2:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&upstream=openssl","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:2e4983c761ce4933ecec23c31173fed551a237c8d0ba359b697de64bd953a7c3"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libssl3"},{"name":"syft:location:1:layerID","value":"sha256:2e4983c761ce4933ecec23c31173fed551a237c8d0ba359b697de64bd953a7c3"},{"name":"syft:location:1:path","value":"/usr/share/doc/libssl3/copyright"},{"name":"syft:location:2:layerID","value":"sha256:2e4983c761ce4933ecec23c31173fed551a237c8d0ba359b697de64bd953a7c3"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libssl3.md5sums"},{"name":"syft:metadata:installedSize","value":"6021"},{"name":"syft:metadata:source","value":"openssl"}]},{"bom-ref":"pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=9a37debf0d05047e&upstream=gcc-12","type":"library","publisher":"Debian GCC Maintainers ","name":"libstdc++6","version":"12.2.0-14+deb12u1","licenses":[{"license":{"id":"GFDL-1.2-only"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"GPL-3.0-only"}},{"license":{"name":"Artistic"}},{"license":{"name":"GPL"}},{"license":{"name":"LGPL"}}],"cpe":"cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.2.0-14\\+deb12u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&upstream=gcc-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:6819a1af097df543d58dc30b51f737e55f3f42a9a04e641f175834a55bf0629c"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libstdc++6"},{"name":"syft:location:1:layerID","value":"sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a"},{"name":"syft:location:1:path","value":"/usr/share/doc/gcc-12-base/copyright"},{"name":"syft:location:2:layerID","value":"sha256:6819a1af097df543d58dc30b51f737e55f3f42a9a04e641f175834a55bf0629c"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libstdc++6.md5sums"},{"name":"syft:metadata:installedSize","value":"2686"},{"name":"syft:metadata:source","value":"gcc-12"}]},{"bom-ref":"pkg:npm/libxmljs2@0.37.0?package-id=008b04af34471513","type":"library","author":"marudor, Jeff Smick, Marco Rogers","name":"libxmljs2","version":"0.37.0","description":"libxml bindings for v8 javascript engine","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:libxmljs2:libxmljs2:0.37.0:*:*:*:*:*:*:*","purl":"pkg:npm/libxmljs2@0.37.0","externalReferences":[{"url":"http://github.com/marudor/libxmljs2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:marudor:libxmljs2:0.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/package.json"}]},{"bom-ref":"pkg:npm/liftup@3.0.1?package-id=b4203f0dbd71dc51","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"liftup","version":"3.0.1","description":"Launch your command line tool with ease.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:liftup:liftup:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/liftup@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/package.json"}]},{"bom-ref":"pkg:npm/linebreak@1.1.0?package-id=b2ed0312398a883c","type":"library","author":"Devon Govett ","name":"linebreak","version":"1.1.0","description":"An implementation of the Unicode Line Breaking Algorithm (UAX #14)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:linebreak:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/linebreak@1.1.0","externalReferences":[{"url":"https://github.com/devongovett/linebreaker.git","type":"distribution"},{"url":"https://github.com/devongovett/linebreaker","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:linebreak:linebreak:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/linebreak/package.json"}]},{"bom-ref":"pkg:npm/listenercount@1.0.1?package-id=8cf228f1cc8b3027","type":"library","author":"jden ","name":"listenercount","version":"1.0.1","description":"backwards compatible version of builtin events.listenercount","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/listenercount@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/listenercount/package.json"}]},{"bom-ref":"pkg:npm/ljharb-monorepo-symlink-test@0.0.0?package-id=b0673eac3bec27e8","type":"library","name":"ljharb-monorepo-symlink-test","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/ljharb-monorepo-symlink-test@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json"}]},{"bom-ref":"pkg:npm/locate-path@5.0.0?package-id=91b02cf44711d543","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"locate-path","version":"5.0.0","description":"Get the first path that exists on disk of multiple paths","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/locate-path@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate-path:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate_path:locate-path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate_path:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate:locate-path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/locate-path/package.json"}]},{"bom-ref":"pkg:npm/lodash@2.4.2?package-id=dbbb92a4d9c4d340","type":"library","author":"John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (http://www.iceddev.com/), Kit Cambridge (http://kitcambridge.be/), Mathias Bynens (http://mathiasbynens.be/)","name":"lodash","version":"2.4.2","description":"A utility library delivering consistency, customization, performance, & extras.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash:lodash:2.4.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/lodash@2.4.2","externalReferences":[{"url":"https://github.com/lodash/lodash.git","type":"distribution"},{"url":"http://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json"}]},{"bom-ref":"pkg:npm/lodash@4.17.21?package-id=32afa1bf90ac61bc","type":"library","author":"John-David Dalton , John-David Dalton , Mathias Bynens ","name":"lodash","version":"4.17.21","description":"Lodash modular utilities.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:node.js:*:*","purl":"pkg:npm/lodash@4.17.21","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash/package.json"}]},{"bom-ref":"pkg:npm/lodash.camelcase@4.3.0?package-id=d72928af0caa92da","type":"library","author":"John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (https://github.com/phated), Mathias Bynens (https://mathiasbynens.be/)","name":"lodash.camelcase","version":"4.3.0","description":"The lodash method `_.camelCase` exported as a module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash.camelcase:lodash.camelcase:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/lodash.camelcase@4.3.0","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash.camelcase/package.json"}]},{"bom-ref":"pkg:npm/lodash.isfinite@3.3.2?package-id=ec6d4a50251c782e","type":"library","author":"John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (https://github.com/phated), Mathias Bynens (https://mathiasbynens.be/)","name":"lodash.isfinite","version":"3.3.2","description":"The lodash method `_.isFinite` exported as a module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash.isfinite:lodash.isfinite:3.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/lodash.isfinite@3.3.2","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash.isfinite/package.json"}]},{"bom-ref":"pkg:npm/lodash.set@4.3.2?package-id=be8f210a7cd0fab3","type":"library","author":"John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (https://github.com/phated), Mathias Bynens (https://mathiasbynens.be/)","name":"lodash.set","version":"4.3.2","description":"The lodash method `_.set` exported as a module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash.set:lodash.set:4.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/lodash.set@4.3.2","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash.set/package.json"}]},{"bom-ref":"pkg:npm/logform@2.7.0?package-id=de0c453fbecf2b01","type":"library","author":"Charlie Robbins ","name":"logform","version":"2.7.0","description":"An mutable object-based log format designed for chaining & objectMode streams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winstonjs:logform:2.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/logform@2.7.0","externalReferences":[{"url":"git+https://github.com/winstonjs/logform.git","type":"distribution"},{"url":"https://github.com/winstonjs/logform#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:logform:logform:2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/logform/package.json"}]},{"bom-ref":"pkg:npm/lolex@1.3.2?package-id=807013bf36635932","type":"library","author":"Christian Johansen","name":"lolex","version":"1.3.2","description":"Fake JavaScript timers","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:sinonjs:lolex:1.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/lolex@1.3.2","externalReferences":[{"url":"http://github.com/sinonjs/lolex.git","type":"distribution"},{"url":"http://github.com/sinonjs/lolex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lolex:lolex:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lolex/package.json"}]},{"bom-ref":"pkg:npm/loose-envify@1.4.0?package-id=360730ddc52a7620","type":"library","author":"Andres Suarez ","name":"loose-envify","version":"1.4.0","description":"Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/loose-envify@1.4.0","externalReferences":[{"url":"git://github.com/zertosh/loose-envify.git","type":"distribution"},{"url":"https://github.com/zertosh/loose-envify","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/loose-envify/package.json"}]},{"bom-ref":"pkg:npm/lowercase-keys@1.0.0?package-id=32832572ce4df07d","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"lowercase-keys","version":"1.0.0","description":"Lowercase the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/lowercase-keys@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase-keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase_keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase_keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase:lowercase-keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lowercase-keys/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@10.4.3?package-id=073a1abbff114c8c","type":"library","author":"Isaac Z. Schlueter ","name":"lru-cache","version":"10.4.3","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@10.4.3","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@10.4.3?package-id=029044ebd1fb4ece","type":"library","author":"Isaac Z. Schlueter ","name":"lru-cache","version":"10.4.3","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@10.4.3","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacache/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@10.4.3?package-id=face390d666ee2e6","type":"library","author":"Isaac Z. Schlueter ","name":"lru-cache","version":"10.4.3","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@10.4.3","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-scurry/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@6.0.0?package-id=65977491543b90a8","type":"library","author":"Isaac Z. Schlueter ","name":"lru-cache","version":"6.0.0","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@6.0.0","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/make-dir@1.3.0?package-id=94cfb98bee7b443d","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"make-dir","version":"1.3.0","description":"Make a directory and its parents if needed - Think `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-dir@1.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-dir:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make-dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/make-dir/package.json"}]},{"bom-ref":"pkg:npm/make-dir@2.1.0?package-id=4beba0ec739f4b97","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"make-dir","version":"2.1.0","description":"Make a directory and its parents if needed - Think `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-dir@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-dir:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make-dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-dir/package.json"}]},{"bom-ref":"pkg:npm/make-error@1.3.6?package-id=be198e54396ccaa6","type":"library","author":"Julien Fontanet ","name":"make-error","version":"1.3.6","description":"Make your own error types!","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:JsCommunity:make-error:1.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/make-error@1.3.6","externalReferences":[{"url":"git://github.com/JsCommunity/make-error.git","type":"distribution"},{"url":"https://github.com/JsCommunity/make-error","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:JsCommunity:make_error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-error:make-error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-error:make_error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_error:make-error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_error:make_error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_error:1.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-error/package.json"}]},{"bom-ref":"pkg:npm/make-fetch-happen@14.0.3?package-id=cbd26296f86ea3b8","type":"library","author":"GitHub Inc.","name":"make-fetch-happen","version":"14.0.3","description":"Opinionated, caching, retrying fetch client","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/make-fetch-happen@14.0.3","externalReferences":[{"url":"git+https://github.com/npm/make-fetch-happen.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/package.json"}]},{"bom-ref":"pkg:npm/make-fetch-happen@9.1.0?package-id=07e960a14667d805","type":"library","author":"Kat Marchán ","name":"make-fetch-happen","version":"9.1.0","description":"Opinionated, caching, retrying fetch client","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-fetch-happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-fetch-happen@9.1.0","externalReferences":[{"url":"https://github.com/npm/make-fetch-happen","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch-happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json"}]},{"bom-ref":"pkg:npm/make-iterator@1.0.1?package-id=2e70d0d98acb0009","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"make-iterator","version":"1.0.1","description":"Convert an argument into a valid iterator. Based on the `.makeIterator()` implementation in mout https://github.com/mout/mout.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:make-iterator:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/make-iterator@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/make-iterator","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-iterator/package.json"}]},{"bom-ref":"pkg:npm/make-plural@4.3.0?package-id=6f404b9eb22f1024","type":"library","author":"Eemeli Aro ","name":"make-plural","version":"4.3.0","description":"Translates Unicode CLDR pluralization rules to executable JavaScript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-plural:make-plural:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-plural@4.3.0","externalReferences":[{"url":"https://github.com/eemeli/make-plural#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-plural:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json"}]},{"bom-ref":"pkg:npm/make-plural@6.2.2?package-id=7b87370db2b76e71","type":"library","author":"Eemeli Aro ","name":"make-plural","version":"6.2.2","description":"Unicode CLDR pluralization rules as JavaScript functions","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-plural:make-plural:6.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/make-plural@6.2.2","externalReferences":[{"url":"https://github.com/eemeli/make-plural.git","type":"distribution"},{"url":"https://github.com/eemeli/make-plural#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-plural:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-plural/package.json"}]},{"bom-ref":"pkg:npm/map-cache@0.2.2?package-id=5f83b17e9f854ecc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"map-cache","version":"0.2.2","description":"Basic cache object for storing key-value pairs.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:map-cache:0.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/map-cache@0.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/map-cache","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-cache:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-cache:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_cache:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_cache:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/map-cache/package.json"}]},{"bom-ref":"pkg:npm/map-visit@1.0.0?package-id=0a4b407ebac3f9e1","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"map-visit","version":"1.0.0","description":"Map `visit` over an array of objects.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:map-visit:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/map-visit@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/map-visit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:map_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-visit:map-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-visit:map_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_visit:map-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_visit:map_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map-visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map_visit:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/map-visit/package.json"}]},{"bom-ref":"pkg:npm/marsdb@0.6.11?package-id=92d5870e9d43058d","type":"library","author":"Artem Artemev , Artem Artemev","name":"marsdb","version":"0.6.11","description":"MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:marsdb:marsdb:0.6.11:*:*:*:*:*:*:*","purl":"pkg:npm/marsdb@0.6.11","externalReferences":[{"url":"https://github.com/c58/marsdb","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:c58:marsdb:0.6.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/marsdb/package.json"}]},{"bom-ref":"pkg:npm/math-interval-parser@2.0.1?package-id=c4cf81a86732a92f","type":"library","author":"Dmitry Semigradsky (https://github.com/Semigradsky)","name":"math-interval-parser","version":"2.0.1","description":"Parse math interval","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:math-interval-parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/math-interval-parser@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval-parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval_parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval_parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/math-interval-parser/package.json"}]},{"bom-ref":"pkg:npm/math-intrinsics@1.1.0?package-id=aa8ac1643abd998a","type":"library","author":"Jordan Harband ","name":"math-intrinsics","version":"1.1.0","description":"ES Math-related intrinsics and helpers, robustly cached.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/math-intrinsics@1.1.0","externalReferences":[{"url":"git+https://github.com/es-shims/math-intrinsics.git","type":"distribution"},{"url":"https://github.com/es-shims/math-intrinsics#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/math-intrinsics/package.json"}]},{"bom-ref":"pkg:npm/media-typer@0.3.0?package-id=761d39c4b96da905","type":"library","author":"Douglas Christopher Wilson ","name":"media-typer","version":"0.3.0","description":"Simple RFC 6838 media type parser and formatter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/media-typer@0.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/media-typer/package.json"}]},{"bom-ref":"pkg:deb/debian/media-types@10.0.0?arch=all&distro=debian-12&package-id=81fa76b13d51bb43","type":"library","publisher":"Mime-Support Packagers ","name":"media-types","version":"10.0.0","licenses":[{"license":{"name":"ad-hoc"}}],"cpe":"cpe:2.3:a:media-types:media-types:10.0.0:*:*:*:*:*:*:*","purl":"pkg:deb/debian/media-types@10.0.0?arch=all&distro=debian-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:media-types:media_types:10.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_types:media-types:10.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_types:media_types:10.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media-types:10.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media_types:10.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:114dde0fefebbca13165d0da9c500a66190e497a82a53dcaabc3172d630be1e9"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/media-types"},{"name":"syft:location:1:layerID","value":"sha256:114dde0fefebbca13165d0da9c500a66190e497a82a53dcaabc3172d630be1e9"},{"name":"syft:location:1:path","value":"/usr/share/doc/media-types/copyright"},{"name":"syft:location:2:layerID","value":"sha256:114dde0fefebbca13165d0da9c500a66190e497a82a53dcaabc3172d630be1e9"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/media-types.md5sums"},{"name":"syft:metadata:installedSize","value":"92"}]},{"bom-ref":"pkg:npm/median@0.0.2?package-id=9d5d7412a9d2ef14","type":"library","author":"Khalid Lafi","name":"median","version":"0.0.2","description":"a small module for node and browser to calculate median","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lafikl:median:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/median@0.0.2","externalReferences":[{"url":"http://github.com/lafikl/median","type":"distribution"},{"url":"https://github.com/lafikl/median","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:median:median:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/median/package.json"}]},{"bom-ref":"pkg:npm/merge-descriptors@1.0.3?package-id=d9e5a65c51115c3f","type":"library","author":"Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson , Mike Grabowski ","name":"merge-descriptors","version":"1.0.3","description":"Merge objects using descriptors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/merge-descriptors@1.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/merge-descriptors/package.json"}]},{"bom-ref":"pkg:npm/messageformat@2.3.0?package-id=f69b2994a9e9d9fe","type":"library","author":"Alex Sexton , Eemeli Aro ","name":"messageformat","version":"2.3.0","description":"PluralFormat and SelectFormat Message and i18n Tool - A JavaScript Implemenation of the ICU standards.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat:messageformat:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat@2.3.0","externalReferences":[{"url":"https://messageformat.github.io/messageformat/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat/package.json"}]},{"bom-ref":"pkg:npm/messageformat-formatters@2.0.1?package-id=2b6c534059aeab68","type":"library","author":"Eemeli Aro ","name":"messageformat-formatters","version":"2.0.1","description":"Formatters for messageformat","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat-formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat-formatters@2.0.1","externalReferences":[{"url":"https://github.com/messageformat/messageformat.git","type":"distribution"},{"url":"https://messageformat.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat-formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat-formatters/package.json"}]},{"bom-ref":"pkg:npm/messageformat-parser@4.1.3?package-id=e027aa677afa5141","type":"library","author":"Alex Sexton , Eemeli Aro , Nikola Kovacs , Adrian Vogelsgesang ","name":"messageformat-parser","version":"4.1.3","description":"A PEG.js parser for ICU MessageFormat strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat-parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat-parser@4.1.3","externalReferences":[{"url":"https://github.com/messageformat/messageformat.git","type":"distribution"},{"url":"https://messageformat.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat-parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat-parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat-parser/package.json"}]},{"bom-ref":"pkg:npm/methods@1.1.2?package-id=5f8a3e9c18de5014","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), TJ Holowaychuk (http://tjholowaychuk.com)","name":"methods","version":"1.1.2","description":"HTTP methods that node supports","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/methods@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/methods/package.json"}]},{"bom-ref":"pkg:npm/micromatch@3.1.10?package-id=2f60ee768b1461a2","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), ","name":"micromatch","version":"3.1.10","description":"Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:micromatch:3.1.10:*:*:*:*:node.js:*:*","purl":"pkg:npm/micromatch@3.1.10","externalReferences":[{"url":"https://github.com/micromatch/micromatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/micromatch/package.json"}]},{"bom-ref":"pkg:npm/micromatch@4.0.8?package-id=4589ae9f300717e4","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), Peter Bright (https://github.com/drpizza), Kuba Juszczyk (https://github.com/ku8ar)","name":"micromatch","version":"4.0.8","description":"Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/micromatch@4.0.8","externalReferences":[{"url":"https://github.com/micromatch/micromatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/micromatch/package.json"}]},{"bom-ref":"pkg:npm/micromatch@4.0.8?package-id=a650aa642c0822c6","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), Peter Bright (https://github.com/drpizza), Kuba Juszczyk (https://github.com/ku8ar)","name":"micromatch","version":"4.0.8","description":"Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/micromatch@4.0.8","externalReferences":[{"url":"https://github.com/micromatch/micromatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/micromatch/package.json"}]},{"bom-ref":"pkg:npm/mime@1.6.0?package-id=1ebb82e2ba25a844","type":"library","author":"Robert Kieffer (http://github.com/broofa), Benjamin Thomas (http://github.com/bentomas)","name":"mime","version":"1.6.0","description":"A comprehensive library for mime-type mapping","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/mime@1.6.0","externalReferences":[{"url":"https://github.com/broofa/node-mime","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime/package.json"}]},{"bom-ref":"pkg:npm/mime-db@1.52.0?package-id=43c6f2fbd14f0eba","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), Robert Kieffer (http://github.com/broofa)","name":"mime-db","version":"1.52.0","description":"Media Type Database","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*","purl":"pkg:npm/mime-db@1.52.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime-db/package.json"}]},{"bom-ref":"pkg:npm/mime-types@2.1.35?package-id=33e05356d0dff6ad","type":"library","author":"Douglas Christopher Wilson , Jeremiah Senkpiel (https://searchbeam.jit.su), Jonathan Ong (http://jongleberry.com)","name":"mime-types","version":"2.1.35","description":"The ultimate javascript content-type utility.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*","purl":"pkg:npm/mime-types@2.1.35","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime-types/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@1.0.1?package-id=02b892e02c7322ac","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"mimic-response","version":"1.0.1","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@2.1.0?package-id=0e93cdb85c89eacc","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"mimic-response","version":"2.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@3.1.0?package-id=845c5d602993a101","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"mimic-response","version":"3.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@3.1.0?package-id=2b67abea8a06a8db","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"mimic-response","version":"3.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/minami@1.1.1?package-id=259bb7f76d54d062","type":"library","author":"Nijiko Yonskai ","name":"minami","version":"1.1.1","description":"Clean and minimal JSDoc 3 Template / Theme","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:Nijikokun:minami:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/minami@1.1.1","externalReferences":[{"url":"https://github.com/Nijikokun/minami.git","type":"distribution"},{"url":"https://github.com/Nijikokun/minami","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minami:minami:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-js/docconfig/template/package.json"}]},{"bom-ref":"pkg:npm/minami@1.1.1?package-id=803f499aaa469edc","type":"library","author":"Nijiko Yonskai ","name":"minami","version":"1.1.1","description":"Clean and minimal JSDoc 3 Template / Theme","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:Nijikokun:minami:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/minami@1.1.1","externalReferences":[{"url":"https://github.com/Nijikokun/minami.git","type":"distribution"},{"url":"https://github.com/Nijikokun/minami","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minami:minami:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filehound/docconfig/template/package.json"}]},{"bom-ref":"pkg:npm/minami@1.1.1?package-id=21dab49a5abbbdc9","type":"library","author":"Nijiko Yonskai ","name":"minami","version":"1.1.1","description":"Clean and minimal JSDoc 3 Template / Theme","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:Nijikokun:minami:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/minami@1.1.1","externalReferences":[{"url":"https://github.com/Nijikokun/minami.git","type":"distribution"},{"url":"https://github.com/Nijikokun/minami","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minami:minami:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filesniffer/docconfig/template/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.0.5?package-id=a7d9f58fa9223af7","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.0.5","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.0.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.0.5","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.0.8?package-id=64792428adfc1585","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.0.8","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.0.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.0.8","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=31053d1a3eefafcf","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=c46d28efb236e0c8","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=2ea489db3cb444cd","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-js/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=a88006b8a0ec9567","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=34e3a98e2f474c3f","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ignore-walk/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=182b6a07cfd75764","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=5c4dec26d80d1f6e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=203e6da42d80803d","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.2?package-id=60218374fb088257","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"3.1.2","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.2","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@5.1.6?package-id=ae8bd0e649f1262b","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"5.1.6","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:5.1.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@5.1.6","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filehound/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@9.0.5?package-id=1f297f7286432e88","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"minimatch","version":"9.0.5","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:9.0.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@9.0.5","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/glob/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimist@0.2.4?package-id=73dbd9aaf4ec2d16","type":"library","author":"James Halliday (http://substack.net)","name":"minimist","version":"0.2.4","description":"parse argument options","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minimistjs:minimist:0.2.4:*:*:*:*:*:*:*","purl":"pkg:npm/minimist@0.2.4","externalReferences":[{"url":"git://github.com/minimistjs/minimist.git","type":"distribution"},{"url":"https://github.com/minimistjs/minimist","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minimist:minimist:0.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bower-config/node_modules/minimist/package.json"}]},{"bom-ref":"pkg:npm/minimist@1.2.8?package-id=9c7c73598a676732","type":"library","author":"James Halliday (http://substack.net)","name":"minimist","version":"1.2.8","description":"parse argument options","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*","purl":"pkg:npm/minimist@1.2.8","externalReferences":[{"url":"git://github.com/minimistjs/minimist.git","type":"distribution"},{"url":"https://github.com/minimistjs/minimist","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minimist/package.json"}]},{"bom-ref":"pkg:npm/minipass@2.9.0?package-id=59462219a37abffd","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"2.9.0","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@2.9.0","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=338b486a654e33cb","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=7256b9dc3ee5141e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=b65044371c10aa40","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=04660218c5e211d0","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@5.0.0?package-id=e285aecf7d10679e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"5.0.0","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@5.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@7.1.2?package-id=9f005f004bbbc237","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minipass","version":"7.1.2","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:7.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@7.1.2","externalReferences":[{"url":"https://github.com/isaacs/minipass","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass:7.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass-collect@1.0.2?package-id=63efb267ac514e08","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"minipass-collect","version":"1.0.2","description":"A Minipass stream that collects all the data into a single chunk","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-collect@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass-collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json"}]},{"bom-ref":"pkg:npm/minipass-collect@2.0.1?package-id=8fecd15c1c48c3bb","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"minipass-collect","version":"2.0.1","description":"A Minipass stream that collects all the data into a single chunk","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-collect@2.0.1","externalReferences":[{"url":"https://github.com/isaacs/minipass-collect","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-collect/package.json"}]},{"bom-ref":"pkg:npm/minipass-fetch@1.4.1?package-id=f1dcdfbdae2d40b2","type":"library","name":"minipass-fetch","version":"1.4.1","description":"An implementation of window.fetch in Node.js using Minipass streams","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minipass-fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-fetch@1.4.1","externalReferences":[{"url":"git+https://github.com/npm/minipass-fetch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json"}]},{"bom-ref":"pkg:npm/minipass-fetch@4.0.1?package-id=7894cdb8bcb4ca43","type":"library","author":"GitHub Inc.","name":"minipass-fetch","version":"4.0.1","description":"An implementation of window.fetch in Node.js using Minipass streams","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-fetch@4.0.1","externalReferences":[{"url":"git+https://github.com/npm/minipass-fetch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-fetch/package.json"}]},{"bom-ref":"pkg:npm/minipass-flush@1.0.5?package-id=bedbd18a6cd2025c","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"minipass-flush","version":"1.0.5","description":"A Minipass stream that calls a flush function before emitting 'end'","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-flush:minipass-flush:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-flush@1.0.5","externalReferences":[{"url":"git+https://github.com/isaacs/minipass-flush.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_flush:minipass-flush:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_flush:minipass_flush:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-flush:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_flush:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/package.json"}]},{"bom-ref":"pkg:npm/minipass-pipeline@1.2.4?package-id=8d7f8393e7e2d352","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"minipass-pipeline","version":"1.2.4","description":"create a pipeline of streams using Minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-pipeline@1.2.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/package.json"}]},{"bom-ref":"pkg:npm/minipass-sized@1.0.3?package-id=82b64febd11d5f17","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"minipass-sized","version":"1.0.3","description":"A Minipass stream that raises an error if you get a different number of bytes than expected","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-sized@1.0.3","externalReferences":[{"url":"git+https://github.com/isaacs/minipass-sized.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/package.json"}]},{"bom-ref":"pkg:npm/minizlib@1.3.3?package-id=6cecd69a39d4a47e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minizlib","version":"1.3.3","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@1.3.3","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/minizlib@2.1.2?package-id=871e116128fa5e93","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minizlib","version":"2.1.2","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@2.1.2","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/minizlib@3.0.2?package-id=4c875a47e8ed8d75","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"minizlib","version":"3.0.2","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:3.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@3.0.2","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/mixin-deep@1.3.2?package-id=2bd6b6a73f24438a","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"mixin-deep","version":"1.3.2","description":"Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mixin-deep_project:mixin-deep:1.3.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/mixin-deep@1.3.2","externalReferences":[{"url":"https://github.com/jonschlinkert/mixin-deep","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mixin-deep/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@0.5.6?package-id=aac75cf953afd7be","type":"library","author":"James Halliday (http://substack.net)","name":"mkdirp","version":"0.5.6","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@0.5.6","externalReferences":[{"url":"https://github.com/substack/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@0.5.6?package-id=9545f93d32ecd825","type":"library","author":"James Halliday (http://substack.net)","name":"mkdirp","version":"0.5.6","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@0.5.6","externalReferences":[{"url":"https://github.com/substack/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/multer/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@0.5.6?package-id=cdd9e55c287880e9","type":"library","author":"James Halliday (http://substack.net)","name":"mkdirp","version":"0.5.6","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@0.5.6","externalReferences":[{"url":"https://github.com/substack/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@1.0.4?package-id=ec81f4c73a16e50a","type":"library","name":"mkdirp","version":"1.0.4","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@1.0.4","externalReferences":[{"url":"https://github.com/isaacs/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@3.0.1?package-id=9aa87987dc535ad0","type":"library","name":"mkdirp","version":"3.0.1","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isaacs:mkdirp:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@3.0.1","externalReferences":[{"url":"https://github.com/isaacs/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar/node_modules/mkdirp/dist/cjs/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@3.0.1?package-id=3f698848c9800d05","type":"library","name":"mkdirp","version":"3.0.1","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isaacs:mkdirp:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@3.0.1","externalReferences":[{"url":"https://github.com/isaacs/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp-classic@0.5.3?package-id=fbd74b5142e9aacc","type":"library","author":"Mathias Buus (@mafintosh)","name":"mkdirp-classic","version":"0.5.3","description":"Mirror of mkdirp 0.5.2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp-classic@0.5.3","externalReferences":[{"url":"https://github.com/mafintosh/mkdirp-classic.git","type":"distribution"},{"url":"https://github.com/mafintosh/mkdirp-classic","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp-classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp_classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp_classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mkdirp-classic/package.json"}]},{"bom-ref":"pkg:npm/moment@2.0.0?package-id=fb07dad56d7726f5","type":"library","author":"Tim Wood (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Iskren Ivov Chernev (https://github.com/ichernev)","name":"moment","version":"2.0.0","description":"Parse, manipulate, and display dates.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:momentjs:moment:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/moment@2.0.0","externalReferences":[{"url":"https://github.com/timrwood/moment.git","type":"distribution"},{"url":"http://momentjs.com","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/node_modules/moment/package.json"}]},{"bom-ref":"pkg:npm/moment@2.30.1?package-id=7f78544a103db020","type":"library","author":"Iskren Ivov Chernev (https://github.com/ichernev), Tim Wood (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Matt Johnson (http://codeofmatt.com), Isaac Cambron (http://isaaccambron.com), Andre Polykanine (https://github.com/oire)","name":"moment","version":"2.30.1","description":"Parse, validate, manipulate, and display dates","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:momentjs:moment:2.30.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/moment@2.30.1","externalReferences":[{"url":"https://github.com/moment/moment.git","type":"distribution"},{"url":"https://momentjs.com","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/moment/package.json"}]},{"bom-ref":"pkg:npm/moment-timezone@0.5.48?package-id=1d07c82a5521aa67","type":"library","author":"Tim Wood (http://timwoodcreates.com/)","name":"moment-timezone","version":"0.5.48","description":"Parse and display moments in any timezone.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:moment-timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*","purl":"pkg:npm/moment-timezone@0.5.48","externalReferences":[{"url":"https://github.com/moment/moment-timezone.git","type":"distribution"},{"url":"http://momentjs.com/timezone/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment-timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment_timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment_timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment:moment-timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/moment-timezone/package.json"}]},{"bom-ref":"pkg:npm/morgan@1.10.1?package-id=36a2e18413295dc3","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"morgan","version":"1.10.1","description":"HTTP request logger middleware for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:morgan_project:morgan:1.10.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/morgan@1.10.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/package.json"}]},{"bom-ref":"pkg:npm/mout@1.2.4?package-id=8b26513aaaf1aac2","type":"library","author":"Miller Medeiros (http://blog.millermedeiros.com), Adam Nowotny, André Cruz , Conrad Zimmerman (http://www.conradz.com), Friedemann Altrock , Igor Almeida , Jarrod Overson (http://jarrodoverson.com), Mathias Paumgarten , Zach Shipley","name":"mout","version":"1.2.4","description":"Modular Utilities","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:moutjs:mout:1.2.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/mout@1.2.4","externalReferences":[{"url":"git://github.com/mout/mout.git","type":"distribution"},{"url":"http://moutjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mout/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=8775a9288f5bc126","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/body-parser/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=d3195105fc17a7bf","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compression/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=f37e42bc8cfd45d4","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-brackets/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=41f4b47890eeafc0","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=2d8c5183e2e4aaa9","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finalhandler/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=cd9f24fc6f126249","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=2656d211549c31f9","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/node_modules/debug/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=9baffa9f02caeb71","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=845620f2808130a3","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=9f6813161aea9615","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/multer@1.4.5-lts.2?package-id=cce9b5dd2cb3fe54","type":"library","author":"Hage Yaapa (http://www.hacksparrow.com), Jaret Pfluger , Linus Unnebäck ","name":"multer","version":"1.4.5-lts.2","description":"Middleware for handling `multipart/form-data`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:multer:multer:1.4.5-lts.2:*:*:*:*:*:*:*","purl":"pkg:npm/multer@1.4.5-lts.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/multer/package.json"}]},{"bom-ref":"pkg:npm/mustache@4.2.0?package-id=4b189aa85e6c312d","type":"library","author":"mustache.js Authors ","name":"mustache","version":"4.2.0","description":"Logic-less {{mustache}} templates with JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mustache.js:mustache.js:4.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/mustache@4.2.0","externalReferences":[{"url":"https://github.com/janl/mustache.js.git","type":"distribution"},{"url":"https://github.com/janl/mustache.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache.js:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache:mustache.js:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:janl:mustache.js:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:janl:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mustache/package.json"}]},{"bom-ref":"pkg:npm/mylib@0.0.0?package-id=ca93165f21ef1895","type":"library","name":"mylib","version":"0.0.0","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/mylib@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"}]},{"bom-ref":"pkg:npm/nan@2.22.2?package-id=f98605c6f902c9b8","type":"library","author":"Rod Vagg (https://github.com/rvagg), Benjamin Byholm (https://github.com/kkoopa/), Trevor Norris (https://github.com/trevnorris), Nathan Rajlich (https://github.com/TooTallNate), Brett Lawson (https://github.com/brett19), Ben Noordhuis (https://github.com/bnoordhuis), David Siegel (https://github.com/agnat), Michael Ira Krufky (https://github.com/mkrufky)","name":"nan","version":"2.22.2","description":"Native Abstractions for Node.js: C++ header for Node 0.8 -> 22 compatibility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodejs:nan:2.22.2:*:*:*:*:*:*:*","purl":"pkg:npm/nan@2.22.2","externalReferences":[{"url":"git://github.com/nodejs/nan.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nan/package.json"}]},{"bom-ref":"pkg:npm/nanomatch@1.2.13?package-id=99620647e0c9d7c2","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Devon Govett (http://badassjs.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"nanomatch","version":"1.2.13","description":"Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but complete Bash 4.3 wildcard support only (no support for exglobs, posix brackets or braces)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:micromatch:nanomatch:1.2.13:*:*:*:*:*:*:*","purl":"pkg:npm/nanomatch@1.2.13","externalReferences":[{"url":"https://github.com/micromatch/nanomatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nanomatch:nanomatch:1.2.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nanomatch/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@1.0.2?package-id=f9886324943b066f","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"1.0.2","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@1.0.2","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@2.0.0?package-id=a1b5ba5038b982fd","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"2.0.0","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@2.0.0","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@2.0.0?package-id=3a25fd995add959b","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"2.0.0","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@2.0.0","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/needle@2.9.1?package-id=02a44fe43834d9a1","type":"library","author":"Tomás Pollak ","name":"needle","version":"2.9.1","description":"The leanest and most handsome HTTP client in the Nodelands.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:needle:needle:2.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/needle@2.9.1","externalReferences":[{"url":"https://github.com/tomas/needle.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tomas:needle:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/needle/package.json"}]},{"bom-ref":"pkg:npm/negotiator@0.6.3?package-id=3124531c115a5cf0","type":"library","author":"Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)","name":"negotiator","version":"0.6.3","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@0.6.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/accepts/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/negotiator@0.6.4?package-id=922044f9c518728f","type":"library","author":"Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)","name":"negotiator","version":"0.6.4","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:0.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@0.6.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/negotiator@1.0.0?package-id=c566eb58c86960c4","type":"library","author":"Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)","name":"negotiator","version":"1.0.0","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/neo-async@2.6.2?package-id=fa2e675cd8ba8607","type":"library","name":"neo-async","version":"2.6.2","description":"Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:neo-async:neo-async:2.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/neo-async@2.6.2","externalReferences":[{"url":"https://github.com/suguru03/neo-async","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo-async:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo_async:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo_async:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:suguru03:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:suguru03:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/neo-async/package.json"}]},{"bom-ref":"pkg:deb/debian/netbase@6.4?arch=all&distro=debian-12&package-id=f28ae05ddd844b33","type":"library","publisher":"Marco d'Itri ","name":"netbase","version":"6.4","licenses":[{"license":{"id":"GPL-2.0-only"}}],"cpe":"cpe:2.3:a:netbase:netbase:6.4:*:*:*:*:*:*:*","purl":"pkg:deb/debian/netbase@6.4?arch=all&distro=debian-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:8fa10c0194df9b7c054c90dbe482585f768a54428fc90a5b78a0066a123b1bba"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/netbase"},{"name":"syft:location:1:layerID","value":"sha256:8fa10c0194df9b7c054c90dbe482585f768a54428fc90a5b78a0066a123b1bba"},{"name":"syft:location:1:path","value":"/usr/share/doc/netbase/copyright"},{"name":"syft:location:2:layerID","value":"sha256:8fa10c0194df9b7c054c90dbe482585f768a54428fc90a5b78a0066a123b1bba"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/netbase.md5sums"},{"name":"syft:metadata:installedSize","value":"36"}]},{"bom-ref":"pkg:generic/node@22.18.0?package-id=0f112df19132fab3","type":"application","name":"node","version":"22.18.0","cpe":"cpe:2.3:a:nodejs:node.js:22.18.0:*:*:*:*:*:*:*","purl":"pkg:generic/node@22.18.0","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:location:0:layerID","value":"sha256:2f5239c7b2bfbda3e275a053ca0865fc4cb8aad6d1fd5aca22d3e1e54f32df99"},{"name":"syft:location:0:path","value":"/nodejs/bin/node"}]},{"bom-ref":"pkg:npm/node-abi@2.30.1?package-id=56163144372dee3f","type":"library","author":"Lukas Geiger","name":"node-abi","version":"2.30.1","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-abi:node-abi:2.30.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@2.30.1","externalReferences":[{"url":"https://github.com/lgeiger/node-abi.git","type":"distribution"},{"url":"https://github.com/lgeiger/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lgeiger:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lgeiger:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-abi@3.77.0?package-id=b8aaa84163365d61","type":"library","author":"Lukas Geiger","name":"node-abi","version":"3.77.0","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:electron:node-abi:3.77.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@3.77.0","externalReferences":[{"url":"git+https://github.com/electron/node-abi.git","type":"distribution"},{"url":"https://github.com/electron/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:electron:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-abi@3.77.0?package-id=ebfe7e7767f743cd","type":"library","author":"Lukas Geiger","name":"node-abi","version":"3.77.0","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:electron:node-abi:3.77.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@3.77.0","externalReferences":[{"url":"git+https://github.com/electron/node-abi.git","type":"distribution"},{"url":"https://github.com/electron/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:electron:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:3.77.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-addon-api@7.1.1?package-id=3b2568607ceb74e4","type":"library","author":"Abhishek Kumar Singh (https://github.com/abhi11210646), Alba Mendez (https://github.com/jmendeth), Alexander Floh (https://github.com/alexanderfloh), Ammar Faizi (https://github.com/ammarfaizi2), András Timár, Dr (https://github.com/timarandras), Andrew Petersen (https://github.com/kirbysayshi), Anisha Rohra (https://github.com/anisha-rohra), Anna Henningsen (https://github.com/addaleax), Arnaud Botella (https://github.com/BotellaA), Arunesh Chandra (https://github.com/aruneshchandra), Azlan Mukhtar (https://github.com/azlan), Ben Berman (https://github.com/rivertam), Benjamin Byholm (https://github.com/kkoopa), Bill Gallafent (https://github.com/gallafent), blagoev (https://github.com/blagoev), Bruce A. MacNaughton (https://github.com/bmacnaughton), Cory Mickelson (https://github.com/corymickelson), Daniel Bevenius (https://github.com/danbev), Dante Calderón (https://github.com/dantehemerson), Darshan Sen (https://github.com/RaisinTen), David Halls (https://github.com/davedoesdev), Deepak Rajamohan (https://github.com/deepakrkris), Dmitry Ashkadov (https://github.com/dmitryash), Dongjin Na (https://github.com/nadongguri), Doni Rubiagatra (https://github.com/rubiagatra), Eric Bickle (https://github.com/ebickle), extremeheat (https://github.com/extremeheat), Feng Yu (https://github.com/F3n67u), Ferdinand Holzer (https://github.com/fholzer), Gabriel Schulhof (https://github.com/gabrielschulhof), Guenter Sandner (https://github.com/gms1), Gus Caplan (https://github.com/devsnek), Helio Frota (https://github.com/helio-frota), Hitesh Kanwathirtha (https://github.com/digitalinfinity), ikokostya (https://github.com/ikokostya), Jack Xia (https://github.com/JckXia), Jake Barnes (https://github.com/DuBistKomisch), Jake Yoon (https://github.com/yjaeseok), Jason Ginchereau (https://github.com/jasongin), Jenny (https://github.com/egg-bread), Jeroen Janssen (https://github.com/japj), Jim Schlight (https://github.com/jschlight), Jinho Bang (https://github.com/romandev), José Expósito (https://github.com/JoseExposito), joshgarde (https://github.com/joshgarde), Julian Mesa (https://github.com/julianmesa-gitkraken), Kasumi Hanazuki (https://github.com/hanazuki), Kelvin (https://github.com/kelvinhammond), Kevin Eady (https://github.com/KevinEady), Kévin VOYER (https://github.com/kecsou), kidneysolo (https://github.com/kidneysolo), Koki Nishihara (https://github.com/Nishikoh), Konstantin Tarkus (https://github.com/koistya), Kyle Farnung (https://github.com/kfarnung), Kyle Kovacs (https://github.com/nullromo), legendecas (https://github.com/legendecas), LongYinan (https://github.com/Brooooooklyn), Lovell Fuller (https://github.com/lovell), Luciano Martorella (https://github.com/lmartorella), mastergberry (https://github.com/mastergberry), Mathias Küsel (https://github.com/mathiask88), Mathias Stearn (https://github.com/RedBeard0531), Matteo Collina (https://github.com/mcollina), Michael Dawson (https://github.com/mhdawson), Michael Price (https://github.com/mikepricedev), Michele Campus (https://github.com/kYroL01), Mikhail Cheshkov (https://github.com/mcheshkov), nempoBu4 (https://github.com/nempoBu4), Nicola Del Gobbo (https://github.com/NickNaso), Nick Soggin (https://github.com/iSkore), Nikolai Vavilov (https://github.com/seishun), Nurbol Alpysbayev (https://github.com/anurbol), pacop (https://github.com/pacop), Peter Šándor (https://github.com/petersandor), Philipp Renoth (https://github.com/DaAitch), rgerd (https://github.com/rgerd), Richard Lau (https://github.com/richardlau), Rolf Timmermans (https://github.com/rolftimmermans), Ross Weir (https://github.com/ross-weir), Ryuichi Okumura (https://github.com/okuryu), Saint Gabriel (https://github.com/chineduG), Sampson Gao (https://github.com/sampsongao), Sam Roberts (https://github.com/sam-github), strager (https://github.com/strager), Taylor Woll (https://github.com/boingoing), Thomas Gentilhomme (https://github.com/fraxken), Tim Rach (https://github.com/timrach), Tobias Nießen (https://github.com/tniessen), todoroff (https://github.com/todoroff), Toyo Li (https://github.com/toyobayashi), Tux3 (https://github.com/tux3), Vlad Velmisov (https://github.com/Velmisov), Vladimir Morozov (https://github.com/vmoroz), WenheLI (https://github.com/WenheLI), Xuguang Mei (https://github.com/meixg), Yohei Kishimoto (https://github.com/morokosi), Yulong Wang (https://github.com/fs-eire), Ziqiu Zhao (https://github.com/ZzqiZQute), Feng Yu (https://github.com/F3n67u), wanlu wang (https://github.com/wanlu), Caleb Hearon (https://github.com/chearon), Marx (https://github.com/MarxJiao), Ömer AKGÜL (https://github.com/tuhalf)","name":"node-addon-api","version":"7.1.1","description":"Node.js API (Node-API)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-addon-api:node-addon-api:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-addon-api@7.1.1","externalReferences":[{"url":"git://github.com/nodejs/node-addon-api.git","type":"distribution"},{"url":"https://github.com/nodejs/node-addon-api","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon-api:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon_api:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon_api:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-addon-api/package.json"}]},{"bom-ref":"pkg:npm/node-fetch@2.7.0?package-id=4cb2b202d405571f","type":"library","author":"David Frank","name":"node-fetch","version":"2.7.0","description":"A light-weight module that brings window.fetch to node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-fetch_project:node-fetch:2.7.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/node-fetch@2.7.0","externalReferences":[{"url":"https://github.com/bitinn/node-fetch.git","type":"distribution"},{"url":"https://github.com/bitinn/node-fetch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-fetch/package.json"}]},{"bom-ref":"pkg:npm/node-gyp@11.4.2?package-id=9695f2bb910aad79","type":"library","author":"Nathan Rajlich (http://tootallnate.net)","name":"node-gyp","version":"11.4.2","description":"Node.js native addon build tool","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-gyp:node-gyp:11.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/node-gyp@11.4.2","externalReferences":[{"url":"git://github.com/nodejs/node-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-gyp:node_gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node-gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node_gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_gyp:11.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/package.json"}]},{"bom-ref":"pkg:npm/node-gyp@8.4.1?package-id=4c76218352127cf5","type":"library","author":"Nathan Rajlich (http://tootallnate.net)","name":"node-gyp","version":"8.4.1","description":"Node.js native addon build tool","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-gyp:node-gyp:8.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-gyp@8.4.1","externalReferences":[{"url":"git://github.com/nodejs/node-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json"}]},{"bom-ref":"pkg:npm/node-pre-gyp@0.15.0?package-id=f723ada374e828f8","type":"library","author":"Dane Springmeyer ","name":"node-pre-gyp","version":"0.15.0","description":"Node.js native addon binary install tool","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-pre-gyp@0.15.0","externalReferences":[{"url":"git://github.com/mapbox/node-pre-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mapbox:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mapbox:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/package.json"}]},{"bom-ref":"pkg:npm/noop-logger@0.1.1?package-id=62097a3cbdf4d6ce","type":"library","name":"noop-logger","version":"0.1.1","description":"A logger that does exactly nothing.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:noop-logger:noop-logger:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/noop-logger@0.1.1","externalReferences":[{"url":"git://github.com/segmentio/noop-logger.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop-logger:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop_logger:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop_logger:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:segmentio:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:segmentio:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/noop-logger/package.json"}]},{"bom-ref":"pkg:npm/nopt@3.0.6?package-id=09c7991b45a9fe7b","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"nopt","version":"3.0.6","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:3.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@3.0.6","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:3.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@4.0.3?package-id=3503d5499a9b9b8f","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"nopt","version":"4.0.3","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@4.0.3","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/grunt-cli/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@4.0.3?package-id=17084a2a134171fb","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"nopt","version":"4.0.3","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@4.0.3","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@5.0.0?package-id=72fe4ee56e6df59b","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"nopt","version":"5.0.0","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@5.0.0","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@8.1.0?package-id=e53437a448e9c126","type":"library","author":"GitHub Inc.","name":"nopt","version":"8.1.0","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@8.1.0","externalReferences":[{"url":"git+https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/normalize-path@2.1.1?package-id=371b1b4791f29956","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"normalize-path","version":"2.1.1","description":"Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-path:normalize-path:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/normalize-path@2.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/normalize-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize-path:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/normalize-path/package.json"}]},{"bom-ref":"pkg:npm/normalize-path@3.0.0?package-id=653c248007512801","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"normalize-path","version":"3.0.0","description":"Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/normalize-path@3.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/normalize-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize-path:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/anymatch/node_modules/normalize-path/package.json"}]},{"bom-ref":"pkg:npm/normalize-path@3.0.0?package-id=ffe1ecc93863a070","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"normalize-path","version":"3.0.0","description":"Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/normalize-path@3.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/normalize-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize-path:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize-path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize_path:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/normalize-path/package.json"}]},{"bom-ref":"pkg:npm/normalize-url@2.0.1?package-id=19ee02344c33b376","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"normalize-url","version":"2.0.1","description":"Normalize a URL","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-url_project:normalize-url:2.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/normalize-url@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/normalize-url/package.json"}]},{"bom-ref":"pkg:npm/notevil@1.3.3?package-id=06d4740823f7ae47","type":"library","author":"Matt McKegg","name":"notevil","version":"1.3.3","description":"Evalulate javascript like the built-in eval() method but safely","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:notevil_project:notevil:1.3.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/notevil@1.3.3","externalReferences":[{"url":"https://github.com/mmckegg/notevil","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/notevil/package.json"}]},{"bom-ref":"pkg:npm/npm-bundled@1.1.2?package-id=9514fb53235856ea","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"npm-bundled","version":"1.1.2","description":"list things in node_modules that are bundledDependencies, or transitive dependencies thereof","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/npm-bundled@1.1.2","externalReferences":[{"url":"git+https://github.com/npm/npm-bundled.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-bundled/package.json"}]},{"bom-ref":"pkg:npm/npm-normalize-package-bin@1.0.1?package-id=a243c54124680107","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"npm-normalize-package-bin","version":"1.0.1","description":"Turn any flavor of allowable package.json bin into a normalized object","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/npm-normalize-package-bin@1.0.1","externalReferences":[{"url":"git+https://github.com/npm/npm-normalize-package-bin","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-normalize-package-bin/package.json"}]},{"bom-ref":"pkg:npm/npm-packlist@1.4.8?package-id=d146b73bd2488b35","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"npm-packlist","version":"1.4.8","description":"Get a list of the files to add from a folder into an npm package","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*","purl":"pkg:npm/npm-packlist@1.4.8","externalReferences":[{"url":"git+https://github.com/npm/npm-packlist.git","type":"distribution"},{"url":"https://www.npmjs.com/package/npm-packlist","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-packlist/package.json"}]},{"bom-ref":"pkg:npm/npmlog@4.1.2?package-id=f0ae369a8e8ec43c","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"npmlog","version":"4.1.2","description":"logger for npm","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/npmlog@4.1.2","externalReferences":[{"url":"https://github.com/npm/npmlog.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npmlog:4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npmlog/package.json"}]},{"bom-ref":"pkg:npm/npmlog@6.0.2?package-id=0ceab194b80b773c","type":"library","author":"GitHub Inc.","name":"npmlog","version":"6.0.2","description":"logger for npm","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/npmlog@6.0.2","externalReferences":[{"url":"https://github.com/npm/npmlog.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npmlog:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json"}]},{"bom-ref":"pkg:npm/number-is-nan@1.0.1?package-id=d623ff908a3a9701","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"number-is-nan","version":"1.0.1","description":"ES2015 Number.isNaN() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/number-is-nan@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/number-is-nan/package.json"}]},{"bom-ref":"pkg:npm/nw-pre-gyp-module-test@0.0.1?package-id=c9c21893f035082b","type":"library","name":"nw-pre-gyp-module-test","version":"0.0.1","description":"Node-webkit-based module test.","cpe":"cpe:2.3:a:nw-pre-gyp-module-test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/nw-pre-gyp-module-test@0.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module-test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module_test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module_test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json"}]},{"bom-ref":"pkg:npm/object-assign@4.1.1?package-id=4c17ebf4ed7ff6f6","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"object-assign","version":"4.1.1","description":"ES2015 `Object.assign()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/object-assign@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-assign/package.json"}]},{"bom-ref":"pkg:npm/object-copy@0.1.0?package-id=fa89cc94ecc25086","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"object-copy","version":"0.1.0","description":"Copy static properties, prototype properties, and descriptors from one object to another.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object-copy:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/object-copy@0.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/object-copy","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:object_copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-copy:object-copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-copy:object_copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_copy:object-copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_copy:object_copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_copy:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-copy/package.json"}]},{"bom-ref":"pkg:npm/object-inspect@1.13.4?package-id=9fa07124108ec4f5","type":"library","author":"James Halliday (http://substack.net)","name":"object-inspect","version":"1.13.4","description":"string representations of objects in node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*","purl":"pkg:npm/object-inspect@1.13.4","externalReferences":[{"url":"git://github.com/inspect-js/object-inspect.git","type":"distribution"},{"url":"https://github.com/inspect-js/object-inspect","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-inspect/package.json"}]},{"bom-ref":"pkg:npm/object-is@1.1.6?package-id=84b496a3bc09adcb","type":"library","author":"Jordan Harband","name":"object-is","version":"1.1.6","description":"ES2015-compliant shim for Object.is - differentiates between -0 and +0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-is:object-is:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/object-is@1.1.6","externalReferences":[{"url":"git://github.com/es-shims/object-is.git","type":"distribution"},{"url":"https://github.com/es-shims/object-is","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-is:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_is:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_is:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-is/package.json"}]},{"bom-ref":"pkg:npm/object-keys@1.1.1?package-id=f895e876218f5744","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes), Raynos , Nathan Rajlich , Ivan Starkov , Gary Katsevman ","name":"object-keys","version":"1.1.1","description":"An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/object-keys@1.1.1","externalReferences":[{"url":"git://github.com/ljharb/object-keys.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-keys:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_keys:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_keys:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-keys/package.json"}]},{"bom-ref":"pkg:npm/object-visit@1.0.1?package-id=60f0de0c3a8e2fbd","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"object-visit","version":"1.0.1","description":"Call a specified method on each value in the given object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object-visit:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/object-visit@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/object-visit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:object_visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-visit:object-visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-visit:object_visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_visit:object-visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_visit:object_visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_visit:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-visit/package.json"}]},{"bom-ref":"pkg:npm/object.assign@4.1.7?package-id=99e989384d4fde68","type":"library","author":"Jordan Harband","name":"object.assign","version":"4.1.7","description":"ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object.assign:object.assign:4.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/object.assign@4.1.7","externalReferences":[{"url":"git://github.com/ljharb/object.assign.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object.assign:4.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.assign/package.json"}]},{"bom-ref":"pkg:npm/object.defaults@1.1.0?package-id=367f49b07eb9d797","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Sobolev Nikita (https://github.com/sobolevn)","name":"object.defaults","version":"1.1.0","description":"Like `extend` but only copies missing properties/values to the target object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object.defaults:object.defaults:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/object.defaults@1.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/object.defaults","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:object.defaults:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.defaults/package.json"}]},{"bom-ref":"pkg:npm/object.map@1.0.1?package-id=929d9a3710694392","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"object.map","version":"1.0.1","description":"Similar to map for arrays, this creates a new object by calling the callback on each property of the original object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object.map:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/object.map@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/object.map","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object.map:object.map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.map/package.json"}]},{"bom-ref":"pkg:npm/object.pick@1.3.0?package-id=5e847d3bd979f56f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"object.pick","version":"1.3.0","description":"Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object.pick:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/object.pick@1.3.0","externalReferences":[{"url":"https://github.com/jonschlinkert/object.pick","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object.pick:object.pick:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.pick/package.json"}]},{"bom-ref":"pkg:npm/on-finished@2.3.0?package-id=eba7c3545387287a","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"on-finished","version":"2.3.0","description":"Execute a callback when a request closes, finishes, or errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/on-finished@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/on-finished/package.json"}]},{"bom-ref":"pkg:npm/on-finished@2.4.1?package-id=f038e79e9d5d2966","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"on-finished","version":"2.4.1","description":"Execute a callback when a request closes, finishes, or errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/on-finished@2.4.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/on-finished/package.json"}]},{"bom-ref":"pkg:npm/on-headers@1.1.0?package-id=4edf87114c9684eb","type":"library","author":"Douglas Christopher Wilson ","name":"on-headers","version":"1.1.0","description":"Execute a listener when a response is about to write headers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/on-headers@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/on-headers/package.json"}]},{"bom-ref":"pkg:npm/once@1.4.0?package-id=710fa9c43bb773a8","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"once","version":"1.4.0","description":"Run a function exactly one time","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/once@1.4.0","externalReferences":[{"url":"git://github.com/isaacs/once","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/once/package.json"}]},{"bom-ref":"pkg:npm/one-time@1.0.0?package-id=c572449b4ab3e7a6","type":"library","author":"Arnout Kazemier","name":"one-time","version":"1.0.0","description":"Run the supplied function exactly one time (once)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:one-time:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/one-time@1.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/one-time.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one-time:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one-time:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one_time:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one_time:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/one-time/package.json"}]},{"bom-ref":"pkg:npm/opentype.js@0.7.3?package-id=0a5d0e299d0ca888","type":"library","author":"Frederik De Bleser ","name":"opentype.js","version":"0.7.3","description":"OpenType font parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:opentype.js:opentype.js:0.7.3:*:*:*:*:*:*:*","purl":"pkg:npm/opentype.js@0.7.3","externalReferences":[{"url":"git://github.com/nodebox/opentype.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodebox:opentype.js:0.7.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/opentype.js/package.json"}]},{"bom-ref":"pkg:npm/os-homedir@1.0.2?package-id=52db215c8294fee6","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"os-homedir","version":"1.0.2","description":"Node.js 4 `os.homedir()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/os-homedir@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/os-homedir/package.json"}]},{"bom-ref":"pkg:npm/os-tmpdir@1.0.2?package-id=4374998874b59022","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"os-tmpdir","version":"1.0.2","description":"Node.js os.tmpdir() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/os-tmpdir@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/os-tmpdir/package.json"}]},{"bom-ref":"pkg:npm/osenv@0.1.5?package-id=1369b3372e58f531","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"osenv","version":"0.1.5","description":"Look up environment settings specific to different operating systems","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/osenv@0.1.5","externalReferences":[{"url":"https://github.com/npm/osenv","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:osenv:0.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/osenv/package.json"}]},{"bom-ref":"pkg:npm/otplib@12.0.1?package-id=5ff159c545ecf5e8","type":"library","author":"Gerald Yeo ","name":"otplib","version":"12.0.1","description":"HMAC-based (HOTP) and Time-based (TOTP) One-Time Password library","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:otplib:otplib:12.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/otplib@12.0.1","externalReferences":[{"url":"https://github.com/yeojz/otplib","type":"distribution"},{"url":"https://yeojz.otplib.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yeojz:otplib:12.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/otplib/package.json"}]},{"bom-ref":"pkg:npm/p-cancelable@0.4.1?package-id=0583de70fcdfc131","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-cancelable","version":"0.4.1","description":"Create a promise that can be canceled","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-cancelable@0.4.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-cancelable/package.json"}]},{"bom-ref":"pkg:npm/p-event@2.3.1?package-id=df4ea6677e364df8","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-event","version":"2.3.1","description":"Promisify an event by waiting for it to be emitted","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-event:p-event:2.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-event@2.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-event:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_event:p-event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_event:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-event/package.json"}]},{"bom-ref":"pkg:npm/p-finally@1.0.0?package-id=6dc32e80fda079a9","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-finally","version":"1.0.0","description":"`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-finally@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-finally:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_finally:p-finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_finally:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-finally/package.json"}]},{"bom-ref":"pkg:npm/p-is-promise@1.1.0?package-id=bf2a9cb36f7ff224","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-is-promise","version":"1.1.0","description":"Check if something is a promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-is-promise:p-is-promise:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-is-promise@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is-promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is_promise:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is_promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-is-promise/package.json"}]},{"bom-ref":"pkg:npm/p-limit@2.3.0?package-id=1e7a4b5a5a7aade9","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-limit","version":"2.3.0","description":"Run multiple promise-returning & async functions with limited concurrency","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-limit@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-limit:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_limit:p-limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_limit:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/p-limit/package.json"}]},{"bom-ref":"pkg:npm/p-locate@4.1.0?package-id=55f14ff67eedbaf2","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-locate","version":"4.1.0","description":"Get the first fulfilled promise that satisfies the provided testing function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-locate@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-locate:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_locate:p-locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_locate:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/p-locate/package.json"}]},{"bom-ref":"pkg:npm/p-map@4.0.0?package-id=e8a38305d2594577","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"p-map","version":"4.0.0","description":"Map over promises concurrently","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-map@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-map:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p-map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-map/package.json"}]},{"bom-ref":"pkg:npm/p-map@7.0.3?package-id=10f14e9199e11cc4","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"p-map","version":"7.0.3","description":"Map over promises concurrently","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-map:p-map:7.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/p-map@7.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-map:p_map:7.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p-map:7.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p_map:7.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-map:7.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_map:7.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacache/node_modules/p-map/package.json"}]},{"bom-ref":"pkg:npm/p-timeout@2.0.1?package-id=df05fe622aab59f4","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-timeout","version":"2.0.1","description":"Timeout a promise after a specified amount of time","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-timeout:p-timeout:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-timeout@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_timeout:p-timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-timeout/package.json"}]},{"bom-ref":"pkg:npm/p-try@2.2.0?package-id=cc75054caddacf72","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"p-try","version":"2.2.0","description":"`Start a promise chain","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-try@2.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-try:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_try:p-try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_try:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-try/package.json"}]},{"bom-ref":"pkg:npm/package-json-from-dist@1.0.1?package-id=966e804e2cdc19c3","type":"library","author":"Isaac Z. Schlueter (https://izs.me)","name":"package-json-from-dist","version":"1.0.1","description":"Load the local package.json from either src or dist folder","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/package-json-from-dist@1.0.1","externalReferences":[{"url":"git+https://github.com/isaacs/package-json-from-dist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/package-json-from-dist/package.json"}]},{"bom-ref":"pkg:npm/pako@0.2.9?package-id=b65616c181ce0703","type":"library","author":"Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin)","name":"pako","version":"0.2.9","description":"zlib port to javascript - fast, modularized, with browser support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodeca:pako:0.2.9:*:*:*:*:*:*:*","purl":"pkg:npm/pako@0.2.9","externalReferences":[{"url":"https://github.com/nodeca/pako","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pako/package.json"}]},{"bom-ref":"pkg:npm/parse-filepath@1.0.2?package-id=e056c65cb29d1cdc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"parse-filepath","version":"1.0.2","description":"Pollyfill for node.js `path.parse`, parses a filepath into an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parse-filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/parse-filepath@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/parse-filepath","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse-filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parse-filepath/package.json"}]},{"bom-ref":"pkg:npm/parse-passwd@1.0.0?package-id=fb103d20d587efac","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"parse-passwd","version":"1.0.0","description":"Parse a passwd file into a list of users.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parse-passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/parse-passwd@1.0.0","externalReferences":[{"url":"https://github.com/doowb/parse-passwd","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse-passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parse-passwd/package.json"}]},{"bom-ref":"pkg:npm/parseurl@1.3.3?package-id=742ccf9d8e4af8dc","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"parseurl","version":"1.3.3","description":"parse a url with memoization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/parseurl@1.3.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parseurl/package.json"}]},{"bom-ref":"pkg:npm/pascalcase@0.1.1?package-id=f056f3d05a093ab8","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"pascalcase","version":"0.1.1","description":"Convert a string to pascal-case.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:pascalcase:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/pascalcase@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/pascalcase","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pascalcase:pascalcase:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pascalcase/package.json"}]},{"bom-ref":"pkg:npm/path-exists@4.0.0?package-id=e34ca3dd718a6918","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"path-exists","version":"4.0.0","description":"Check if a path exists","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/path-exists@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-exists:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_exists:path-exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_exists:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-exists/package.json"}]},{"bom-ref":"pkg:npm/path-is-absolute@1.0.1?package-id=8bf9ef21aa2f3e3c","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"path-is-absolute","version":"1.0.1","description":"Node.js 0.12 path.isAbsolute() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-is-absolute@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-is-absolute/package.json"}]},{"bom-ref":"pkg:npm/path-key@3.1.1?package-id=0fdcd7cdef61a3e7","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"path-key","version":"3.1.1","description":"Get the PATH environment variable key cross-platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-key@3.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-key/package.json"}]},{"bom-ref":"pkg:npm/path-parse@1.0.7?package-id=5705871024a48530","type":"library","author":"Javier Blanco ","name":"path-parse","version":"1.0.7","description":"Node.js path.parse() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/path-parse@1.0.7","externalReferences":[{"url":"https://github.com/jbgutierrez/path-parse.git","type":"distribution"},{"url":"https://github.com/jbgutierrez/path-parse#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-parse/package.json"}]},{"bom-ref":"pkg:npm/path-root@0.1.1?package-id=03046e5f9c1c7d1f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"path-root","version":"0.1.1","description":"Get the root of a posix or windows filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:path-root:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-root@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/path-root","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-root/package.json"}]},{"bom-ref":"pkg:npm/path-root-regex@0.1.2?package-id=91e5c6fbec5920e7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"path-root-regex","version":"0.1.2","description":"Regular expression for getting the root of a posix or windows filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-root-regex:path-root-regex:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/path-root-regex@0.1.2","externalReferences":[{"url":"https://github.com/regexhq/path-root-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root-regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root_regex:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root_regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-root-regex/package.json"}]},{"bom-ref":"pkg:npm/path-scurry@1.11.1?package-id=ea725e26827e4925","type":"library","author":"Isaac Z. Schlueter (https://blog.izs.me)","name":"path-scurry","version":"1.11.1","description":"walk paths fast and efficiently","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-scurry@1.11.1","externalReferences":[{"url":"git+https://github.com/isaacs/path-scurry","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-scurry/package.json"}]},{"bom-ref":"pkg:npm/path-to-regexp@0.1.12?package-id=98e5b28a6af6071f","type":"library","name":"path-to-regexp","version":"0.1.12","description":"Express style path to RegExp utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.12:*:*:*:*:*:*:*","purl":"pkg:npm/path-to-regexp@0.1.12","externalReferences":[{"url":"https://github.com/pillarjs/path-to-regexp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-to-regexp:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_to_regexp:path-to-regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_to_regexp:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pillarjs:path-to-regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pillarjs:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-to:path-to-regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-to:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_to:path-to-regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_to:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-to-regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_to_regexp:0.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-to-regexp/package.json"}]},{"bom-ref":"pkg:npm/pdfkit@0.11.0?package-id=9db722276593f5ce","type":"library","author":"Devon Govett (http://badassjs.com/)","name":"pdfkit","version":"0.11.0","description":"A PDF generation library for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:foliojs:pdfkit:0.11.0:*:*:*:*:*:*:*","purl":"pkg:npm/pdfkit@0.11.0","externalReferences":[{"url":"https://github.com/foliojs/pdfkit.git","type":"distribution"},{"url":"http://pdfkit.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pdfkit:pdfkit:0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pdfkit/package.json"}]},{"bom-ref":"pkg:npm/peek-readable@4.1.0?package-id=a8a35d958d903684","type":"library","author":"Borewit (https://github.com/Borewit)","name":"peek-readable","version":"4.1.0","description":"Read and peek from a readable stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:peek-readable:peek-readable:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/peek-readable@4.1.0","externalReferences":[{"url":"git+https://github.com/Borewit/peek-readable","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek-readable:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek_readable:peek-readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek_readable:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek:peek-readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/peek-readable/package.json"}]},{"bom-ref":"pkg:npm/pend@1.2.0?package-id=12701b802402fca7","type":"library","author":"Andrew Kelley ","name":"pend","version":"1.2.0","description":"dead-simple optimistic async helper","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:andrewrk:pend:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/pend@1.2.0","externalReferences":[{"url":"git://github.com/andrewrk/node-pend.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pend:pend:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pend/package.json"}]},{"bom-ref":"pkg:npm/pg-connection-string@2.9.1?package-id=d277d5f3e63371d6","type":"library","author":"Blaine Bublitz (http://iceddev.com/)","name":"pg-connection-string","version":"2.9.1","description":"Functions for dealing with a PostgresSQL connection string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pg-connection-string:pg-connection-string:2.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/pg-connection-string@2.9.1","externalReferences":[{"url":"git://github.com/brianc/node-postgres.git","type":"distribution"},{"url":"https://github.com/brianc/node-postgres/tree/master/packages/pg-connection-string","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection-string:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection_string:pg-connection-string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection_string:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection:pg-connection-string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection:pg-connection-string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianc:pg-connection-string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianc:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg:pg-connection-string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg:pg_connection_string:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pg-connection-string/package.json"}]},{"bom-ref":"pkg:npm/picomatch@2.3.1?package-id=6a18d824b05476f0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"picomatch","version":"2.3.1","description":"Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:picomatch:2.3.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/picomatch@2.3.1","externalReferences":[{"url":"https://github.com/micromatch/picomatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/picomatch/package.json"}]},{"bom-ref":"pkg:npm/picomatch@4.0.3?package-id=ddb40e2a27feece6","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"picomatch","version":"4.0.3","description":"Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:picomatch:4.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/picomatch@4.0.3","externalReferences":[{"url":"https://github.com/micromatch/picomatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json"}]},{"bom-ref":"pkg:npm/pify@2.3.0?package-id=0dfe147bb8a24d6a","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pify","version":"2.3.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@2.3.0?package-id=ddba1125c77293de","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pify","version":"2.3.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@3.0.0?package-id=74f6afcb29e33215","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pify","version":"3.0.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@3.0.0?package-id=94b4540c59ceda21","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pify","version":"3.0.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@4.0.1?package-id=14675684a3b19742","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pify","version":"4.0.1","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pify@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pinkie@2.0.4?package-id=d2cce100ab18f798","type":"library","author":"Vsevolod Strukchinsky (github.com/floatdrop)","name":"pinkie","version":"2.0.4","description":"Itty bitty little widdle twinkie pinkie ES2015 Promise implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/pinkie@2.0.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pinkie/package.json"}]},{"bom-ref":"pkg:npm/pinkie-promise@2.0.1?package-id=cc6a968ba889b638","type":"library","author":"Vsevolod Strukchinsky (github.com/floatdrop)","name":"pinkie-promise","version":"2.0.1","description":"ES2015 Promise ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pinkie-promise@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie-promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie_promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie_promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie:pinkie-promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pinkie-promise/package.json"}]},{"bom-ref":"pkg:npm/png-js@1.0.0?package-id=d1fd77c50528b581","type":"library","author":"Devon Govett (http://badassjs.com/)","name":"png-js","version":"1.0.0","description":"A PNG decoder in JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:png-js:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/png-js@1.0.0","externalReferences":[{"url":"https://github.com/devongovett/png.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:png_js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png-js:png-js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png-js:png_js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png_js:png-js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png_js:png_js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png:png-js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png:png_js:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/png-js/package.json"}]},{"bom-ref":"pkg:npm/posix-character-classes@0.1.1?package-id=a3e60bea1b625082","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"posix-character-classes","version":"0.1.1","description":"POSIX character classes for creating regular expressions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:posix-character-classes:posix-character-classes:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/posix-character-classes@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/posix-character-classes","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix-character-classes:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix_character_classes:posix-character-classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix_character_classes:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix-character:posix-character-classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix-character:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix_character:posix-character-classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix_character:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:posix-character-classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix:posix-character-classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:posix:posix_character_classes:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/posix-character-classes/package.json"}]},{"bom-ref":"pkg:npm/possible-typed-array-names@1.1.0?package-id=fd2e1cd61be49f02","type":"library","author":"Jordan Harband ","name":"possible-typed-array-names","version":"1.1.0","description":"A simple list of possible Typed Array names.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:possible-typed-array-names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/possible-typed-array-names@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/possible-typed-array-names.git","type":"distribution"},{"url":"https://github.com/ljharb/possible-typed-array-names#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array-names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array_names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array_names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/possible-typed-array-names/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@5.3.6?package-id=4dc75afb90a1e180","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)","name":"prebuild-install","version":"5.3.6","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:5.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@5.3.6","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@7.1.3?package-id=3b6455381633cdb0","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)","name":"prebuild-install","version":"7.1.3","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@7.1.3","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@7.1.3?package-id=008da708a93ab8fd","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)","name":"prebuild-install","version":"7.1.3","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@7.1.3","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prepend-http@2.0.0?package-id=b8fe3bfab62a882d","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"prepend-http","version":"2.0.0","description":"Prepend `http://` to humanized URLs like todomvc.com and localhost","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prepend-http:prepend-http:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/prepend-http@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend-http:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend_http:prepend-http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend_http:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend:prepend-http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prepend-http/package.json"}]},{"bom-ref":"pkg:npm/pretty-bytes@4.0.2?package-id=4d91b0988d9fe55f","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"pretty-bytes","version":"4.0.2","description":"Convert bytes to a human readable string: 1337 → 1.34 kB","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pretty-bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/pretty-bytes@4.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty-bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty_bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty_bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty:pretty-bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json"}]},{"bom-ref":"pkg:npm/proc-log@5.0.0?package-id=b7e53f78a8e3b5aa","type":"library","author":"GitHub Inc.","name":"proc-log","version":"5.0.0","description":"just emit 'log' events on the process object","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/proc-log@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/proc-log.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proc-log/package.json"}]},{"bom-ref":"pkg:npm/process@0.11.10?package-id=86b4e66d55ba762f","type":"library","author":"Roman Shtylman ","name":"process","version":"0.11.10","description":"process information for node.js and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shtylman:process:0.11.10:*:*:*:*:*:*:*","purl":"pkg:npm/process@0.11.10","externalReferences":[{"url":"git://github.com/shtylman/node-process.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process:0.11.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/process/package.json"}]},{"bom-ref":"pkg:npm/process-nextick-args@2.0.1?package-id=2736f58329e89e68","type":"library","name":"process-nextick-args","version":"2.0.1","description":"process.nextTick but always with args","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/process-nextick-args@2.0.1","externalReferences":[{"url":"https://github.com/calvinmetcalf/process-nextick-args.git","type":"distribution"},{"url":"https://github.com/calvinmetcalf/process-nextick-args","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:calvinmetcalf:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:calvinmetcalf:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/process-nextick-args/package.json"}]},{"bom-ref":"pkg:npm/prom-client@14.2.0?package-id=dc189933201119ea","type":"library","author":"Simon Nyberg","name":"prom-client","version":"14.2.0","description":"Client for prometheus","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:prom-client:prom-client:14.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/prom-client@14.2.0","externalReferences":[{"url":"https://github.com/siimon/prom-client","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom-client:prom_client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom_client:prom-client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom_client:prom_client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:siimon:prom-client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:siimon:prom_client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom:prom-client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom:prom_client:14.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prom-client/package.json"}]},{"bom-ref":"pkg:npm/promise@7.3.1?package-id=d0870412585e133d","type":"library","author":"ForbesLindesay","name":"promise","version":"7.3.1","description":"Bare bones Promises/A+ implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:promise:promise:7.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise@7.3.1","externalReferences":[{"url":"https://github.com/then/promise.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:promise:7.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise/package.json"}]},{"bom-ref":"pkg:npm/promise-inflight@1.0.1?package-id=cb2d8de0d226aacd","type":"library","author":"Rebecca Turner (http://re-becca.org/)","name":"promise-inflight","version":"1.0.1","description":"One promise for multiple requests in flight to avoid async duplication","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise-inflight@1.0.1","externalReferences":[{"url":"git+https://github.com/iarna/promise-inflight.git","type":"distribution"},{"url":"https://github.com/iarna/promise-inflight#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise-inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise-inflight/package.json"}]},{"bom-ref":"pkg:npm/promise-retry@2.0.1?package-id=14baa7b321b17fc4","type":"library","author":"IndigoUnited (http://indigounited.com)","name":"promise-retry","version":"2.0.1","description":"Retries a function that returns a promise, leveraging the power of the retry module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise-retry@2.0.1","externalReferences":[{"url":"git://github.com/IndigoUnited/node-promise-retry.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise-retry/package.json"}]},{"bom-ref":"pkg:npm/proper-lockfile@1.2.0?package-id=5dea0a58544c3253","type":"library","author":"IndigoUnited (http://indigounited.com)","name":"proper-lockfile","version":"1.2.0","description":"A inter-process and inter-machine lockfile utility that works on a local or network file system.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:proper-lockfile:proper-lockfile:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/proper-lockfile@1.2.0","externalReferences":[{"url":"git://github.com/IndigoUnited/node-proper-lockfile.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:proper-lockfile:proper_lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proper_lockfile:proper-lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proper_lockfile:proper_lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:proper-lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:proper_lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proper:proper-lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proper:proper_lockfile:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proper-lockfile/package.json"}]},{"bom-ref":"pkg:npm/proxy-addr@2.0.7?package-id=e9d03164ed043197","type":"library","author":"Douglas Christopher Wilson ","name":"proxy-addr","version":"2.0.7","description":"Determine address of proxied request","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/proxy-addr@2.0.7","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proxy-addr/package.json"}]},{"bom-ref":"pkg:npm/pug@3.0.3?package-id=7bf5959de1402d6d","type":"library","author":"TJ Holowaychuk , Forbes Lindesay , Matthias Le Brun , Joshua Appelman , Jonathan Ong , Alex Kocharin , Hemanth , Timothy Gu , Andreas Lubbe ","name":"pug","version":"3.0.3","description":"A clean, whitespace-sensitive template language for writing HTML","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:pug:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/pug@3.0.3","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug","type":"distribution"},{"url":"https://pugjs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug/package.json"}]},{"bom-ref":"pkg:npm/pug-attrs@3.0.0?package-id=8ccd7e8a2286d99c","type":"library","author":"Forbes Lindesay","name":"pug-attrs","version":"3.0.0","description":"Generate code for Pug attributes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-attrs@3.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-attrs","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-attrs/package.json"}]},{"bom-ref":"pkg:npm/pug-code-gen@3.0.3?package-id=2466810c666d3b5e","type":"library","author":"Forbes Lindesay","name":"pug-code-gen","version":"3.0.3","description":"Default code-generator for pug. It generates HTML via a JavaScript template function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:pug-code-gen:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/pug-code-gen@3.0.3","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-code-gen","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-code-gen/package.json"}]},{"bom-ref":"pkg:npm/pug-error@2.1.0?package-id=06722d2c34c689cc","type":"library","author":"Forbes Lindesay","name":"pug-error","version":"2.1.0","description":"Standard error objects for pug","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-error:pug-error:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-error@2.1.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-error","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-error:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_error:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_error:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-error/package.json"}]},{"bom-ref":"pkg:npm/pug-filters@4.0.0?package-id=5d3376b6724b0ba5","type":"library","author":"Forbes Lindesay","name":"pug-filters","version":"4.0.0","description":"Code for processing filters in pug templates","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-filters:pug-filters:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-filters@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-filters","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-filters:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_filters:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_filters:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-filters/package.json"}]},{"bom-ref":"pkg:npm/pug-lexer@5.0.1?package-id=5dc82d87668bae8e","type":"library","author":"ForbesLindesay","name":"pug-lexer","version":"5.0.1","description":"The pug lexer (takes a string and converts it to an array of tokens)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pug-lexer@5.0.1","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-lexer","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-lexer/package.json"}]},{"bom-ref":"pkg:npm/pug-linker@4.0.0?package-id=e949463e431e1776","type":"library","author":"Forbes Lindesay","name":"pug-linker","version":"4.0.0","description":"Link multiple pug ASTs together using include/extends","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-linker:pug-linker:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-linker@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-linker","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-linker:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_linker:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_linker:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-linker/package.json"}]},{"bom-ref":"pkg:npm/pug-load@3.0.0?package-id=b831a94ec83ee646","type":"library","author":"ForbesLindesay","name":"pug-load","version":"3.0.0","description":"The Pug loader is responsible for loading the depenendencies of a given Pug file.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-load:pug-load:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-load@3.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-load","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-load:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_load:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_load:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-load/package.json"}]},{"bom-ref":"pkg:npm/pug-parser@6.0.0?package-id=ae3ce07497258f6e","type":"library","author":"ForbesLindesay","name":"pug-parser","version":"6.0.0","description":"The pug parser (takes an array of tokens and converts it to an abstract syntax tree)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-parser:pug-parser:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-parser@6.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-parser","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-parser:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_parser:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_parser:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-parser/package.json"}]},{"bom-ref":"pkg:npm/pug-runtime@3.0.1?package-id=eff466aded883d14","type":"library","author":"ForbesLindesay","name":"pug-runtime","version":"3.0.1","description":"The runtime components for the pug templating language","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pug-runtime@3.0.1","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-runtime","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-runtime/package.json"}]},{"bom-ref":"pkg:npm/pug-strip-comments@2.0.0?package-id=678b3dbf2205543b","type":"library","author":"Timothy Gu ","name":"pug-strip-comments","version":"2.0.0","description":"Strip comments from a Pug token stream (from the lexer)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-strip-comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-strip-comments@2.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-strip-comments","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip-comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip_comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip_comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-strip-comments/package.json"}]},{"bom-ref":"pkg:npm/pug-walk@2.0.0?package-id=8da935ca9924488f","type":"library","author":"ForbesLindesay","name":"pug-walk","version":"2.0.0","description":"Walk and transform a pug AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-walk:pug-walk:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-walk@2.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-walk","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-walk:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_walk:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_walk:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-walk/package.json"}]},{"bom-ref":"pkg:npm/pump@3.0.3?package-id=8914540a70ae1bae","type":"library","author":"Mathias Buus Madsen ","name":"pump","version":"3.0.3","description":"pipe streams together and close all of them if one of them closes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mafintosh:pump:3.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/pump@3.0.3","externalReferences":[{"url":"git://github.com/mafintosh/pump.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pump:pump:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pump/package.json"}]},{"bom-ref":"pkg:npm/qs@6.13.0?package-id=f1485a5d8cce1397","type":"library","author":"Jordan Harband (http://ljharb.codes)","name":"qs","version":"6.13.0","description":"A querystring parser that supports nesting and arrays, with a depth limit","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:qs_project:qs:6.13.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/qs@6.13.0","externalReferences":[{"url":"https://github.com/ljharb/qs.git","type":"distribution"},{"url":"https://github.com/ljharb/qs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/qs/package.json"}]},{"bom-ref":"pkg:npm/query-string@5.1.1?package-id=853a5626da6a5619","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"query-string","version":"5.1.1","description":"Parse and stringify URL query strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:query-string:query-string:5.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/query-string@5.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:query-string:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query_string:query-string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query_string:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query:query-string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/query-string/package.json"}]},{"bom-ref":"pkg:npm/range-parser@1.2.1?package-id=044253d4d9efad62","type":"library","author":"TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson , James Wyatt Cready , Jonathan Ong (http://jongleberry.com)","name":"range-parser","version":"1.2.1","description":"Range header field string parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/range-parser@1.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/range-parser/package.json"}]},{"bom-ref":"pkg:npm/range_check@2.0.4?package-id=af0ebff91edbc1f3","type":"library","author":"Kevin Whitman (https://github.com/keverw)","name":"range_check","version":"2.0.4","description":"This is a simple module to validate IP address, check ip address version, check if ip is within a range.","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:range-check:range-check:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/range_check@2.0.4","externalReferences":[{"url":"https://github.com/keverw/range_check","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:range-check:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_check:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_check:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:keverw:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:keverw:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/range_check/package.json"}]},{"bom-ref":"pkg:npm/raw-body@2.5.2?package-id=52a26984998171dd","type":"library","author":"Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson , Raynos ","name":"raw-body","version":"2.5.2","description":"Get and validate the raw body of a readable stream.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:raw-body:raw-body:2.5.2:*:*:*:*:*:*:*","purl":"pkg:npm/raw-body@2.5.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw-body:raw_body:2.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw_body:raw-body:2.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw_body:raw_body:2.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw:raw-body:2.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw:raw_body:2.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/raw-body/package.json"}]},{"bom-ref":"pkg:npm/rc@1.2.8?package-id=2d76d88e8720a8a1","type":"library","author":"Dominic Tarr (dominictarr.com)","name":"rc","version":"1.2.8","description":"hardwired configuration loader","licenses":[{"expression":"BSD-2-Clause OR MIT OR Apache-2.0"}],"cpe":"cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*","purl":"pkg:npm/rc@1.2.8","externalReferences":[{"url":"https://github.com/dominictarr/rc.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@1.0.34?package-id=8348cfc6c7b64606","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"readable-stream","version":"1.0.34","description":"Streams2, a user-land copy of the stream library from Node.js v0.10.x","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:1.0.34:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@1.0.34","externalReferences":[{"url":"git://github.com/isaacs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@2.3.8?package-id=e45800b68fe2e352","type":"library","name":"readable-stream","version":"2.3.8","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@2.3.8","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=b2a0b92f8db52b84","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=3b2c974f056cc985","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=187f639f1f03fced","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=885d0609cac9e686","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@4.7.0?package-id=2735fe3b5acbeffc","type":"library","name":"readable-stream","version":"4.7.0","description":"Node.js Streams, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:4.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@4.7.0","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"},{"url":"https://github.com/nodejs/readable-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-web-to-node-stream@3.0.4?package-id=09082485e53cd98e","type":"library","author":"Borewit (https://github.com/Borewit)","name":"readable-web-to-node-stream","version":"3.0.4","description":"Converts a Web-API readable-stream into a Node readable-stream.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-web-to-node-stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/readable-web-to-node-stream@3.0.4","externalReferences":[{"url":"https://github.com/Borewit/readable-web-to-node-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node-stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node_stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node_stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/package.json"}]},{"bom-ref":"pkg:npm/readdirp@3.5.0?package-id=65104416f2d8a295","type":"library","author":"Thorsten Lorenz (thlorenz.com), Thorsten Lorenz (thlorenz.com), Paul Miller (https://paulmillr.com)","name":"readdirp","version":"3.5.0","description":"Recursive version of fs.readdir with streaming API.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:paulmillr:readdirp:3.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/readdirp@3.5.0","externalReferences":[{"url":"git://github.com/paulmillr/readdirp.git","type":"distribution"},{"url":"https://github.com/paulmillr/readdirp","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readdirp:readdirp:3.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readdirp/package.json"}]},{"bom-ref":"pkg:npm/rechoir@0.7.1?package-id=2518eea3acdbfbf5","type":"library","author":"Gulp Team (http://gulpjs.com/), Blaine Bublitz , Tyler Kellen (http://goingslowly.com/)","name":"rechoir","version":"0.7.1","description":"Prepare a node environment to require files with different extensions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rechoir:rechoir:0.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/rechoir@0.7.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rechoir/package.json"}]},{"bom-ref":"pkg:npm/recursedir-comparisons@0.0.0?package-id=d87f050eb47957d6","type":"library","author":"Ryan Day ","name":"recursedir-comparisons","version":"0.0.0","cpe":"cpe:2.3:a:recursedir-comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/recursedir-comparisons@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir-comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir_comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir_comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walkdir/test/comparison/package.json"}]},{"bom-ref":"pkg:npm/regex-not@1.0.2?package-id=1d3af5bdc58fa7fa","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"regex-not","version":"1.0.2","description":"Create a javascript regular expression for matching everything except for the given string.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:regex-not:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/regex-not@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/regex-not","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:regex_not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex-not:regex-not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex-not:regex_not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex_not:regex-not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex_not:regex_not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex:regex-not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regex:regex_not:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/regex-not/package.json"}]},{"bom-ref":"pkg:npm/regexp.prototype.flags@1.5.4?package-id=6817e470495335ca","type":"library","author":"Jordan Harband ","name":"regexp.prototype.flags","version":"1.5.4","description":"ES6 spec-compliant RegExp.prototype.flags shim.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*","purl":"pkg:npm/regexp.prototype.flags@1.5.4","externalReferences":[{"url":"git://github.com/es-shims/RegExp.prototype.flags.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/regexp.prototype.flags/package.json"}]},{"bom-ref":"pkg:npm/remove-trailing-separator@1.1.0?package-id=2861850f21cfc870","type":"library","author":"darsain","name":"remove-trailing-separator","version":"1.1.0","description":"Removes separators from the end of the string.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/remove-trailing-separator@1.1.0","externalReferences":[{"url":"git+https://github.com/darsain/remove-trailing-separator.git","type":"distribution"},{"url":"https://github.com/darsain/remove-trailing-separator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing-separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing_separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing_separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:darsain:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:darsain:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/remove-trailing-separator/package.json"}]},{"bom-ref":"pkg:npm/repeat-element@1.1.4?package-id=137350a4dc0decdd","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"repeat-element","version":"1.1.4","description":"Create an array by repeating the given value n times.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:repeat-element:repeat-element:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/repeat-element@1.1.4","externalReferences":[{"url":"https://github.com/jonschlinkert/repeat-element","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat-element:repeat_element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat_element:repeat-element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat_element:repeat_element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:repeat-element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:repeat_element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat:repeat-element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat:repeat_element:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/repeat-element/package.json"}]},{"bom-ref":"pkg:npm/repeat-string@1.6.1?package-id=4bd94740ed69ab7f","type":"library","author":"Jon Schlinkert (http://github.com/jonschlinkert), Brian Woodward (https://github.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Linus Unnebäck (http://linus.unnebäck.se), Thijs Busser (http://tbusser.net), Titus (wooorm.com)","name":"repeat-string","version":"1.6.1","description":"Repeat the given string n times. Fastest implementation for repeating a string.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:repeat-string:1.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/repeat-string@1.6.1","externalReferences":[{"url":"https://github.com/jonschlinkert/repeat-string","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:repeat_string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat-string:repeat-string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat-string:repeat_string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat_string:repeat-string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat_string:repeat_string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat:repeat-string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:repeat:repeat_string:1.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/repeat-string/package.json"}]},{"bom-ref":"pkg:npm/replace@1.2.2?package-id=ca8eb97223e41afa","type":"library","author":"Alessandro Maclaine ","name":"replace","version":"1.2.2","description":"Command line search and replace utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ALMaclaine:replace:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/replace@1.2.2","externalReferences":[{"url":"https://github.com/ALMaclaine/replace","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:replace:replace:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/package.json"}]},{"bom-ref":"pkg:npm/require-directory@2.1.1?package-id=9e446f6c303bc48a","type":"library","author":"Troy Goode (http://github.com/troygoode/), Troy Goode ","name":"require-directory","version":"2.1.1","description":"Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/require-directory@2.1.1","externalReferences":[{"url":"git://github.com/troygoode/node-require-directory.git","type":"distribution"},{"url":"https://github.com/troygoode/node-require-directory/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:troygoode:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:troygoode:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/require-directory/package.json"}]},{"bom-ref":"pkg:npm/require-main-filename@2.0.0?package-id=b1e08cf266302e36","type":"library","author":"Ben Coe ","name":"require-main-filename","version":"2.0.0","description":"shim for require.main.filename() that works in as many environments as possible","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/require-main-filename@2.0.0","externalReferences":[{"url":"git+ssh://git@github.com/yargs/require-main-filename.git","type":"distribution"},{"url":"https://github.com/yargs/require-main-filename#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main-filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main_filename:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main_filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/require-main-filename/package.json"}]},{"bom-ref":"pkg:npm/resolve@1.22.10?package-id=23786f79a36d2b08","type":"library","author":"James Halliday (http://substack.net)","name":"resolve","version":"1.22.10","description":"resolve like require.resolve() on behalf of files asynchronously and synchronously","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:browserify:resolve:1.22.10:*:*:*:*:*:*:*","purl":"pkg:npm/resolve@1.22.10","externalReferences":[{"url":"git://github.com/browserify/resolve.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve:1.22.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/package.json"}]},{"bom-ref":"pkg:npm/resolve-dir@1.0.1?package-id=9f75a3edbb3cad1f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"resolve-dir","version":"1.0.1","description":"Resolve a directory that is either local, global or in the user's home directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:resolve-dir:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/resolve-dir@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/resolve-dir","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve-dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve-dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve-dir/package.json"}]},{"bom-ref":"pkg:npm/resolve-url@0.2.1?package-id=f9bcd281aa80f4b7","type":"library","author":"Simon Lydell","name":"resolve-url","version":"0.2.1","description":"Like Node.js’ `path.resolve`/`url.resolve` for the browser.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:resolve-url:resolve-url:0.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/resolve-url@0.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve-url:resolve_url:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_url:resolve-url:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_url:resolve_url:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve-url:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve_url:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve-url/package.json"}]},{"bom-ref":"pkg:npm/responselike@1.0.2?package-id=ed930aa2536ba676","type":"library","author":"lukechilds","name":"responselike","version":"1.0.2","description":"A response-like object for mocking a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:responselike:responselike:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/responselike@1.0.2","externalReferences":[{"url":"https://github.com/lukechilds/responselike.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:responselike:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/responselike/package.json"}]},{"bom-ref":"pkg:npm/restructure@2.0.1?package-id=72439ad06e2b3313","type":"library","author":"Devon Govett ","name":"restructure","version":"2.0.1","description":"Declaratively encode and decode binary data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:restructure:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/restructure@2.0.1","externalReferences":[{"url":"git://github.com/devongovett/restructure.git","type":"distribution"},{"url":"https://github.com/devongovett/restructure","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:restructure:restructure:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/restructure/package.json"}]},{"bom-ref":"pkg:npm/ret@0.1.15?package-id=807028276e1a74fa","type":"library","author":"Roly Fentanes (https://github.com/fent)","name":"ret","version":"0.1.15","description":"Tokenizes a string that represents a regular expression.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fent:ret:0.1.15:*:*:*:*:*:*:*","purl":"pkg:npm/ret@0.1.15","externalReferences":[{"url":"git://github.com/fent/ret.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ret:ret:0.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ret/package.json"}]},{"bom-ref":"pkg:npm/retry@0.10.1?package-id=0c33d19d44c68f42","type":"library","author":"Tim Koschützki (http://debuggable.com/)","name":"retry","version":"0.10.1","description":"Abstraction for exponential and custom retry strategies for failed operations.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tim-kos:retry:0.10.1:*:*:*:*:*:*:*","purl":"pkg:npm/retry@0.10.1","externalReferences":[{"url":"git://github.com/tim-kos/node-retry.git","type":"distribution"},{"url":"https://github.com/tim-kos/node-retry","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry:0.10.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proper-lockfile/node_modules/retry/package.json"}]},{"bom-ref":"pkg:npm/retry@0.12.0?package-id=94d18c1fed85159e","type":"library","author":"Tim Koschützki (http://debuggable.com/)","name":"retry","version":"0.12.0","description":"Abstraction for exponential and custom retry strategies for failed operations.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*","purl":"pkg:npm/retry@0.12.0","externalReferences":[{"url":"git://github.com/tim-kos/node-retry.git","type":"distribution"},{"url":"https://github.com/tim-kos/node-retry","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/retry/package.json"}]},{"bom-ref":"pkg:npm/retry-as-promised@7.1.1?package-id=de1666362d2f9e71","type":"library","author":"Mick Hansen ","name":"retry-as-promised","version":"7.1.1","description":"Retry a failed promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:retry-as-promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/retry-as-promised@7.1.1","externalReferences":[{"url":"https://github.com/mickhansen/retry-as-promised.git","type":"distribution"},{"url":"https://github.com/mickhansen/retry-as-promised","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as-promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as_promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as_promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mickhansen:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mickhansen:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/retry-as-promised/package.json"}]},{"bom-ref":"pkg:npm/rimraf@2.7.1?package-id=70042425a5220355","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"rimraf","version":"2.7.1","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@2.7.1","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/rimraf@2.7.1?package-id=1eeeb0ed5ba72dc3","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"rimraf","version":"2.7.1","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@2.7.1","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/rimraf@2.7.1?package-id=3ec37d268ba050db","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"rimraf","version":"2.7.1","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@2.7.1","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/rimraf@3.0.2?package-id=78af31b313457edd","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"rimraf","version":"3.0.2","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@3.0.2","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=fc2fbde7d1e8d215","type":"library","author":"Feross Aboukhadijeh (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=73c00d57a0c43943","type":"library","author":"Feross Aboukhadijeh (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=82e1e95a5f60492f","type":"library","author":"Feross Aboukhadijeh (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.2.1?package-id=f430730abde414bf","type":"library","author":"Feross Aboukhadijeh (https://feross.org)","name":"safe-buffer","version":"5.2.1","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.2.1","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-regex@1.1.0?package-id=5d40f8a44a274991","type":"library","author":"James Halliday (http://substack.net)","name":"safe-regex","version":"1.1.0","description":"detect possibly catastrophic, exponential-time regular expressions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-regex:safe-regex:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/safe-regex@1.1.0","externalReferences":[{"url":"git://github.com/substack/safe-regex.git","type":"distribution"},{"url":"https://github.com/substack/safe-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex:safe_regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe-regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe_regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:safe-regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:safe_regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_regex:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-regex/package.json"}]},{"bom-ref":"pkg:npm/safe-regex-test@1.1.0?package-id=5b11c5020ef5c373","type":"library","author":"Jordan Harband ","name":"safe-regex-test","version":"1.1.0","description":"Give a regex, get a robust predicate function that tests it against a string.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-regex-test:safe-regex-test:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/safe-regex-test@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/safe-regex-test.git","type":"distribution"},{"url":"https://github.com/ljharb/safe-regex-test#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex-test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex_test:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex_test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-regex-test/package.json"}]},{"bom-ref":"pkg:npm/safe-stable-stringify@2.5.0?package-id=e703782eb7d38cbf","type":"library","author":"Ruben Bridgewater","name":"safe-stable-stringify","version":"2.5.0","description":"Deterministic and safely JSON.stringify to quickly serialize JavaScript objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-stable-stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/safe-stable-stringify@2.5.0","externalReferences":[{"url":"git+https://github.com/BridgeAR/safe-stable-stringify.git","type":"distribution"},{"url":"https://github.com/BridgeAR/safe-stable-stringify#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable-stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable_stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable_stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:BridgeAR:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:BridgeAR:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-stable-stringify/package.json"}]},{"bom-ref":"pkg:npm/safer-buffer@2.1.2?package-id=f5a29320fdbea1eb","type":"library","author":"Nikita Skovoroda (https://github.com/ChALkeR)","name":"safer-buffer","version":"2.1.2","description":"Modern Buffer API polyfill without footguns","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safer-buffer@2.1.2","externalReferences":[{"url":"git+https://github.com/ChALkeR/safer-buffer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safer-buffer/package.json"}]},{"bom-ref":"pkg:npm/samsam@1.1.2?package-id=7d0a41d20518fc9d","type":"library","author":"Christian Johansen, Christian Johansen (http://cjohansen.no), August Lilleaas (http://augustl.com), Daniel Wittner (https://github.com/dwittner)","name":"samsam","version":"1.1.2","description":"Value identification and comparison functions","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:busterjs:samsam:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/samsam@1.1.2","externalReferences":[{"url":"https://github.com/busterjs/samsam.git","type":"distribution"},{"url":"http://busterjs.org/docs/buster-assertions","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:samsam:samsam:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/samsam/package.json"}]},{"bom-ref":"pkg:npm/sanitize-filename@1.6.3?package-id=2556f6118c73f0c7","type":"library","author":"Parsha Pourkhomami","name":"sanitize-filename","version":"1.6.3","description":"Sanitize a string for use as a filename","licenses":[{"expression":"WTFPL OR ISC"}],"cpe":"cpe:2.3:a:sanitize-filename:sanitize-filename:1.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/sanitize-filename@1.6.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize-filename:sanitize_filename:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize_filename:sanitize-filename:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize_filename:sanitize_filename:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize:sanitize-filename:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize:sanitize_filename:1.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-filename/package.json"}]},{"bom-ref":"pkg:npm/sanitize-html@1.4.2?package-id=5de04e7baabe2ecd","type":"library","author":"P'unk Avenue LLC","name":"sanitize-html","version":"1.4.2","description":"Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:apostrophecms:sanitize-html:1.4.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/sanitize-html@1.4.2","externalReferences":[{"url":"https://github.com/punkave/sanitize-html.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:punkave:sanitize-html:1.4.2:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/package.json"}]},{"bom-ref":"pkg:npm/sax@1.4.1?package-id=fcc1407dd0a8538d","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"sax","version":"1.4.1","description":"An evented streaming XML parser in JavaScript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:sax:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/sax@1.4.1","externalReferences":[{"url":"git://github.com/isaacs/sax-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sax:sax:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sax/package.json"}]},{"bom-ref":"pkg:npm/seek-bzip@1.0.6?package-id=f8fdf612dd1ad055","type":"library","author":"C. Scott Ananian (http://cscott.net), Eli Skeggs, Kevin Kwok, Rob Landley (http://landley.net)","name":"seek-bzip","version":"1.0.6","description":"a pure-JavaScript Node.JS module for random-access decoding bzip2 data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/seek-bzip@1.0.6","externalReferences":[{"url":"https://github.com/cscott/seek-bzip.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek-bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek_bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek_bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cscott:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cscott:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/seek-bzip/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=d0e0ed413665ac06","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-dependencies/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=f25d9bd3bec76c56","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-dir/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=4d834fe9188f916e","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-abi/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=27467d214748b540","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@7.7.2?package-id=a3325d28145ec2dc","type":"library","author":"GitHub Inc.","name":"semver","version":"7.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:7.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@7.7.2","externalReferences":[{"url":"git+https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/send@0.19.0?package-id=128707907b8a54a0","type":"library","author":"TJ Holowaychuk , Douglas Christopher Wilson , James Wyatt Cready , Jesús Leganés Combarro ","name":"send","version":"0.19.0","description":"Better streaming static file server with Range and conditional-GET support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:send_project:send:0.19.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/send@0.19.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/package.json"}]},{"bom-ref":"pkg:npm/sequelize@6.37.7?package-id=5c42656cd2e4e437","type":"library","name":"sequelize","version":"6.37.7","description":"Sequelize is a promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, Microsoft SQL Server, Amazon Redshift and Snowflake’s Data Cloud. It features solid transaction support, relations, eager and lazy loading, read replication and more.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sequelizejs:sequelize:6.37.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/sequelize@6.37.7","externalReferences":[{"url":"https://github.com/sequelize/sequelize.git","type":"distribution"},{"url":"https://sequelize.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize/package.json"}]},{"bom-ref":"pkg:npm/sequelize-pool@7.1.0?package-id=02439a31995a1856","type":"library","author":"Sushant ","name":"sequelize-pool","version":"7.1.0","description":"Resource pooling for Node.JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sequelize-pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/sequelize-pool@7.1.0","externalReferences":[{"url":"http://github.com/sushantdhiman/sequelize-pool.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize-pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize_pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize_pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sushantdhiman:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sushantdhiman:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize-pool/package.json"}]},{"bom-ref":"pkg:npm/serve-index@1.9.1?package-id=b52a049c8b80d678","type":"library","author":"Douglas Christopher Wilson ","name":"serve-index","version":"1.9.1","description":"Serve directory listings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:serve-index:serve-index:1.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/serve-index@1.9.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve-index:serve_index:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_index:serve-index:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_index:serve_index:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve-index:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve_index:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/package.json"}]},{"bom-ref":"pkg:npm/serve-static@1.16.2?package-id=a87c542bd7108f54","type":"library","author":"Douglas Christopher Wilson ","name":"serve-static","version":"1.16.2","description":"Serve static files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:serve-static:serve-static:1.16.2:*:*:*:*:*:*:*","purl":"pkg:npm/serve-static@1.16.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve-static:serve_static:1.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_static:serve-static:1.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_static:serve_static:1.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve-static:1.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve_static:1.16.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-static/package.json"}]},{"bom-ref":"pkg:npm/set-blocking@2.0.0?package-id=ed8a734f12c4bdef","type":"library","author":"Ben Coe ","name":"set-blocking","version":"2.0.0","description":"set blocking stdio and stderr ensuring that terminal output does not truncate","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/set-blocking@2.0.0","externalReferences":[{"url":"git+https://github.com/yargs/set-blocking.git","type":"distribution"},{"url":"https://github.com/yargs/set-blocking#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-blocking/package.json"}]},{"bom-ref":"pkg:npm/set-function-length@1.2.2?package-id=3b436f83ca3e3766","type":"library","author":"Jordan Harband ","name":"set-function-length","version":"1.2.2","description":"Set a function's length property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:set-function-length:set-function-length:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/set-function-length@1.2.2","externalReferences":[{"url":"git+https://github.com/ljharb/set-function-length.git","type":"distribution"},{"url":"https://github.com/ljharb/set-function-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function-length:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_length:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_length:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-function-length/package.json"}]},{"bom-ref":"pkg:npm/set-function-name@2.0.2?package-id=f58313a577d972b0","type":"library","author":"Jordan Harband ","name":"set-function-name","version":"2.0.2","description":"Set a function's name property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:set-function-name:set-function-name:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/set-function-name@2.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/set-function-name.git","type":"distribution"},{"url":"https://github.com/ljharb/set-function-name#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function-name:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_name:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_name:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-function-name/package.json"}]},{"bom-ref":"pkg:npm/set-value@2.0.1?package-id=7a710a654ecad2c9","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), , Vadim Demedes (https://vadimdemedes.com)","name":"set-value","version":"2.0.1","description":"Create nested values and any intermediaries using dot notation (`'a.b.c'`) paths.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:set-value_project:set-value:2.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/set-value@2.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/set-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-value/package.json"}]},{"bom-ref":"pkg:npm/setimmediate@1.0.5?package-id=ec3a9ad5b1e8d26c","type":"library","author":"YuzuJS, Domenic Denicola (https://domenic.me), Donavon West (http://donavon.com), Yaffle","name":"setimmediate","version":"1.0.5","description":"A shim for the setImmediate efficient script yielding API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/setimmediate@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/setimmediate/package.json"}]},{"bom-ref":"pkg:npm/setprototypeof@1.1.0?package-id=6eb5473162d47549","type":"library","author":"Wes Todd","name":"setprototypeof","version":"1.1.0","description":"A small polyfill for Object.setprototypeof","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:setprototypeof:setprototypeof:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/setprototypeof@1.1.0","externalReferences":[{"url":"https://github.com/wesleytodd/setprototypeof.git","type":"distribution"},{"url":"https://github.com/wesleytodd/setprototypeof","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wesleytodd:setprototypeof:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/setprototypeof/package.json"}]},{"bom-ref":"pkg:npm/setprototypeof@1.2.0?package-id=8282dcab8a58f243","type":"library","author":"Wes Todd","name":"setprototypeof","version":"1.2.0","description":"A small polyfill for Object.setprototypeof","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/setprototypeof@1.2.0","externalReferences":[{"url":"https://github.com/wesleytodd/setprototypeof.git","type":"distribution"},{"url":"https://github.com/wesleytodd/setprototypeof","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wesleytodd:setprototypeof:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/setprototypeof/package.json"}]},{"bom-ref":"pkg:npm/shebang-command@2.0.0?package-id=1625df5bb6d67d3b","type":"library","author":"Kevin Mårtensson (github.com/kevva)","name":"shebang-command","version":"2.0.0","description":"Get the command from a shebang","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/shebang-command@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/shebang-command/package.json"}]},{"bom-ref":"pkg:npm/shebang-regex@3.0.0?package-id=4afda12e39d13082","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"shebang-regex","version":"3.0.0","description":"Regular expression for matching a shebang line","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/shebang-regex@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/shebang-regex/package.json"}]},{"bom-ref":"pkg:npm/side-channel@1.1.0?package-id=b33fdebcaaec79ca","type":"library","author":"Jordan Harband ","name":"side-channel","version":"1.1.0","description":"Store information about any JS value in a side channel. Uses WeakMap if available.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel/package.json"}]},{"bom-ref":"pkg:npm/side-channel-list@1.0.0?package-id=b898b90657b4df8b","type":"library","author":"Jordan Harband ","name":"side-channel-list","version":"1.0.0","description":"Store information about any JS value in a side channel, using a linked list","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-list:side-channel-list:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-list@1.0.0","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-list.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-list#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-list:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_list:side-channel-list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_list:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_list:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-list/package.json"}]},{"bom-ref":"pkg:npm/side-channel-map@1.0.1?package-id=8a935a259e64ccfc","type":"library","author":"Jordan Harband ","name":"side-channel-map","version":"1.0.1","description":"Store information about any JS value in a side channel, using a Map","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-map@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-map.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-map#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-map/package.json"}]},{"bom-ref":"pkg:npm/side-channel-weakmap@1.0.2?package-id=13aa929d93fe8b96","type":"library","author":"Jordan Harband ","name":"side-channel-weakmap","version":"1.0.2","description":"Store information about any JS value in a side channel. Uses WeakMap if available.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-weakmap@1.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-weakmap.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-weakmap#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-weakmap/package.json"}]},{"bom-ref":"pkg:npm/signal-exit@3.0.7?package-id=4235b1d4cc91c7c5","type":"library","author":"Ben Coe ","name":"signal-exit","version":"3.0.7","description":"when you want to fire an event no matter how a process exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/signal-exit@3.0.7","externalReferences":[{"url":"https://github.com/tapjs/signal-exit.git","type":"distribution"},{"url":"https://github.com/tapjs/signal-exit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/signal-exit/package.json"}]},{"bom-ref":"pkg:npm/signal-exit@4.1.0?package-id=b6edaee708ce8837","type":"library","author":"Ben Coe ","name":"signal-exit","version":"4.1.0","description":"when you want to fire an event no matter how a process exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/signal-exit@4.1.0","externalReferences":[{"url":"https://github.com/tapjs/signal-exit.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json"}]},{"bom-ref":"pkg:npm/simple-concat@1.0.1?package-id=624063d4723a4b13","type":"library","author":"Feross Aboukhadijeh (https://feross.org)","name":"simple-concat","version":"1.0.1","description":"Super-minimalist version of `concat-stream`. Less than 15 lines!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/simple-concat@1.0.1","externalReferences":[{"url":"git://github.com/feross/simple-concat.git","type":"distribution"},{"url":"https://github.com/feross/simple-concat","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-concat/package.json"}]},{"bom-ref":"pkg:npm/simple-get@3.1.1?package-id=9f219d07ad41b5a4","type":"library","author":"Feross Aboukhadijeh (http://feross.org/)","name":"simple-get","version":"3.1.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:3.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@3.1.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/simple-get@4.0.1?package-id=cd263772050b70e4","type":"library","author":"Feross Aboukhadijeh (https://feross.org)","name":"simple-get","version":"4.0.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@4.0.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/simple-get@4.0.1?package-id=cb8ca3d0298b8a6e","type":"library","author":"Feross Aboukhadijeh (https://feross.org)","name":"simple-get","version":"4.0.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@4.0.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/simple-swizzle@0.2.2?package-id=e8f45cfd6ff3e7a3","type":"library","author":"Qix (http://github.com/qix-)","name":"simple-swizzle","version":"0.2.2","description":"Simply swizzle your arguments","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-swizzle:simple-swizzle:0.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/simple-swizzle@0.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple-swizzle:simple_swizzle:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_swizzle:simple-swizzle:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_swizzle:simple_swizzle:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple-swizzle:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple_swizzle:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-swizzle/package.json"}]},{"bom-ref":"pkg:npm/sinon@1.17.7?package-id=d88224f2a5eef8fd","type":"library","author":"Christian Johansen","name":"sinon","version":"1.17.7","description":"JavaScript test spies, stubs and mocks.","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:cjohansen:sinon:1.17.7:*:*:*:*:*:*:*","purl":"pkg:npm/sinon@1.17.7","externalReferences":[{"url":"http://github.com/cjohansen/Sinon.JS.git","type":"distribution"},{"url":"http://sinonjs.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sinon:sinon:1.17.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filesniffer/node_modules/sinon/package.json"}]},{"bom-ref":"pkg:npm/smart-buffer@4.2.0?package-id=cc002822c0639ab4","type":"library","author":"Josh Glazebrook, syvita","name":"smart-buffer","version":"4.2.0","description":"smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/smart-buffer@4.2.0","externalReferences":[{"url":"https://github.com/JoshGlazebrook/smart-buffer.git","type":"distribution"},{"url":"https://github.com/JoshGlazebrook/smart-buffer/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/smart-buffer/package.json"}]},{"bom-ref":"pkg:npm/snapdragon@0.8.2?package-id=b1704cf3ae02daca","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Edward Betts (http://edwardbetts.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"snapdragon","version":"0.8.2","description":"Fast, pluggable and easy-to-use parser-renderer factory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:snapdragon:0.8.2:*:*:*:*:*:*:*","purl":"pkg:npm/snapdragon@0.8.2","externalReferences":[{"url":"https://github.com/jonschlinkert/snapdragon","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon:snapdragon:0.8.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/package.json"}]},{"bom-ref":"pkg:npm/snapdragon-node@2.1.1?package-id=44d5d76422275036","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"snapdragon-node","version":"2.1.1","description":"Snapdragon utility for creating a new AST node in custom code, such as plugins.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:snapdragon-node:snapdragon-node:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/snapdragon-node@2.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/snapdragon-node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon-node:snapdragon_node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon_node:snapdragon-node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon_node:snapdragon_node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:snapdragon-node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:snapdragon_node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon:snapdragon-node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon:snapdragon_node:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon-node/package.json"}]},{"bom-ref":"pkg:npm/snapdragon-util@3.0.1?package-id=627d36f045f55b05","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"snapdragon-util","version":"3.0.1","description":"Utilities for the snapdragon parser/compiler.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:snapdragon-util:snapdragon-util:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/snapdragon-util@3.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/snapdragon-util","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon-util:snapdragon_util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon_util:snapdragon-util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon_util:snapdragon_util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:snapdragon-util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:snapdragon_util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon:snapdragon-util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:snapdragon:snapdragon_util:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon-util/package.json"}]},{"bom-ref":"pkg:npm/socket.io@3.1.2?package-id=a59f241f8d484687","type":"library","author":"Guillermo Rauch , Arnout Kazemier , Vladimir Dronnikov , Einar Otto Stangvik ","name":"socket.io","version":"3.1.2","description":"node.js realtime framework server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:socket.io:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/socket.io@3.1.2","externalReferences":[{"url":"git://github.com/socketio/socket.io","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io/package.json"}]},{"bom-ref":"pkg:npm/socket.io-adapter@2.1.0?package-id=22a992bc812c1a27","type":"library","name":"socket.io-adapter","version":"2.1.0","description":"default socket.io in-memory adapter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket.io-adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/socket.io-adapter@2.1.0","externalReferences":[{"url":"git://github.com/socketio/socket.io-adapter.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io-adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io_adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io_adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-adapter/package.json"}]},{"bom-ref":"pkg:npm/socket.io-parser@4.0.5?package-id=dd154d7bfbaea09c","type":"library","name":"socket.io-parser","version":"4.0.5","description":"socket.io protocol parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:socket.io-parser:4.0.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/socket.io-parser@4.0.5","externalReferences":[{"url":"https://github.com/socketio/socket.io-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-parser/package.json"}]},{"bom-ref":"pkg:npm/socks@2.8.7?package-id=a4e6087946da80a0","type":"library","author":"Josh Glazebrook, castorw","name":"socks","version":"2.8.7","description":"Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:JoshGlazebrook:socks:2.8.7:*:*:*:*:*:*:*","purl":"pkg:npm/socks@2.8.7","externalReferences":[{"url":"https://github.com/JoshGlazebrook/socks.git","type":"distribution"},{"url":"https://github.com/JoshGlazebrook/socks/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks:2.8.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks/package.json"}]},{"bom-ref":"pkg:npm/socks-proxy-agent@6.2.1?package-id=98b91bbcbff567ab","type":"library","author":"Nathan Rajlich (http://n8.io/), Kiko Beats , Josh Glazebrook , talmobi , Indospace.io , Kilian von Pflugk , Kyle , Matheus Fernandes , Ricky Miller , Shantanu Sharma , Tim Perry , Vadim Baryshev , jigu , Alba Mendez , Дмитрий Гуденков , Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey , Brandon Ros , Dang Duy Thanh , Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>","name":"socks-proxy-agent","version":"6.2.1","description":"A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/socks-proxy-agent@6.2.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-socks-proxy-agent.git","type":"distribution"},{"url":"https://github.com/TooTallNate/node-socks-proxy-agent#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/socks-proxy-agent@8.0.5?package-id=9ee05fc4d21b00fc","type":"library","author":"Nathan Rajlich (http://n8.io/), Kiko Beats , Josh Glazebrook , talmobi , Indospace.io , Kilian von Pflugk , Kyle , Matheus Fernandes , Ricky Miller , Shantanu Sharma , Tim Perry , Vadim Baryshev , jigu , Alba Mendez , Дмитрий Гуденков , Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey , Brandon Ros , Dang Duy Thanh , Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>","name":"socks-proxy-agent","version":"8.0.5","description":"A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/socks-proxy-agent@8.0.5","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/sort-keys@1.1.2?package-id=7e91429fd26a7768","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"sort-keys","version":"1.1.2","description":"Sort the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json"}]},{"bom-ref":"pkg:npm/sort-keys@2.0.0?package-id=b56ffa404313992b","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"sort-keys","version":"2.0.0","description":"Sort the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys:sort-keys:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys/package.json"}]},{"bom-ref":"pkg:npm/sort-keys-length@1.0.1?package-id=aa05cbb52d62e94f","type":"library","author":"Kevin Mårtensson (https://github.com/kevva)","name":"sort-keys-length","version":"1.0.1","description":"Sort objecy keys by length","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys-length@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys-length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys_length:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys_length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys-length/package.json"}]},{"bom-ref":"pkg:npm/source-map@0.5.7?package-id=f746afd966cc60f7","type":"library","author":"Nick Fitzgerald , Tobias Koppers , Duncan Beevers , Stephen Crane , Ryan Seddon , Miles Elam , Mihai Bazon , Michael Ficarra , Todd Wolfson , Alexander Solovyov , Felix Gnass , Conrad Irwin , usrbincc , David Glasser , Chase Douglas , Evan Wallace , Heather Arthur , Hugh Kennedy , David Glasser , Simon Lydell , Jmeas Smith , Michael Z Goddard , azu , John Gozde , Adam Kirkton , Chris Montgomery , J. Ryan Stinnett , Jack Herrington , Chris Truter , Daniel Espeset , Jamie Wong , Eddy Bruël , Hawken Rives , Gilad Peleg , djchie , Gary Ye , Nicolas Lalevée ","name":"source-map","version":"0.5.7","description":"Generates and consumes source maps","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:source-map:source-map:0.5.7:*:*:*:*:*:*:*","purl":"pkg:npm/source-map@0.5.7","externalReferences":[{"url":"http://github.com/mozilla/source-map.git","type":"distribution"},{"url":"https://github.com/mozilla/source-map","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source-map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source_map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map:0.5.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/snapdragon/node_modules/source-map/package.json"}]},{"bom-ref":"pkg:npm/source-map@0.6.1?package-id=a22583dd96c04327","type":"library","author":"Nick Fitzgerald , Tobias Koppers , Duncan Beevers , Stephen Crane , Ryan Seddon , Miles Elam , Mihai Bazon , Michael Ficarra , Todd Wolfson , Alexander Solovyov , Felix Gnass , Conrad Irwin , usrbincc , David Glasser , Chase Douglas , Evan Wallace , Heather Arthur , Hugh Kennedy , David Glasser , Simon Lydell , Jmeas Smith , Michael Z Goddard , azu , John Gozde , Adam Kirkton , Chris Montgomery , J. Ryan Stinnett , Jack Herrington , Chris Truter , Daniel Espeset , Jamie Wong , Eddy Bruël , Hawken Rives , Gilad Peleg , djchie , Gary Ye , Nicolas Lalevée ","name":"source-map","version":"0.6.1","description":"Generates and consumes source maps","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/source-map@0.6.1","externalReferences":[{"url":"http://github.com/mozilla/source-map.git","type":"distribution"},{"url":"https://github.com/mozilla/source-map","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/source-map/package.json"}]},{"bom-ref":"pkg:npm/source-map-resolve@0.5.3?package-id=e48e3e1d74a18175","type":"library","author":"Simon Lydell","name":"source-map-resolve","version":"0.5.3","description":"Resolve the source map and/or sources for a generated file.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:source-map-resolve:source-map-resolve:0.5.3:*:*:*:*:*:*:*","purl":"pkg:npm/source-map-resolve@0.5.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map-resolve:source_map_resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_resolve:source-map-resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_resolve:source_map_resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source-map-resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map_resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map-resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map_resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map-resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map_resolve:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/source-map-resolve/package.json"}]},{"bom-ref":"pkg:npm/source-map-support@0.5.21?package-id=90b992694104f65e","type":"library","name":"source-map-support","version":"0.5.21","description":"Fixes stack traces for files with source maps","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:source-map-support:source-map-support:0.5.21:*:*:*:*:*:*:*","purl":"pkg:npm/source-map-support@0.5.21","externalReferences":[{"url":"https://github.com/evanw/node-source-map-support","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map-support:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_support:source-map-support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_support:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source-map-support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map-support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map-support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanw:source-map-support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanw:source_map_support:0.5.21:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/source-map-support/package.json"}]},{"bom-ref":"pkg:npm/source-map-url@0.4.1?package-id=2cced9de85d7d5fa","type":"library","author":"Simon Lydell","name":"source-map-url","version":"0.4.1","description":"Tools for working with sourceMappingURL comments.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:source-map-url:source-map-url:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/source-map-url@0.4.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map-url:source_map_url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_url:source-map-url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map_url:source_map_url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source-map-url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map_url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map-url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map_url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map-url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map_url:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/source-map-url/package.json"}]},{"bom-ref":"pkg:npm/split-string@3.1.0?package-id=47baf72085e685b1","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"split-string","version":"3.1.0","description":"Split a string on a character except when the character is escaped.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:split-string:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/split-string@3.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/split-string","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:split_string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split-string:split-string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split-string:split_string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split_string:split-string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split_string:split_string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split:split-string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:split:split_string:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/split-string/package.json"}]},{"bom-ref":"pkg:npm/sprintf-js@1.0.3?package-id=acaf709db1d54fbd","type":"library","author":"Alexandru Marasteanu (http://alexei.ro/)","name":"sprintf-js","version":"1.0.3","description":"JavaScript sprintf implementation","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/sprintf-js@1.0.3","externalReferences":[{"url":"https://github.com/alexei/sprintf.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf-js:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json"}]},{"bom-ref":"pkg:npm/sprintf-js@1.1.3?package-id=5b70795e4e884b57","type":"library","author":"Alexandru Mărășteanu ","name":"sprintf-js","version":"1.1.3","description":"JavaScript sprintf implementation","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:sprintf-js:sprintf-js:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/sprintf-js@1.1.3","externalReferences":[{"url":"https://github.com/alexei/sprintf.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf-js:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sprintf-js/package.json"}]},{"bom-ref":"pkg:npm/sqlite3@5.1.7?package-id=2f561aa54725d063","type":"library","author":"Mapbox (https://mapbox.com/), Daniel Lockyer , Konstantin Käfer , Dane Springmeyer , Will White , Orlando Vazquez , Artem Kustikov , Eric Fredricksen , John Wright , Ryan Dahl , Tom MacWright , Carter Thaxton , Audrius Kažukauskas , Johannes Schauer , Nathan Rajlich , AJ ONeal , Mithgol, Ben Noordhuis ","name":"sqlite3","version":"5.1.7","description":"Asynchronous, non-blocking SQLite3 bindings","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:ghost:sqlite3:5.1.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/sqlite3@5.1.7","externalReferences":[{"url":"https://github.com/TryGhost/node-sqlite3.git","type":"distribution"},{"url":"https://github.com/TryGhost/node-sqlite3","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/package.json"}]},{"bom-ref":"pkg:npm/ssri@12.0.0?package-id=64aa6df27671ee44","type":"library","author":"GitHub Inc.","name":"ssri","version":"12.0.0","description":"Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ssri@12.0.0","externalReferences":[{"url":"git+https://github.com/npm/ssri.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ssri/package.json"}]},{"bom-ref":"pkg:npm/ssri@8.0.1?package-id=fbd6a143588415b6","type":"library","author":"Kat Marchán ","name":"ssri","version":"8.0.1","description":"Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ssri_project:ssri:8.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ssri@8.0.1","externalReferences":[{"url":"https://github.com/npm/ssri","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json"}]},{"bom-ref":"pkg:npm/stack-trace@0.0.10?package-id=fce264c6e73c9eee","type":"library","author":"Felix Geisendörfer (http://debuggable.com/)","name":"stack-trace","version":"0.0.10","description":"Get v8 stack traces as an array of CallSite objects.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:stack-trace:stack-trace:0.0.10:*:*:*:*:*:*:*","purl":"pkg:npm/stack-trace@0.0.10","externalReferences":[{"url":"git://github.com/felixge/node-stack-trace.git","type":"distribution"},{"url":"https://github.com/felixge/node-stack-trace","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack-trace:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack_trace:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack_trace:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stack-trace/package.json"}]},{"bom-ref":"pkg:npm/static-extend@0.1.2?package-id=510dda3706444e3d","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"static-extend","version":"0.1.2","description":"Adds a static `extend` method to a class, to simplify inheritance. Extends the static properties, prototype properties, and descriptors from a `Parent` constructor onto `Child` constructors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:static-extend:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/static-extend@0.1.2","externalReferences":[{"url":"https://github.com/jonschlinkert/static-extend","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:static_extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static-extend:static-extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static-extend:static_extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static_extend:static-extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static_extend:static_extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static:static-extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:static:static_extend:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/static-extend/package.json"}]},{"bom-ref":"pkg:npm/statuses@1.5.0?package-id=b4d4d67376e5fdaa","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"statuses","version":"1.5.0","description":"HTTP status utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/statuses@1.5.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/statuses/package.json"}]},{"bom-ref":"pkg:npm/statuses@2.0.1?package-id=55bb7dc82bdabbea","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"statuses","version":"2.0.1","description":"HTTP status utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:statuses:statuses:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/statuses@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/statuses/package.json"}]},{"bom-ref":"pkg:npm/stop-iteration-iterator@1.1.0?package-id=061c21bad20f372c","type":"library","author":"Jordan Harband ","name":"stop-iteration-iterator","version":"1.1.0","description":"Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:stop-iteration-iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/stop-iteration-iterator@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/stop-iteration-iterator.git","type":"distribution"},{"url":"https://github.com/ljharb/stop-iteration-iterator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration-iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration_iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration_iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stop-iteration-iterator/package.json"}]},{"bom-ref":"pkg:npm/stream-buffers@2.2.0?package-id=f849555d7c5b59d6","type":"library","author":"Sam Day ","name":"stream-buffers","version":"2.2.0","description":"Buffer-backed Streams for reading and writing.","licenses":[{"license":{"id":"Unlicense"}}],"cpe":"cpe:2.3:a:stream-buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/stream-buffers@2.2.0","externalReferences":[{"url":"https://github.com/samcday/node-stream-buffer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream-buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream_buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream_buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:samcday:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:samcday:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stream-buffers/package.json"}]},{"bom-ref":"pkg:npm/streamsearch@1.1.0?package-id=28156c8426d889b2","type":"library","author":"Brian White ","name":"streamsearch","version":"1.1.0","description":"Streaming Boyer-Moore-Horspool searching for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:streamsearch:streamsearch:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/streamsearch@1.1.0","externalReferences":[{"url":"http://github.com/mscdex/streamsearch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mscdex:streamsearch:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/streamsearch/package.json"}]},{"bom-ref":"pkg:npm/strict-uri-encode@1.1.0?package-id=bfd4ac772360c13b","type":"library","author":"Kevin Mårtensson (github.com/kevva)","name":"strict-uri-encode","version":"1.1.0","description":"A stricter URI encode adhering to RFC 3986","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strict-uri-encode@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri-encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri_encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri_encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strict-uri-encode/package.json"}]},{"bom-ref":"pkg:npm/string-width@1.0.2?package-id=09f44aae6ef25a0d","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"string-width","version":"1.0.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@2.1.1?package-id=beec204c676c8c6e","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"string-width","version":"2.1.1","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@4.2.3?package-id=24ea7bc5fffd0612","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"string-width","version":"4.2.3","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@4.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string-width-cjs/package.json"}]},{"bom-ref":"pkg:npm/string-width@4.2.3?package-id=e0a74a03ae38698c","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"string-width","version":"4.2.3","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@4.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@5.1.2?package-id=8d5950086fa52115","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"string-width","version":"5.1.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@5.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@5.1.2?package-id=6762f33de5ae377a","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"string-width","version":"5.1.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@5.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string.fromcodepoint@0.2.1?package-id=b9de9879083856a9","type":"library","author":"Mathias Bynens (http://mathiasbynens.be/)","name":"string.fromcodepoint","version":"0.2.1","description":"A robust & optimized `String.fromCodePoint` polyfill, based on the ECMAScript 6 specification.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string.fromcodepoint:string.fromcodepoint:0.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/string.fromcodepoint@0.2.1","externalReferences":[{"url":"https://github.com/mathiasbynens/String.fromCodePoint.git","type":"distribution"},{"url":"http://mths.be/fromcodepoint","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:string.fromcodepoint:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string.fromcodepoint/package.json"}]},{"bom-ref":"pkg:npm/string.prototype.codepointat@0.2.1?package-id=e2f2b92311cdbc39","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"string.prototype.codepointat","version":"0.2.1","description":"A robust & optimized `String.prototype.codePointAt` polyfill, based on the ECMAScript 6 specification.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string.prototype.codepointat:string.prototype.codepointat:0.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/string.prototype.codepointat@0.2.1","externalReferences":[{"url":"https://github.com/mathiasbynens/String.prototype.codePointAt.git","type":"distribution"},{"url":"https://mths.be/codepointat","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:string.prototype.codepointat:0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string.prototype.codepointat/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@0.10.31?package-id=be69fa4a2025b786","type":"library","name":"string_decoder","version":"0.10.31","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@0.10.31","externalReferences":[{"url":"git://github.com/rvagg/string_decoder.git","type":"distribution"},{"url":"https://github.com/rvagg/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rvagg:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rvagg:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@1.1.1?package-id=248eaf9a5e34fe07","type":"library","name":"string_decoder","version":"1.1.1","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@1.1.1","externalReferences":[{"url":"git://github.com/nodejs/string_decoder.git","type":"distribution"},{"url":"https://github.com/nodejs/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@1.3.0?package-id=17cc9cb9f2e4a5f7","type":"library","name":"string_decoder","version":"1.3.0","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@1.3.0","externalReferences":[{"url":"git://github.com/nodejs/string_decoder.git","type":"distribution"},{"url":"https://github.com/nodejs/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@3.0.1?package-id=e8cc4c7f389e7e46","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl), JD Ballard (github.com/qix-)","name":"strip-ansi","version":"3.0.1","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@3.0.1?package-id=c99f26ed95d84d11","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl), JD Ballard (github.com/qix-)","name":"strip-ansi","version":"3.0.1","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@4.0.0?package-id=0db8e8830d694c97","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-ansi","version":"4.0.0","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@6.0.1?package-id=896f6ac46d9def2e","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-ansi","version":"6.0.1","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@6.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-ansi-cjs/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@6.0.1?package-id=e831e8124e9a00e0","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-ansi","version":"6.0.1","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@6.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@7.1.0?package-id=c7f252459ea6e1a5","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"strip-ansi","version":"7.1.0","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:7.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@7.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@7.1.0?package-id=c87f18bb011b84b3","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"strip-ansi","version":"7.1.0","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:7.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@7.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-bom@3.0.0?package-id=0183f6075f17be99","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-bom","version":"3.0.0","description":"Strip UTF-8 byte order mark (BOM) from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-bom:strip-bom:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-bom@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-bom:strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_bom:strip-bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_bom:strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_bom:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tsconfig/node_modules/strip-bom/package.json"}]},{"bom-ref":"pkg:npm/strip-dirs@2.1.0?package-id=5785975b198f29c2","type":"library","author":"Shinnosuke Watanabe (https://github.com/shinnn)","name":"strip-dirs","version":"2.1.0","description":"Remove leading directory components from a path, like tar's --strip-components option","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-dirs@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-dirs/package.json"}]},{"bom-ref":"pkg:npm/strip-json-comments@2.0.1?package-id=31c6a53852db87ef","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-json-comments","version":"2.0.1","description":"Strip comments from JSON. Lets you use comments in your JSON files!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-json-comments@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json"}]},{"bom-ref":"pkg:npm/strip-json-comments@2.0.1?package-id=4b7ca1763bc4e039","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-json-comments","version":"2.0.1","description":"Strip comments from JSON. Lets you use comments in your JSON files!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-json-comments@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tsconfig/node_modules/strip-json-comments/package.json"}]},{"bom-ref":"pkg:npm/strip-outer@1.0.1?package-id=0701c91ca3e3ef97","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"strip-outer","version":"1.0.1","description":"Strip a substring from the start/end of a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-outer@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-outer:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_outer:strip-outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_outer:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-outer/package.json"}]},{"bom-ref":"pkg:npm/strtok3@6.3.0?package-id=9ac4af59fde6dd22","type":"library","author":"Borewit (https://github.com/Borewit)","name":"strtok3","version":"6.3.0","description":"A promise based streaming tokenizer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Borewit:strtok3:6.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/strtok3@6.3.0","externalReferences":[{"url":"https://github.com/Borewit/strtok3.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strtok3:strtok3:6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strtok3/package.json"}]},{"bom-ref":"pkg:npm/supports-color@2.0.0?package-id=c66316949c16138d","type":"library","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)","name":"supports-color","version":"2.0.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-color@5.5.0?package-id=01ffdb08e3050adf","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"supports-color","version":"5.5.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@5.5.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-color@7.2.0?package-id=24cdad729d3395c4","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"supports-color","version":"7.2.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@7.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=d91ba967be33db59","type":"library","author":"Jordan Harband ","name":"supports-preserve-symlinks-flag","version":"1.0.0","description":"Determine if the current node version supports the `--preserve-symlinks` flag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-preserve-symlinks-flag@1.0.0","externalReferences":[{"url":"git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git","type":"distribution"},{"url":"https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json"}]},{"bom-ref":"pkg:npm/svg-captcha@1.4.0?package-id=6baae9ff00daeb07","type":"library","author":"Weilin Shi <934587911@qq.com>","name":"svg-captcha","version":"1.4.0","description":"generate svg captcha in node.js or express.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:svg-captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/svg-captcha@1.4.0","externalReferences":[{"url":"git+https://github.com/steambap/svg-captcha.git","type":"distribution"},{"url":"https://github.com/steambap/svg-captcha#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg-captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg_captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg_captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:steambap:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:steambap:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/svg-captcha/package.json"}]},{"bom-ref":"pkg:npm/swagger-ui-dist@5.28.1?package-id=dcccbf8110a22ed6","type":"library","author":", Anna Bodnia , Buu Nguyen , Josh Ponelat , Kyle Shockey , Robert Barnwell , Sahar Jafari ","name":"swagger-ui-dist","version":"5.28.1","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:smartbear:swagger-ui-dist:5.28.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/swagger-ui-dist@5.28.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/swagger-ui-dist/package.json"}]},{"bom-ref":"pkg:npm/swagger-ui-express@5.0.1?package-id=daeaf740a273c980","type":"library","author":"Stephen Scott ","name":"swagger-ui-express","version":"5.0.1","description":"Swagger UI Express","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:swagger-ui-express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/swagger-ui-express@5.0.1","externalReferences":[{"url":"https://github.com/scottie1984/swagger-ui-express","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui-express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui_express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui_express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scottie1984:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scottie1984:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/swagger-ui-express/package.json"}]},{"bom-ref":"pkg:npm/tar@4.4.19?package-id=f42c59d94c10b95d","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"tar","version":"4.4.19","description":"tar for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@4.4.19","externalReferences":[{"url":"https://github.com/npm/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:4.4.19:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar@6.2.1?package-id=09de397807f7641f","type":"library","author":"GitHub Inc.","name":"tar","version":"6.2.1","description":"tar for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@6.2.1","externalReferences":[{"url":"https://github.com/isaacs/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:6.2.1:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar@7.4.3?package-id=328bcb4be5561b99","type":"library","author":"Isaac Z. Schlueter","name":"tar","version":"7.4.3","description":"tar for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:tar_project:tar:7.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@7.4.3","externalReferences":[{"url":"https://github.com/isaacs/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:7.4.3:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar-fs@2.1.3?package-id=9680d7d122bfb97a","type":"library","author":"Mathias Buus","name":"tar-fs","version":"2.1.3","description":"filesystem bindings for tar-stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mafintosh:tar-fs:2.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/tar-fs@2.1.3","externalReferences":[{"url":"https://github.com/mafintosh/tar-fs.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-fs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-fs:tar-fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-fs:tar_fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_fs:tar-fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_fs:tar_fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_fs:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/package.json"}]},{"bom-ref":"pkg:npm/tar-stream@1.6.2?package-id=d4b09eea4b25031e","type":"library","author":"Mathias Buus ","name":"tar-stream","version":"1.6.2","description":"tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/tar-stream@1.6.2","externalReferences":[{"url":"git+https://github.com/mafintosh/tar-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-stream:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-stream/package.json"}]},{"bom-ref":"pkg:npm/tar-stream@2.2.0?package-id=61ca2e5df0334a0d","type":"library","author":"Mathias Buus ","name":"tar-stream","version":"2.2.0","description":"tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/tar-stream@2.2.0","externalReferences":[{"url":"git+https://github.com/mafintosh/tar-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-stream:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json"}]},{"bom-ref":"pkg:npm/tdigest@0.1.2?package-id=035edc02e62ab7f9","type":"library","author":"Will Welch (http://quietplease.com/)","name":"tdigest","version":"0.1.2","description":"javascript implementation of Dunning's T-Digest for streaming quantile approximation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tdigest:tdigest:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/tdigest@0.1.2","externalReferences":[{"url":"https://github.com/welch/tdigest.git","type":"distribution"},{"url":"https://github.com/welch/tdigest","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:welch:tdigest:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tdigest/package.json"}]},{"bom-ref":"pkg:npm/text-hex@1.0.0?package-id=5085c28e4a76cc5a","type":"library","author":"Arnout Kazemier","name":"text-hex","version":"1.0.0","description":"Generate a hex color from the given text","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:text-hex:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/text-hex@1.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/text-hex","type":"distribution"},{"url":"https://github.com/3rd-Eden/text-hex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text-hex:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text-hex:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text_hex:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text_hex:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/text-hex/package.json"}]},{"bom-ref":"pkg:npm/thirty-two@1.0.2?package-id=d1834955e908f62a","type":"library","author":"Chris Umbel ","name":"thirty-two","version":"1.0.2","description":"Implementation RFC 3548 Base32 encoding/decoding for node.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chrisumbel:thirty-two:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/thirty-two@1.0.2","externalReferences":[{"url":"git://github.com/chrisumbel/thirty-two.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:chrisumbel:thirty_two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty-two:thirty-two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty-two:thirty_two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty_two:thirty-two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty_two:thirty_two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty:thirty-two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thirty:thirty_two:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/thirty-two/package.json"}]},{"bom-ref":"pkg:npm/through@2.3.8?package-id=2584a06da5c0bd83","type":"library","author":"Dominic Tarr (dominictarr.com)","name":"through","version":"2.3.8","description":"simplified stream construction","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/through@2.3.8","externalReferences":[{"url":"https://github.com/dominictarr/through.git","type":"distribution"},{"url":"https://github.com/dominictarr/through","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/through/package.json"}]},{"bom-ref":"pkg:npm/timed-out@4.0.1?package-id=d2308518418e1e08","type":"library","author":"Vsevolod Strukchinsky ","name":"timed-out","version":"4.0.1","description":"Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/timed-out@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed-out:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed_out:timed-out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed_out:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed:timed-out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/timed-out/package.json"}]},{"bom-ref":"pkg:npm/tiny-inflate@1.0.3?package-id=5831e10cf4d02fa2","type":"library","author":"Devon Govett ","name":"tiny-inflate","version":"1.0.3","description":"A tiny inflate implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/tiny-inflate@1.0.3","externalReferences":[{"url":"git://github.com/devongovett/tiny-inflate.git","type":"distribution"},{"url":"https://github.com/devongovett/tiny-inflate","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tiny-inflate/package.json"}]},{"bom-ref":"pkg:npm/tinyglobby@0.2.14?package-id=24b4d677eb72b0af","type":"library","author":"Superchupu","name":"tinyglobby","version":"0.2.14","description":"A fast and minimal alternative to globby and fast-glob","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:SuperchupuDev:tinyglobby:0.2.14:*:*:*:*:*:*:*","purl":"pkg:npm/tinyglobby@0.2.14","externalReferences":[{"url":"git+https://github.com/SuperchupuDev/tinyglobby.git","type":"distribution"},{"url":"https://github.com/SuperchupuDev/tinyglobby#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tinyglobby:tinyglobby:0.2.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/package.json"}]},{"bom-ref":"pkg:npm/to-buffer@1.2.1?package-id=be2be9b9e3252144","type":"library","author":"Mathias Buus (@mafintosh)","name":"to-buffer","version":"1.2.1","description":"Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:browserify:to-buffer:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-buffer@1.2.1","externalReferences":[{"url":"https://github.com/browserify/to-buffer.git","type":"distribution"},{"url":"https://github.com/browserify/to-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify:to_buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-buffer:to-buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-buffer:to_buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_buffer:to-buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_buffer:to_buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_buffer:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-buffer/package.json"}]},{"bom-ref":"pkg:npm/to-object-path@0.3.0?package-id=d01b4638df077a19","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"to-object-path","version":"0.3.0","description":"Create an object path from a list or array of strings.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-object-path:to-object-path:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/to-object-path@0.3.0","externalReferences":[{"url":"https://github.com/jonschlinkert/to-object-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-object-path:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_object_path:to-object-path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_object_path:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:to-object-path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-object:to-object-path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-object:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_object:to-object-path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_object:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-object-path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_object_path:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-object-path/package.json"}]},{"bom-ref":"pkg:npm/to-regex@3.0.2?package-id=7c2a1a8c893f39f4","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"to-regex","version":"3.0.2","description":"Generate a regex from a string or array of strings.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:to-regex:3.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex@3.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/to-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:to_regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex:3.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-regex/package.json"}]},{"bom-ref":"pkg:npm/to-regex-range@2.1.1?package-id=64206f8e7a470f2e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"to-regex-range","version":"2.1.1","description":"Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-regex-range:to-regex-range:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex-range@2.1.1","externalReferences":[{"url":"https://github.com/micromatch/to-regex-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex-range:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to-regex-range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to-regex-range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex-range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex-range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex-range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex_range:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-regex-range/package.json"}]},{"bom-ref":"pkg:npm/to-regex-range@5.0.1?package-id=02fe06e0fb5f73f2","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"to-regex-range","version":"5.0.1","description":"Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex-range@5.0.1","externalReferences":[{"url":"https://github.com/micromatch/to-regex-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chokidar/node_modules/to-regex-range/package.json"}]},{"bom-ref":"pkg:npm/to-regex-range@5.0.1?package-id=de4fe8ba9d4be0f1","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"to-regex-range","version":"5.0.1","description":"Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex-range@5.0.1","externalReferences":[{"url":"https://github.com/micromatch/to-regex-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/to-regex-range/package.json"}]},{"bom-ref":"pkg:npm/to-regex-range@5.0.1?package-id=d81a6415cbdb792a","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"to-regex-range","version":"5.0.1","description":"Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex-range@5.0.1","externalReferences":[{"url":"https://github.com/micromatch/to-regex-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/to-regex-range/package.json"}]},{"bom-ref":"pkg:npm/toidentifier@1.0.1?package-id=4909a76552946483","type":"library","author":"Douglas Christopher Wilson , Douglas Christopher Wilson , Nick Baugh (http://niftylettuce.com/)","name":"toidentifier","version":"1.0.1","description":"Convert a string of words to a JavaScript identifier","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/toidentifier@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/toidentifier/package.json"}]},{"bom-ref":"pkg:npm/token-stream@1.0.0?package-id=1121d220e3619b09","type":"library","author":"ForbesLindesay","name":"token-stream","version":"1.0.0","description":"Take an array of token and produce a more useful API to give to a parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:token-stream:token-stream:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/token-stream@1.0.0","externalReferences":[{"url":"https://github.com/pugjs/token-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:token-stream:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_stream:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_stream:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/token-stream/package.json"}]},{"bom-ref":"pkg:npm/token-types@4.2.1?package-id=171e72fe36f2e133","type":"library","author":"Borewit (https://github.com/Borewit)","name":"token-types","version":"4.2.1","description":"Common token types for decoding and encoding numeric and string values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:token-types:token-types:4.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/token-types@4.2.1","externalReferences":[{"url":"https://github.com/Borewit/token-types","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:token-types:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_types:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_types:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/token-types/package.json"}]},{"bom-ref":"pkg:npm/tr46@0.0.3?package-id=a521f60e39034688","type":"library","author":"Sebastian Mayr ","name":"tr46","version":"0.0.3","description":"An implementation of the Unicode TR46 spec","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Sebmaster:tr46:0.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/tr46@0.0.3","externalReferences":[{"url":"git+https://github.com/Sebmaster/tr46.js.git","type":"distribution"},{"url":"https://github.com/Sebmaster/tr46.js#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tr46:tr46:0.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tr46/package.json"}]},{"bom-ref":"pkg:npm/traverse@0.3.9?package-id=8b1a05e62fb7f42a","type":"library","author":"James Halliday","name":"traverse","version":"0.3.9","description":"Traverse and transform objects by visiting every node on a recursive walk","licenses":[{"license":{"name":"MIT/X11"}}],"cpe":"cpe:2.3:a:substack:traverse:0.3.9:*:*:*:*:*:*:*","purl":"pkg:npm/traverse@0.3.9","externalReferences":[{"url":"http://github.com/substack/js-traverse.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/traverse/package.json"}]},{"bom-ref":"pkg:npm/tree-kill@1.2.2?package-id=a0e2670d202d8fae","type":"library","author":"Peteris Krumins (http://www.catonmat.net), Todd Wolfson (http://twolfson.com/), William Hilton (http://wmhilton.com/), Fabrício Matté (http://ultcombo.js.org/)","name":"tree-kill","version":"1.2.2","description":"kill trees of processes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tree-kill_project:tree-kill:1.2.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/tree-kill@1.2.2","externalReferences":[{"url":"git://github.com/pkrumins/node-tree-kill.git","type":"distribution"},{"url":"https://github.com/pkrumins/node-tree-kill","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tree-kill/package.json"}]},{"bom-ref":"pkg:npm/trim-repeated@1.0.0?package-id=4707f97b4eb6a83b","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"trim-repeated","version":"1.0.0","description":"Trim a consecutively repeated substring: foo--bar---baz → foo-bar-baz","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/trim-repeated@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim-repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim_repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim_repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim:trim-repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/trim-repeated/package.json"}]},{"bom-ref":"pkg:npm/triple-beam@1.4.1?package-id=867ca1c3d07cb072","type":"library","author":"Charlie Robbins ","name":"triple-beam","version":"1.4.1","description":"Definitions of levels for logging purposes & shareable Symbol constants.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:triple-beam:triple-beam:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/triple-beam@1.4.1","externalReferences":[{"url":"git+https://github.com/winstonjs/triple-beam.git","type":"distribution"},{"url":"https://github.com/winstonjs/triple-beam#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple-beam:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple_beam:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple_beam:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/triple-beam/package.json"}]},{"bom-ref":"pkg:npm/truncate-utf8-bytes@1.0.2?package-id=a4cd60ed4d28ed9d","type":"library","author":"Carl Xiong ","name":"truncate-utf8-bytes","version":"1.0.2","description":"Truncate string to given length in bytes","licenses":[{"license":{"id":"WTFPL"}}],"cpe":"cpe:2.3:a:truncate-utf8-bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/truncate-utf8-bytes@1.0.2","externalReferences":[{"url":"git+https://github.com/parshap/truncate-utf8-bytes.git","type":"distribution"},{"url":"https://github.com/parshap/truncate-utf8-bytes#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8-bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8_bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8_bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/truncate-utf8-bytes/package.json"}]},{"bom-ref":"pkg:npm/ts-node@9.1.1?package-id=7eb70a24d3707f3d","type":"library","author":"Blake Embrey (http://blakeembrey.me)","name":"ts-node","version":"9.1.1","description":"TypeScript execution environment and REPL for node.js, with source map support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TypeStrong:ts-node:9.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/ts-node@9.1.1","externalReferences":[{"url":"git://github.com/TypeStrong/ts-node.git","type":"distribution"},{"url":"https://github.com/TypeStrong/ts-node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TypeStrong:ts_node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts-node:ts-node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts-node:ts_node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node:ts-node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node:ts_node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts:ts-node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts:ts_node:9.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/node_modules/ts-node/package.json"}]},{"bom-ref":"pkg:npm/ts-node-dev@1.1.8?package-id=04b3fb26ad605559","type":"library","name":"ts-node-dev","version":"1.1.8","description":"Compiles your TS app and restarts when files are modified.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ts-node-dev:ts-node-dev:1.1.8:*:*:*:*:*:*:*","purl":"pkg:npm/ts-node-dev@1.1.8","externalReferences":[{"url":"http://github.com/whitecolor/ts-node-dev.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts-node-dev:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node_dev:ts-node-dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node_dev:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whitecolor:ts-node-dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whitecolor:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts-node:ts-node-dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts-node:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node:ts-node-dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts_node:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts:ts-node-dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ts:ts_node_dev:1.1.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ts-node-dev/package.json"}]},{"bom-ref":"pkg:npm/tsconfig@7.0.0?package-id=473b64af2e102569","type":"library","author":"Blake Embrey (http://blakeembrey.me), basaratali@gmail.com","name":"tsconfig","version":"7.0.0","description":"Resole and parse `tsconfig.json`, replicating to TypeScript's behaviour","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TypeStrong:tsconfig:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/tsconfig@7.0.0","externalReferences":[{"url":"https://github.com/TypeStrong/tsconfig.git","type":"distribution"},{"url":"https://github.com/TypeStrong/tsconfig","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tsconfig:tsconfig:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tsconfig/package.json"}]},{"bom-ref":"pkg:npm/tslib@2.7.0?package-id=d3f6878231388b72","type":"library","author":"Microsoft Corp.","name":"tslib","version":"2.7.0","description":"Runtime library for TypeScript helper functions","licenses":[{"license":{"id":"0BSD"}}],"cpe":"cpe:2.3:a:Microsoft:tslib:2.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/tslib@2.7.0","externalReferences":[{"url":"https://github.com/Microsoft/tslib.git","type":"distribution"},{"url":"https://www.typescriptlang.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tslib:tslib:2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tslib/package.json"}]},{"bom-ref":"pkg:npm/tunnel-agent@0.6.0?package-id=fdd564bd2943f5f4","type":"library","author":"Mikeal Rogers (http://www.futurealoof.com)","name":"tunnel-agent","version":"0.6.0","description":"HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/tunnel-agent@0.6.0","externalReferences":[{"url":"https://github.com/mikeal/tunnel-agent","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mikeal:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mikeal:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tunnel-agent/package.json"}]},{"bom-ref":"pkg:npm/type-is@1.6.18?package-id=26b4bd4c5c1a13bb","type":"library","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","name":"type-is","version":"1.6.18","description":"Infer the content-type of a request.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*","purl":"pkg:npm/type-is@1.6.18","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/type-is/package.json"}]},{"bom-ref":"pkg:npm/typecast@0.0.1?package-id=89d78b6ec74b159e","type":"library","name":"typecast","version":"0.0.1","description":"Simple typecasting","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eivindfjeldstad:typecast:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/typecast@0.0.1","externalReferences":[{"url":"https://github.com/eivindfjeldstad/typecast.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:typecast:typecast:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typecast/package.json"}]},{"bom-ref":"pkg:npm/typed-array-buffer@1.0.3?package-id=131dc3292e117210","type":"library","author":"Jordan Harband ","name":"typed-array-buffer","version":"1.0.3","description":"Get the ArrayBuffer out of a TypedArray, robustly.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:typed-array-buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/typed-array-buffer@1.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/typed-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/typed-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array-buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array_buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array_buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typed-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/typedarray@0.0.6?package-id=34381d15eae55598","type":"library","author":"James Halliday (http://substack.net)","name":"typedarray","version":"0.0.6","description":"TypedArray polyfill for old browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/typedarray@0.0.6","externalReferences":[{"url":"git://github.com/substack/typedarray.git","type":"distribution"},{"url":"https://github.com/substack/typedarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:typedarray:0.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typedarray/package.json"}]},{"bom-ref":"pkg:npm/typescript@5.3.3?package-id=79113752b5d3fcd1","type":"library","author":"Microsoft Corp.","name":"typescript","version":"5.3.3","description":"TypeScript is a language for application scale JavaScript development","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:typescript:typescript:5.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/typescript@5.3.3","externalReferences":[{"url":"https://github.com/Microsoft/TypeScript.git","type":"distribution"},{"url":"https://www.typescriptlang.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Microsoft:typescript:5.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typescript/package.json"}]},{"bom-ref":"pkg:deb/debian/tzdata@2025b-0%2Bdeb12u1?arch=all&distro=debian-12&package-id=af2af4212145631b","type":"library","publisher":"GNU Libc Maintainers ","name":"tzdata","version":"2025b-0+deb12u1","licenses":[{"license":{"name":"public-domain"}}],"cpe":"cpe:2.3:a:tzdata:tzdata:2025b-0\\+deb12u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/tzdata@2025b-0%2Bdeb12u1?arch=all&distro=debian-12","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:48c0fb67386ed713921fcc0468be23231d0872fa67ccc8ea3929df4656b6ddfc"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/tzdata"},{"name":"syft:location:1:layerID","value":"sha256:48c0fb67386ed713921fcc0468be23231d0872fa67ccc8ea3929df4656b6ddfc"},{"name":"syft:location:1:path","value":"/usr/share/doc/tzdata/copyright"},{"name":"syft:location:2:layerID","value":"sha256:48c0fb67386ed713921fcc0468be23231d0872fa67ccc8ea3929df4656b6ddfc"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/tzdata.md5sums"},{"name":"syft:metadata:installedSize","value":"2563"}]},{"bom-ref":"pkg:npm/uglify-js@3.19.3?package-id=929f7bc81a430f59","type":"library","author":"Mihai Bazon (http://lisperator.net/), Alex Lam , Mihai Bazon (http://lisperator.net/)","name":"uglify-js","version":"3.19.3","description":"JavaScript parser, mangler/compressor and beautifier toolkit","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:uglifyjs_project:uglifyjs:3.19.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/uglify-js@3.19.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/uglify-js/package.json"}]},{"bom-ref":"pkg:npm/unbzip2-stream@1.4.3?package-id=d5a42b3035bdd365","type":"library","author":"Jan Bölsche ","name":"unbzip2-stream","version":"1.4.3","description":"streaming unbzip2 implementation in pure javascript for node and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/unbzip2-stream@1.4.3","externalReferences":[{"url":"https://github.com/regular/unbzip2-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2-stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2_stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2_stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regular:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regular:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unbzip2-stream/package.json"}]},{"bom-ref":"pkg:npm/unc-path-regex@0.1.2?package-id=ac9aba0a81d8073c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"unc-path-regex","version":"0.1.2","description":"Regular expression for testing if a file path is a windows UNC file path. Can also be used as a component of another regexp via the `.source` property.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unc-path-regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/unc-path-regex@0.1.2","externalReferences":[{"url":"https://github.com/regexhq/unc-path-regex.git","type":"distribution"},{"url":"https://github.com/regexhq/unc-path-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path-regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path_regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path_regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unc-path-regex/package.json"}]},{"bom-ref":"pkg:npm/underscore.string@3.3.6?package-id=719cbb15880d33d1","type":"library","author":"Esa-Matti Suuronen (http://esa-matti.suuronen.org/), Edward Tsech , Pavel Pravosud (), Sasha Koss (http://koss.nocorp.me/), Vladimir Dronnikov , Pete Kruckenberg (), Paul Chavard (), Ed Finkler (), Christoph Hermann ()","name":"underscore.string","version":"3.3.6","description":"String manipulation extensions for Underscore.js javascript library.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:underscore.string:underscore.string:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/underscore.string@3.3.6","externalReferences":[{"url":"https://github.com/epeli/underscore.string.git","type":"distribution"},{"url":"http://epeli.github.com/underscore.string/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:epeli:underscore.string:3.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/underscore.string/package.json"}]},{"bom-ref":"pkg:npm/undici-types@6.19.8?package-id=c0ec3464366df4cf","type":"library","author":"Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)","name":"undici-types","version":"6.19.8","description":"A stand-alone types package for Undici","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:undici-types:undici-types:6.19.8:*:*:*:*:*:*:*","purl":"pkg:npm/undici-types@6.19.8","externalReferences":[{"url":"git+https://github.com/nodejs/undici.git","type":"distribution"},{"url":"https://undici.nodejs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici-types:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici-types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici-types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/node_modules/undici-types/package.json"}]},{"bom-ref":"pkg:npm/undici-types@6.21.0?package-id=2ec7a147b1861e7e","type":"library","author":"Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)","name":"undici-types","version":"6.21.0","description":"A stand-alone types package for Undici","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*","purl":"pkg:npm/undici-types@6.21.0","externalReferences":[{"url":"git+https://github.com/nodejs/undici.git","type":"distribution"},{"url":"https://undici.nodejs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/undici-types/package.json"}]},{"bom-ref":"pkg:npm/unicode-properties@1.4.1?package-id=77f2f0a8f7df086b","type":"library","author":"Devon Govett ","name":"unicode-properties","version":"1.4.1","description":"Provides fast access to unicode character properties","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/unicode-properties@1.4.1","externalReferences":[{"url":"git://github.com/devongovett/unicode-properties.git","type":"distribution"},{"url":"https://github.com/devongovett/unicode-properties","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unicode-properties/package.json"}]},{"bom-ref":"pkg:npm/unicode-trie@2.0.0?package-id=c0712c33eff88472","type":"library","author":"Devon Govett ","name":"unicode-trie","version":"2.0.0","description":"Unicode Trie data structure for fast character metadata lookup, ported from ICU","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unicode-trie@2.0.0","externalReferences":[{"url":"git://github.com/devongovett/unicode-trie.git","type":"distribution"},{"url":"https://github.com/devongovett/unicode-trie","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unicode-trie/package.json"}]},{"bom-ref":"pkg:npm/union-value@1.0.1?package-id=f5c7d68fe34baef1","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"union-value","version":"1.0.1","description":"Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:union-value:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/union-value@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/union-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:union_value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union-value:union-value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union-value:union_value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union_value:union-value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union_value:union_value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union:union-value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:union:union_value:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/union-value/package.json"}]},{"bom-ref":"pkg:npm/unique-filename@1.1.1?package-id=cb6e79fb065b0164","type":"library","author":"Rebecca Turner (http://re-becca.org/)","name":"unique-filename","version":"1.1.1","description":"Generate a unique filename for use in temporary directories or caches.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/unique-filename@1.1.1","externalReferences":[{"url":"https://github.com/iarna/unique-filename.git","type":"distribution"},{"url":"https://github.com/iarna/unique-filename","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-filename:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json"}]},{"bom-ref":"pkg:npm/unique-filename@4.0.0?package-id=deaed92dd166ac8d","type":"library","author":"GitHub Inc.","name":"unique-filename","version":"4.0.0","description":"Generate a unique filename for use in temporary directories or caches.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unique-filename@4.0.0","externalReferences":[{"url":"git+https://github.com/npm/unique-filename.git","type":"distribution"},{"url":"https://github.com/iarna/unique-filename","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unique-filename/package.json"}]},{"bom-ref":"pkg:npm/unique-slug@2.0.2?package-id=930467346c7209f9","type":"library","author":"Rebecca Turner (http://re-becca.org)","name":"unique-slug","version":"2.0.2","description":"Generate a unique character string suitible for use in files and URLs.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-slug:unique-slug:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/unique-slug@2.0.2","externalReferences":[{"url":"git://github.com/iarna/unique-slug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-slug:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json"}]},{"bom-ref":"pkg:npm/unique-slug@5.0.0?package-id=b1297fb43211d6e6","type":"library","author":"GitHub Inc.","name":"unique-slug","version":"5.0.0","description":"Generate a unique character string suitible for use in files and URLs.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unique-slug@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/unique-slug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unique-slug/package.json"}]},{"bom-ref":"pkg:npm/unit-compare@1.0.1?package-id=45e8ba56c7fc67b5","type":"library","author":"nspragg@gmail.com","name":"unit-compare","version":"1.0.1","description":"Compare byte and datetime units","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unit-compare:unit-compare:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/unit-compare@1.0.1","externalReferences":[{"url":"https://github.com/nspragg/unit-compare.git","type":"distribution"},{"url":"https://github.com/nspragg/unit-compare","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unit-compare:unit_compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unit_compare:unit-compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unit_compare:unit_compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:unit-compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nspragg:unit_compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unit:unit-compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unit:unit_compare:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unit-compare/package.json"}]},{"bom-ref":"pkg:npm/universalify@2.0.1?package-id=478e17a8d9d9e24d","type":"library","author":"Ryan Zimmerman ","name":"universalify","version":"2.0.1","description":"Make a callback- or promise-based function support both promises and callbacks.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:universalify:universalify:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/universalify@2.0.1","externalReferences":[{"url":"git+https://github.com/RyanZim/universalify.git","type":"distribution"},{"url":"https://github.com/RyanZim/universalify#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:universalify:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/universalify/package.json"}]},{"bom-ref":"pkg:npm/unpipe@1.0.0?package-id=7bdc8da7ff6ad05b","type":"library","author":"Douglas Christopher Wilson ","name":"unpipe","version":"1.0.0","description":"Unpipe a stream from all destinations","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unpipe@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unpipe/package.json"}]},{"bom-ref":"pkg:npm/unset-value@1.0.0?package-id=919844ff6a5d8498","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"unset-value","version":"1.0.0","description":"Delete nested properties from an object using dot notation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:unset-value:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unset-value@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/unset-value","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:unset_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset-value:unset-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset-value:unset_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset_value:unset-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset_value:unset_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset:unset-value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unset:unset_value:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unset-value/package.json"}]},{"bom-ref":"pkg:npm/untildify@2.1.0?package-id=8ff94005ba61a9ee","type":"library","author":"Sindre Sorhus (sindresorhus.com), silverwind (https://silverwind.io)","name":"untildify","version":"2.1.0","description":"Convert a tilde path to an absolute path: ~/dev => /Users/sindresorhus/dev","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:untildify:untildify:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/untildify@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/untildify/package.json"}]},{"bom-ref":"pkg:npm/unzipper@0.9.15?package-id=96d1f3567742fbab","type":"library","author":"Evan Oxfeld , Ziggy Jonsson , Evan Oxfeld , Joe Ferner ","name":"unzipper","version":"0.9.15","description":"Unzip cross-platform streaming API ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unzipper_project:unzipper:0.9.15:*:*:*:*:node.js:*:*","purl":"pkg:npm/unzipper@0.9.15","externalReferences":[{"url":"https://github.com/ZJONSSON/node-unzipper.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unzipper/package.json"}]},{"bom-ref":"pkg:npm/urix@0.1.0?package-id=919596dc82904b40","type":"library","author":"Simon Lydell","name":"urix","version":"0.1.0","description":"Makes Windows-style paths more unix and URI friendly.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:urix:urix:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/urix@0.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/urix/package.json"}]},{"bom-ref":"pkg:npm/url-parse-lax@3.0.0?package-id=fe44fa8ce8ee75af","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"url-parse-lax","version":"3.0.0","description":"Lax url.parse() with support for protocol-less URLs & IPs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:url-parse-lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/url-parse-lax@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse-lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse_lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse_lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/url-parse-lax/package.json"}]},{"bom-ref":"pkg:npm/url-to-options@1.0.1?package-id=e31e5498dbb100a3","type":"library","author":"Steven Vachon (https://www.svachon.com/)","name":"url-to-options","version":"1.0.1","description":"Convert a WHATWG URL to an http(s).request options object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/url-to-options@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to-options:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to_options:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to_options:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/url-to-options/package.json"}]},{"bom-ref":"pkg:npm/use@3.1.1?package-id=91cd1ab629647b66","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), ","name":"use","version":"3.1.1","description":"Easily add plugin support to your node.js application.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:use:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/use@3.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/use","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:use:use:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/use/package.json"}]},{"bom-ref":"pkg:npm/utf8-byte-length@1.0.5?package-id=91d2330fa076a0de","type":"library","author":"Carl Xiong ","name":"utf8-byte-length","version":"1.0.5","description":"Get utf8 byte length of string","licenses":[{"expression":"WTFPL OR MIT"}],"cpe":"cpe:2.3:a:utf8-byte-length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/utf8-byte-length@1.0.5","externalReferences":[{"url":"git+https://github.com/parshap/utf8-byte-length.git","type":"distribution"},{"url":"https://github.com/parshap/utf8-byte-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte-length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte_length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte_length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/utf8-byte-length/package.json"}]},{"bom-ref":"pkg:npm/util@0.12.5?package-id=81599fa0c784b361","type":"library","author":"Joyent (http://www.joyent.com)","name":"util","version":"0.12.5","description":"Node.js's util module for all engines","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:browserify:util:0.12.5:*:*:*:*:*:*:*","purl":"pkg:npm/util@0.12.5","externalReferences":[{"url":"git://github.com/browserify/node-util","type":"distribution"},{"url":"https://github.com/browserify/node-util","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:util:util:0.12.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/util/package.json"}]},{"bom-ref":"pkg:npm/util-deprecate@1.0.2?package-id=5aa8474b38ae743a","type":"library","author":"Nathan Rajlich (http://n8.io/)","name":"util-deprecate","version":"1.0.2","description":"The Node.js `util.deprecate()` function with browser support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/util-deprecate@1.0.2","externalReferences":[{"url":"git://github.com/TooTallNate/util-deprecate.git","type":"distribution"},{"url":"https://github.com/TooTallNate/util-deprecate","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/util-deprecate/package.json"}]},{"bom-ref":"pkg:npm/utils-merge@1.0.1?package-id=6f20808d27c78dba","type":"library","author":"Jared Hanson (http://www.jaredhanson.net/)","name":"utils-merge","version":"1.0.1","description":"merge() utility function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/utils-merge@1.0.1","externalReferences":[{"url":"git://github.com/jaredhanson/utils-merge.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jaredhanson:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/utils-merge/package.json"}]},{"bom-ref":"pkg:npm/uuid@8.3.2?package-id=75276f930d3cfafc","type":"library","name":"uuid","version":"8.3.2","description":"RFC4122 (v1, v4, and v5) UUIDs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/uuid@8.3.2","externalReferences":[{"url":"https://github.com/uuidjs/uuid.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:uuid:uuid:8.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/uuid/package.json"}]},{"bom-ref":"pkg:npm/v8flags@3.2.0?package-id=f2d732c14052d64a","type":"library","author":"Gulp Team (http://gulpjs.com/), Tyler Kellen , Blaine Bublitz , Nicolò Ribaudo , Selwyn , Leo Zhang ","name":"v8flags","version":"3.2.0","description":"Get available v8 and Node.js flags.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:v8flags:v8flags:3.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/v8flags@3.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/v8flags/package.json"}]},{"bom-ref":"pkg:npm/validate@4.5.1?package-id=ccebf638e9fd3787","type":"library","author":"Eivind Fjeldstad","name":"validate","version":"4.5.1","description":"Validate object properties in javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:validate:validate:4.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/validate@4.5.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/validate/package.json"}]},{"bom-ref":"pkg:npm/validator@13.15.15?package-id=3b9b91f7d23a3503","type":"library","author":"Chris O'Hara , Anthony Nandaa (https://github.com/profnandaa)","name":"validator","version":"13.15.15","description":"String validation and sanitization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:validator_project:validator:13.15.15:*:*:*:*:node.js:*:*","purl":"pkg:npm/validator@13.15.15","externalReferences":[{"url":"git+https://github.com/validatorjs/validator.js.git","type":"distribution"},{"url":"https://github.com/validatorjs/validator.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/validator/package.json"}]},{"bom-ref":"pkg:npm/vary@1.1.2?package-id=ef1054337f6d6829","type":"library","author":"Douglas Christopher Wilson ","name":"vary","version":"1.1.2","description":"Manipulate the HTTP Vary header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/vary@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/vary/package.json"}]},{"bom-ref":"pkg:npm/vm2@3.9.17?package-id=9137ec7afce7bb08","type":"library","author":"Patrik Simek (https://patriksimek.cz)","name":"vm2","version":"3.9.17","description":"vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Securely!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vm2_project:vm2:3.9.17:*:*:*:*:node.js:*:*","purl":"pkg:npm/vm2@3.9.17","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/vm2/package.json"}]},{"bom-ref":"pkg:npm/void-elements@3.1.0?package-id=c20f7d8a863db46e","type":"library","author":"hemanth.hm","name":"void-elements","version":"3.1.0","description":"Array of \"void elements\" defined by the HTML specification.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:void-elements:void-elements:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/void-elements@3.1.0","externalReferences":[{"url":"https://github.com/jadejs/void-elements","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:void-elements:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void_elements:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void_elements:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/void-elements/package.json"}]},{"bom-ref":"pkg:npm/walk@2.3.15?package-id=01da09009ec4151e","type":"library","author":"AJ ONeal ","name":"walk","version":"2.3.15","description":"A node port of python's os.walk","licenses":[{"expression":"MIT OR Apache-2.0"}],"cpe":"cpe:2.3:a:walk:walk:2.3.15:*:*:*:*:*:*:*","purl":"pkg:npm/walk@2.3.15","externalReferences":[{"url":"https://git.coolaj86.com/coolaj86/fs-walk.js.git","type":"distribution"},{"url":"https://git.coolaj86.com/coolaj86/fs-walk.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walk/package.json"}]},{"bom-ref":"pkg:npm/walkdir@0.0.11?package-id=f1205193f13f39ea","type":"library","author":"Ryan Day , tjfontaine","name":"walkdir","version":"0.0.11","description":"Find files simply. Walks a directory tree emitting events based on what it finds. Presents a familiar callback/emitter/a+sync interface. Walk a tree of any depth.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:soldair:walkdir:0.0.11:*:*:*:*:*:*:*","purl":"pkg:npm/walkdir@0.0.11","externalReferences":[{"url":"git://github.com/soldair/node-walkdir.git","type":"distribution"},{"url":"http://github.com/soldair/node-walkdir","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:walkdir:walkdir:0.0.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walkdir/package.json"}]},{"bom-ref":"pkg:npm/web3@4.16.0?package-id=2e8e3015e1af67e6","type":"library","author":"ChainSafe Systems","name":"web3","version":"4.16.0","description":"Ethereum JavaScript API","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:ChainSafe:web3:4.16.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3@4.16.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3:4.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3/package.json"}]},{"bom-ref":"pkg:npm/web3-core@4.7.1?package-id=14a7495ea03c9693","type":"library","author":"ChainSafe Systems","name":"web3-core","version":"4.7.1","description":"Web3 core tools for sub-packages. This is an internal package.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:ChainSafe:web3-core:4.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/web3-core@4.7.1","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-core:web3-core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-core:web3_core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_core:web3-core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_core:web3_core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_core:4.7.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-core/package.json"}]},{"bom-ref":"pkg:npm/web3-errors@1.3.1?package-id=28d6448f2bdc5b42","type":"library","author":"ChainSafe Systems","name":"web3-errors","version":"1.3.1","description":"This package has web3 error classes","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-errors:web3-errors:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/web3-errors@1.3.1","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-errors:web3_errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_errors:web3-errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_errors:web3_errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_errors:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-errors/package.json"}]},{"bom-ref":"pkg:npm/web3-eth@4.11.1?package-id=9ab222a1f50be8c3","type":"library","author":"ChainSafe Systems","name":"web3-eth","version":"4.11.1","description":"Web3 module to interact with the Ethereum blockchain and smart contracts.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:ChainSafe:web3-eth:4.11.1:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth@4.11.1","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth:4.11.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-abi@4.4.1?package-id=1ffcb90cd3e54f11","type":"library","author":"ChainSafe Systems","name":"web3-eth-abi","version":"4.4.1","description":"Web3 module encode and decode EVM in/output.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-abi:web3-eth-abi:4.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-abi@4.4.1","externalReferences":[{"url":"https://github.com/ethereum/web3.js/tree/4.x/packages/web3-eth-abi","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-abi:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_abi:web3-eth-abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_abi:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:web3-eth-abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_abi:4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-abi/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-accounts@4.3.1?package-id=014a4ad9844b9cbf","type":"library","author":"ChainSafe Systems","name":"web3-eth-accounts","version":"4.3.1","description":"Package for managing Ethereum accounts and signing","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-accounts:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-accounts@4.3.1","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-accounts:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_accounts:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_accounts:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_accounts:4.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-accounts/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-contract@4.7.2?package-id=b5f6469d481d57d8","type":"library","author":"ChainSafe Systems","name":"web3-eth-contract","version":"4.7.2","description":"Web3 module to interact with Ethereum smart contracts.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-contract:web3-eth-contract:4.7.2:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-contract@4.7.2","externalReferences":[{"url":"https://github.com/ethereum/web3.js/tree/4.x/packages/web3-eth-contract","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-contract:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_contract:web3-eth-contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_contract:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:web3-eth-contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethereum:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_contract:4.7.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-contract/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-ens@4.4.0?package-id=e2fc4797aa4a6b29","type":"library","author":"ChainSafe Systems","name":"web3-eth-ens","version":"4.4.0","description":"This package has ENS functions for interacting with Ethereum Name Service.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-ens:web3-eth-ens:4.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-ens@4.4.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-ens:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_ens:web3-eth-ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_ens:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-eth-ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_ens:4.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-ens/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-iban@4.0.7?package-id=872d82c225929374","type":"library","author":"ChainSafe Systems","name":"web3-eth-iban","version":"4.0.7","description":"This package converts Ethereum addresses to IBAN addresses and vice versa.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-iban:web3-eth-iban:4.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-iban@4.0.7","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-iban:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_iban:web3-eth-iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_iban:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-eth-iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_iban:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-iban/package.json"}]},{"bom-ref":"pkg:npm/web3-eth-personal@4.1.0?package-id=86b64662ee5ecbd0","type":"library","author":"ChainSafe Systems","name":"web3-eth-personal","version":"4.1.0","description":"Web3 module to interact with the Ethereum blockchain accounts stored in the node.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-eth-personal:web3-eth-personal:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-eth-personal@4.1.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth-personal:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_personal:web3-eth-personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth_personal:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-eth-personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3-eth-personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-eth:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3-eth-personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_eth:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-eth-personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_eth_personal:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-eth-personal/package.json"}]},{"bom-ref":"pkg:npm/web3-net@4.1.0?package-id=20491e5bff6f6d9f","type":"library","author":"ChainSafe Systems","name":"web3-net","version":"4.1.0","description":"Web3 module to interact with the Ethereum nodes networking properties.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:ChainSafe:web3-net:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-net@4.1.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-net:web3-net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-net:web3_net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_net:web3-net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_net:web3_net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_net:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-net/package.json"}]},{"bom-ref":"pkg:npm/web3-providers-http@4.2.0?package-id=1dafe4d6630c4a96","type":"library","author":"ChainSafe Systems","name":"web3-providers-http","version":"4.2.0","description":"HTTP provider for Web3 4.x.x","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-providers-http:web3-providers-http:4.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-providers-http@4.2.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers-http:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_http:web3-providers-http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_http:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3-providers-http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3-providers-http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-providers-http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-providers-http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_providers_http:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-providers-http/package.json"}]},{"bom-ref":"pkg:npm/web3-providers-ipc@4.0.7?package-id=10248b53e67e06af","type":"library","author":"ChainSafe Systems","name":"web3-providers-ipc","version":"4.0.7","description":"IPC provider for Web3 4.x.x","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-providers-ipc:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/web3-providers-ipc@4.0.7","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers-ipc:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_ipc:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_ipc:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-providers-ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_providers_ipc:4.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-providers-ipc/package.json"}]},{"bom-ref":"pkg:npm/web3-providers-ws@4.0.8?package-id=72f5e9566973db2c","type":"library","author":"ChainSafe Systems","name":"web3-providers-ws","version":"4.0.8","description":"Websocket provider for Web3 4.x.x","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-providers-ws:web3-providers-ws:4.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/web3-providers-ws@4.0.8","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers-ws:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_ws:web3-providers-ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers_ws:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3-providers-ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-providers:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3-providers-ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_providers:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-providers-ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-providers-ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_providers_ws:4.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-providers-ws/package.json"}]},{"bom-ref":"pkg:npm/web3-rpc-methods@1.3.0?package-id=6aafd0f57ad9cf13","type":"library","author":"ChainSafe Systems","name":"web3-rpc-methods","version":"1.3.0","description":"Ethereum RPC methods for Web3 4.x.x","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-rpc-methods:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-rpc-methods@1.3.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc-methods:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc_methods:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc_methods:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-rpc-methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_rpc_methods:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-rpc-methods/package.json"}]},{"bom-ref":"pkg:npm/web3-rpc-providers@1.0.0-rc.4?package-id=2537784187e102eb","type":"library","author":"ChainSafe Systems","name":"web3-rpc-providers","version":"1.0.0-rc.4","description":"Web3 Providers package","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-rpc-providers:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*","purl":"pkg:npm/web3-rpc-providers@1.0.0-rc.4","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc-providers:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc_providers:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc_providers:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-rpc:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_rpc:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-rpc-providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_rpc_providers:1.0.0-rc.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-rpc-providers/package.json"}]},{"bom-ref":"pkg:npm/web3-types@1.10.0?package-id=001367585fcb4924","type":"library","author":"ChainSafe Systems","name":"web3-types","version":"1.10.0","description":"Provide the common data structures and interfaces for web3 modules.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-types:web3-types:1.10.0:*:*:*:*:*:*:*","purl":"pkg:npm/web3-types@1.10.0","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-types:web3_types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_types:web3-types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_types:web3_types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_types:1.10.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-types/package.json"}]},{"bom-ref":"pkg:npm/web3-utils@4.3.3?package-id=5854ac89952b2b2d","type":"library","author":"ChainSafe Systems","name":"web3-utils","version":"4.3.3","description":"Collection of utility functions used in web3.js.","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-utils:web3-utils:4.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/web3-utils@4.3.3","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-utils:web3_utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_utils:web3-utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_utils:web3_utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_utils:4.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-utils/package.json"}]},{"bom-ref":"pkg:npm/web3-validator@2.0.6?package-id=1b31d00ca1971282","type":"library","author":"ChainSafe Systems","name":"web3-validator","version":"2.0.6","description":"JSON-Schema compatible validator for web3","licenses":[{"license":{"id":"LGPL-3.0-only"}}],"cpe":"cpe:2.3:a:web3-validator:web3-validator:2.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/web3-validator@2.0.6","externalReferences":[{"url":"https://github.com/ChainSafe/web3.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3-validator:web3_validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_validator:web3-validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3_validator:web3_validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3-validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ChainSafe:web3_validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3-validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:web3:web3_validator:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/web3-validator/package.json"}]},{"bom-ref":"pkg:npm/webidl-conversions@3.0.1?package-id=03f12591ec8244b6","type":"library","author":"Domenic Denicola (https://domenic.me/)","name":"webidl-conversions","version":"3.0.1","description":"Implements the WebIDL algorithms for converting to and from JavaScript values","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:webidl-conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/webidl-conversions@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:webidl-conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:webidl_conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:webidl_conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:webidl:webidl-conversions:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:webidl:webidl_conversions:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/webidl-conversions/package.json"}]},{"bom-ref":"pkg:npm/whatwg-url@5.0.0?package-id=58b29aa6e629fc79","type":"library","author":"Sebastian Mayr ","name":"whatwg-url","version":"5.0.0","description":"An implementation of the WHATWG URL Standard's URL API and parsing machinery","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:whatwg-url:whatwg-url:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/whatwg-url@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:whatwg-url:whatwg_url:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whatwg_url:whatwg-url:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whatwg_url:whatwg_url:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whatwg:whatwg-url:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:whatwg:whatwg_url:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/whatwg-url/package.json"}]},{"bom-ref":"pkg:npm/which@1.3.1?package-id=41ea0ec5c3df6504","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"which","version":"1.3.1","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/which@1.3.1","externalReferences":[{"url":"git://github.com/isaacs/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which@2.0.2?package-id=1222522e2e485736","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me)","name":"which","version":"2.0.2","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/which@2.0.2","externalReferences":[{"url":"git://github.com/isaacs/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which@5.0.0?package-id=35565647196cbf3c","type":"library","author":"GitHub Inc.","name":"which","version":"5.0.0","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/which@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which-boxed-primitive@1.1.1?package-id=1c5150f5622ba818","type":"library","author":"Jordan Harband ","name":"which-boxed-primitive","version":"1.1.1","description":"Which kind of boxed JS primitive is this?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-boxed-primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/which-boxed-primitive@1.1.1","externalReferences":[{"url":"git+https://github.com/inspect-js/which-boxed-primitive.git","type":"distribution"},{"url":"https://github.com/inspect-js/which-boxed-primitive#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed-primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed_primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed_primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-boxed-primitive/package.json"}]},{"bom-ref":"pkg:npm/which-collection@1.0.2?package-id=15815161b3b5c910","type":"library","author":"Jordan Harband ","name":"which-collection","version":"1.0.2","description":"Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-collection:which-collection:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/which-collection@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/which-collection.git","type":"distribution"},{"url":"https://github.com/inspect-js/which-collection#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-collection:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_collection:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_collection:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-collection/package.json"}]},{"bom-ref":"pkg:npm/which-module@2.0.1?package-id=17fef2e739c99bd0","type":"library","author":"nexdrew","name":"which-module","version":"2.0.1","description":"Find the module object for something that was require()d","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:which-module:which-module:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/which-module@2.0.1","externalReferences":[{"url":"git+https://github.com/nexdrew/which-module.git","type":"distribution"},{"url":"https://github.com/nexdrew/which-module#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-module:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_module:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_module:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nexdrew:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nexdrew:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-module/package.json"}]},{"bom-ref":"pkg:npm/which-pm-runs@1.1.0?package-id=511b12aae9b5f098","type":"library","author":"Zoltan Kochan","name":"which-pm-runs","version":"1.1.0","description":"Detects what package manager executes the process","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-pm-runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/which-pm-runs@1.1.0","externalReferences":[{"url":"https://github.com/zkochan/packages/tree/main/which-pm-runs","type":"distribution"},{"url":"https://github.com/zkochan/packages/tree/main/which-pm-runs#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm-runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm_runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm_runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zkochan:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zkochan:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-pm-runs/package.json"}]},{"bom-ref":"pkg:npm/which-typed-array@1.1.19?package-id=677c2c67e8d9ac81","type":"library","author":"Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)","name":"which-typed-array","version":"1.1.19","description":"Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-typed-array:which-typed-array:1.1.19:*:*:*:*:*:*:*","purl":"pkg:npm/which-typed-array@1.1.19","externalReferences":[{"url":"git://github.com/inspect-js/which-typed-array.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed-array:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed_array:which-typed-array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed_array:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed:which-typed-array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed:which-typed-array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-typed-array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-typed-array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_typed_array:1.1.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-typed-array/package.json"}]},{"bom-ref":"pkg:npm/wide-align@1.1.3?package-id=5c7edf2206958f5d","type":"library","author":"Rebecca Turner (http://re-becca.org/)","name":"wide-align","version":"1.1.3","description":"A wide-character aware text alignment function for use on the console or with fixed width fonts.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wide-align:wide-align:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/wide-align@1.1.3","externalReferences":[{"url":"https://github.com/iarna/wide-align","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide-align:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/package.json"}]},{"bom-ref":"pkg:npm/wide-align@1.1.5?package-id=2f5deab669904e50","type":"library","author":"Rebecca Turner (http://re-becca.org/)","name":"wide-align","version":"1.1.5","description":"A wide-character aware text alignment function for use on the console or with fixed width fonts.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/wide-align@1.1.5","externalReferences":[{"url":"https://github.com/iarna/wide-align","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json"}]},{"bom-ref":"pkg:npm/winston@3.17.0?package-id=3926b8334de91e61","type":"library","author":"Charlie Robbins , David Hyde ","name":"winston","version":"3.17.0","description":"A logger for just about everything.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winstonjs:winston:3.17.0:*:*:*:*:*:*:*","purl":"pkg:npm/winston@3.17.0","externalReferences":[{"url":"https://github.com/winstonjs/winston.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston:3.17.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/package.json"}]},{"bom-ref":"pkg:npm/winston-transport@4.9.0?package-id=365414d23adfc5d2","type":"library","author":"Charlie Robbins ","name":"winston-transport","version":"4.9.0","description":"Base stream implementations for winston@3 and up.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winston-transport:winston-transport:4.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/winston-transport@4.9.0","externalReferences":[{"url":"https://github.com/winstonjs/winston-transport#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston-transport:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston_transport:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston_transport:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston-transport/package.json"}]},{"bom-ref":"pkg:npm/with@7.0.2?package-id=f241c9ed4f41ff10","type":"library","author":"ForbesLindesay","name":"with","version":"7.0.2","description":"Compile time `with` for strict mode JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:with:7.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/with@7.0.2","externalReferences":[{"url":"https://github.com/pugjs/with.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:with:with:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/with/package.json"}]},{"bom-ref":"pkg:npm/wkx@0.5.0?package-id=842b66eb903e3244","type":"library","author":"Christian Schwarz","name":"wkx","version":"0.5.0","description":"A WKT/WKB/EWKT/EWKB/TWKB/GeoJSON parser and serializer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cschwarz:wkx:0.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/wkx@0.5.0","externalReferences":[{"url":"http://github.com/cschwarz/wkx.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wkx:wkx:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wkx/package.json"}]},{"bom-ref":"pkg:npm/wordwrap@0.0.3?package-id=585eea1e233e2e9a","type":"library","author":"James Halliday (http://substack.net)","name":"wordwrap","version":"0.0.3","description":"Wrap those words. Show them at what columns to start and stop.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:wordwrap:0.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/wordwrap@0.0.3","externalReferences":[{"url":"git://github.com/substack/node-wordwrap.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wordwrap:wordwrap:0.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wordwrap/package.json"}]},{"bom-ref":"pkg:npm/wordwrap@1.0.0?package-id=73516f520b686791","type":"library","author":"James Halliday (http://substack.net)","name":"wordwrap","version":"1.0.0","description":"Wrap those words. Show them at what columns to start and stop.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:wordwrap:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/wordwrap@1.0.0","externalReferences":[{"url":"git://github.com/substack/node-wordwrap.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wordwrap:wordwrap:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/handlebars/node_modules/wordwrap/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@6.2.0?package-id=cbfbb7822072903f","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"wrap-ansi","version":"6.2.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@7.0.0?package-id=b15a62ebd4d4ca1c","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"wrap-ansi","version":"7.0.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@7.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@8.1.0?package-id=3e75b684ded1ef93","type":"library","author":"Sindre Sorhus (https://sindresorhus.com)","name":"wrap-ansi","version":"8.1.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@8.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/package.json"}]},{"bom-ref":"pkg:npm/wrappy@1.0.2?package-id=9e7700cc01592b12","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"wrappy","version":"1.0.2","description":"Callback wrapping utility","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/wrappy@1.0.2","externalReferences":[{"url":"https://github.com/npm/wrappy","type":"distribution"},{"url":"https://github.com/npm/wrappy","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrappy/package.json"}]},{"bom-ref":"pkg:npm/ws@7.4.6?package-id=670482146c83d660","type":"library","author":"Einar Otto Stangvik (http://2x.io)","name":"ws","version":"7.4.6","description":"Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ws_project:ws:7.4.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/ws@7.4.6","externalReferences":[{"url":"https://github.com/websockets/ws","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/ws/package.json"}]},{"bom-ref":"pkg:npm/ws@8.17.1?package-id=c740f277708480a9","type":"library","author":"Einar Otto Stangvik (http://2x.io)","name":"ws","version":"8.17.1","description":"Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ws_project:ws:8.17.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ws@8.17.1","externalReferences":[{"url":"git+https://github.com/websockets/ws.git","type":"distribution"},{"url":"https://github.com/websockets/ws","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ws/package.json"}]},{"bom-ref":"pkg:npm/xtend@4.0.2?package-id=961b704b394b9dda","type":"library","author":"Raynos , Jake Verbaten, Matt Esch","name":"xtend","version":"4.0.2","description":"extend like a boss","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/xtend@4.0.2","externalReferences":[{"url":"git://github.com/Raynos/xtend.git","type":"distribution"},{"url":"https://github.com/Raynos/xtend","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/xtend/package.json"}]},{"bom-ref":"pkg:npm/y18n@4.0.3?package-id=cb7009f90513c997","type":"library","author":"Ben Coe ","name":"y18n","version":"4.0.3","description":"the bare-bones internationalization library used by yargs","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:y18n_project:y18n:4.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/y18n@4.0.3","externalReferences":[{"url":"https://github.com/yargs/y18n","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/y18n/package.json"}]},{"bom-ref":"pkg:npm/yallist@3.1.1?package-id=281f852a6ecddc2c","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"3.1.1","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@3.1.1","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=6ff65ae32fc308b3","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=ebf539c8f0cfa1bf","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=88bb3e58ef355edf","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=d66798877c986375","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@5.0.0?package-id=430dbac73c82f24e","type":"library","author":"Isaac Z. Schlueter (http://blog.izs.me/)","name":"yallist","version":"5.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@5.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yaml-schema-validator@1.2.3?package-id=aaef2ad8ce881f0a","type":"library","author":"Ketan Saxena","name":"yaml-schema-validator","version":"1.2.3","description":"Schema validator for yaml files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yaml-schema-validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/yaml-schema-validator@1.2.3","externalReferences":[{"url":"https://github.com/ketanTechracers/schema-validator","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema-validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema_validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema_validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ketanTechracers:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ketanTechracers:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yaml-schema-validator/package.json"}]},{"bom-ref":"pkg:npm/yargs@15.4.1?package-id=2f0e67180312e9e4","type":"library","author":"Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)","name":"yargs","version":"15.4.1","description":"yargs the modern, pirate-themed, successor to optimist.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/yargs@15.4.1","externalReferences":[{"url":"https://github.com/yargs/yargs.git","type":"distribution"},{"url":"https://yargs.js.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/yargs/package.json"}]},{"bom-ref":"pkg:npm/yargs-parser@18.1.3?package-id=827c460c5ebe0ff3","type":"library","author":"Ben Coe ","name":"yargs-parser","version":"18.1.3","description":"the mighty option parser used by yargs","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yargs:yargs-parser:18.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/yargs-parser@18.1.3","externalReferences":[{"url":"https://github.com/yargs/yargs-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json"}]},{"bom-ref":"pkg:npm/yauzl@2.10.0?package-id=7c6e4166ba89d3cf","type":"library","author":"Josh Wolfe ","name":"yauzl","version":"2.10.0","description":"yet another unzip library for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:thejoshwolfe:yauzl:2.10.0:*:*:*:*:*:*:*","purl":"pkg:npm/yauzl@2.10.0","externalReferences":[{"url":"https://github.com/thejoshwolfe/yauzl.git","type":"distribution"},{"url":"https://github.com/thejoshwolfe/yauzl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yauzl:yauzl:2.10.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yauzl/package.json"}]},{"bom-ref":"pkg:npm/yn@3.1.1?package-id=52e94e6e242cbf0f","type":"library","author":"Sindre Sorhus (sindresorhus.com)","name":"yn","version":"3.1.1","description":"Parse yes/no like values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yn:yn:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/yn@3.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yn/package.json"}]},{"bom-ref":"pkg:npm/z85@0.0.2?package-id=866e9bab4ee23af1","type":"library","author":"Michael Sealand ","name":"z85","version":"0.0.2","description":"ZeroMQ Base-85 Encoding","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:msealand:z85:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/z85@0.0.2","externalReferences":[{"url":"https://github.com/msealand/z85.node.git","type":"distribution"},{"url":"https://github.com/msealand/z85.node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:z85:z85:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/z85/package.json"}]},{"bom-ref":"pkg:npm/zip-stream@1.2.0?package-id=0180651c6d08c060","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"zip-stream","version":"1.2.0","description":"a streaming zip archive generator.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiverjs:zip-stream:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/zip-stream@1.2.0","externalReferences":[{"url":"https://github.com/archiverjs/node-zip-stream.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-zip-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip-stream:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip-stream:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip_stream:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip_stream:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/zip-stream/package.json"}]},{"bom-ref":"pkg:npm/zod@3.25.76?package-id=ea8efe4fe69bdf44","type":"library","author":"Colin McDonnell ","name":"zod","version":"3.25.76","description":"TypeScript-first schema declaration and validation library with static type inference","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:*","purl":"pkg:npm/zod@3.25.76","externalReferences":[{"url":"git+https://github.com/colinhacks/zod.git","type":"distribution"},{"url":"https://zod.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/zod/package.json"}]},{"bom-ref":"os:debian@12","type":"operating-system","name":"debian","version":"12","description":"Distroless","swid":{"tagId":"debian","name":"debian","version":"12"},"externalReferences":[{"url":"https://github.com/GoogleContainerTools/distroless/issues/new","type":"issue-tracker"},{"url":"https://github.com/GoogleContainerTools/distroless","type":"website"},{"url":"https://github.com/GoogleContainerTools/distroless/blob/master/README.md","comment":"support","type":"other"}],"properties":[{"name":"syft:distro:extendedSupport","value":"false"},{"name":"syft:distro:id","value":"debian"},{"name":"syft:distro:prettyName","value":"Distroless"},{"name":"syft:distro:versionID","value":"12"}]},{"bom-ref":"25e45f73e3520d93","type":"file","name":"/usr/share/base-files/dot.bashrc","hashes":[{"alg":"SHA-1","content":"1a422a148ad225aa5ba33f8dafd2b7cfcdbd701f"},{"alg":"SHA-256","content":"373b7d3b2ab90d75daf94ca16d61339d088c12020ad43b65d1b34ea80b0c0818"}]},{"bom-ref":"77f81ee642cde73d","type":"file","name":"/usr/share/base-files/dot.profile","hashes":[{"alg":"SHA-1","content":"8e5d66ea938b5118633a4bd8c1d1e93376cd4e9d"},{"alg":"SHA-256","content":"bbee58b1e0787bb851e7f7a4d0c187a8122d68eb67e5fa464696310398ac005b"}]},{"bom-ref":"e11fd05d0ea67938","type":"file","name":"/usr/share/base-files/dot.profile.md5sums","hashes":[{"alg":"SHA-1","content":"349bd16693e670bda2b38dbd86c31297775c5491"},{"alg":"SHA-256","content":"8961ee041c712c735fb05287740ab62737777bd58ce631b54b07d8083efad3bf"}]},{"bom-ref":"6b08ebdb84da32bd","type":"file","name":"/usr/share/base-files/info.dir","hashes":[{"alg":"SHA-1","content":"3551f8dfbf114c159f692d5e823099cdd53b16cf"},{"alg":"SHA-256","content":"c58a258cb9c410c29486aa8fa37f4e5b738bfeedc2b8e97be1cd6cff1df28459"}]},{"bom-ref":"1a70a09dffeae48d","type":"file","name":"/usr/share/base-files/motd","hashes":[{"alg":"SHA-1","content":"8b55aac644e9e6f2701805584cc391ff81d3ecec"},{"alg":"SHA-256","content":"a378977155fb42bb006496321cbe31f74cbda803c3f6ca590f30e76d1afad921"}]},{"bom-ref":"bff3888a95266d6a","type":"file","name":"/usr/share/base-files/profile","hashes":[{"alg":"SHA-1","content":"ba8a21faa2e055afe9149b49931bb727060d8961"},{"alg":"SHA-256","content":"75656c9c0f960573c7530d29286d273f6cef68d9b17cfeb0d74c712860d56b74"}]},{"bom-ref":"6264d108f03fec26","type":"file","name":"/usr/share/base-files/profile.md5sums","hashes":[{"alg":"SHA-1","content":"3165ad886299a68a2ea7e6b9ed81231a4aa8188e"},{"alg":"SHA-256","content":"1fa84254053acaf326946957456e58714bd3b4c1efa311e272e03855a85a5ea9"}]},{"bom-ref":"21192fe1af0da3a9","type":"file","name":"/usr/share/base-files/staff-group-for-usr-local","hashes":[{"alg":"SHA-1","content":"e2bdd9c1f6bff4d437032d71154e32d0c74a2c09"},{"alg":"SHA-256","content":"24f49f765b6363ba8326121b46cabad2ac5c34532cc8322a645d60afe158c4f0"}]},{"bom-ref":"83ac96f9b6e77ce6","type":"file","name":"/usr/share/common-licenses/Apache-2.0","hashes":[{"alg":"SHA-1","content":"2b8b815229aa8a61e483fb4ba0588b8b6c491890"},{"alg":"SHA-256","content":"cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"}]},{"bom-ref":"9df9eca2ca210696","type":"file","name":"/usr/share/common-licenses/Artistic","hashes":[{"alg":"SHA-1","content":"be0627fff2e8aef3d2a14d5d7486babc8a4873ba"},{"alg":"SHA-256","content":"b7fd9b73ea99602016a326e0b62e6646060d18febdd065ceca8bb482208c3d88"}]},{"bom-ref":"55d33c41aa4ffba7","type":"file","name":"/usr/share/common-licenses/BSD","hashes":[{"alg":"SHA-1","content":"095d1f504f6fd8add73a4e4964e37f260f332b6a"},{"alg":"SHA-256","content":"5d588eb3b157d52112afea935c88a7ff9efddc1e2d95a42c25d3b96ad9055008"}]},{"bom-ref":"bc55f228c9fc3f7f","type":"file","name":"/usr/share/common-licenses/CC0-1.0","hashes":[{"alg":"SHA-1","content":"82da472f6d00dc5f0a651f33ebb320aa9c7b08d0"},{"alg":"SHA-256","content":"a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499"}]},{"bom-ref":"1252615b1d48addc","type":"file","name":"/usr/share/common-licenses/GFDL-1.2","hashes":[{"alg":"SHA-1","content":"e436bc68467a0ad3edc01af3189fa4aa04af9302"},{"alg":"SHA-256","content":"d8e94ae5fdb5433fcae2961aeb1a8cf17174d6f4a0465d24bf37dd8a038bd439"}]},{"bom-ref":"6ed4fb1f21e817ba","type":"file","name":"/usr/share/common-licenses/GFDL-1.3","hashes":[{"alg":"SHA-1","content":"715f995f11805ee85601834220c43b082f457ea3"},{"alg":"SHA-256","content":"110535522396708cea37c72a802c5e7e81391139f5f7985631c93ef242b206a4"}]},{"bom-ref":"c47d8583ddfeacde","type":"file","name":"/usr/share/common-licenses/GPL-1","hashes":[{"alg":"SHA-1","content":"18eaf66587c5eea277721d5e569a6e3cd869f855"},{"alg":"SHA-256","content":"d77d235e41d54594865151f4751e835c5a82322b0e87ace266567c3391a4b912"}]},{"bom-ref":"73af606916a4e0f6","type":"file","name":"/usr/share/common-licenses/GPL-2","hashes":[{"alg":"SHA-1","content":"4cc77b90af91e615a64ae04893fdffa7939db84c"},{"alg":"SHA-256","content":"8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643"}]},{"bom-ref":"6927dda72aa00a5e","type":"file","name":"/usr/share/common-licenses/GPL-3","hashes":[{"alg":"SHA-1","content":"31a3d460bb3c7d98845187c716a30db81c44b615"},{"alg":"SHA-256","content":"3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"}]},{"bom-ref":"b14e3b896546df08","type":"file","name":"/usr/share/common-licenses/LGPL-2","hashes":[{"alg":"SHA-1","content":"3cc956929ff9e4c1c89a2c826cdc7fec5e0b21ab"},{"alg":"SHA-256","content":"681e386e44a19d7d0674b4320272c90e66b6610b741e7e6305f8219c42e85366"}]},{"bom-ref":"1aa5c1b1f570efe3","type":"file","name":"/usr/share/common-licenses/LGPL-2.1","hashes":[{"alg":"SHA-1","content":"01a6b4bf79aca9b556822601186afab86e8c4fbf"},{"alg":"SHA-256","content":"dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551"}]},{"bom-ref":"53528c795bc4c0e9","type":"file","name":"/usr/share/common-licenses/LGPL-3","hashes":[{"alg":"SHA-1","content":"a8a12e6867d7ee39c21d9b11a984066099b6fb6b"},{"alg":"SHA-256","content":"e3a994d82e644b03a792a930f574002658412f62407f5fee083f2555c5f23118"}]},{"bom-ref":"7ce3e55e91dc21c2","type":"file","name":"/usr/share/common-licenses/MPL-1.1","hashes":[{"alg":"SHA-1","content":"ee93a1907dafcb7901b28f14ee05e49176ab7c87"},{"alg":"SHA-256","content":"f849fc26a7a99981611a3a370e83078deb617d12a45776d6c4cada4d338be469"}]},{"bom-ref":"0686752d28d8a80d","type":"file","name":"/usr/share/common-licenses/MPL-2.0","hashes":[{"alg":"SHA-1","content":"9744cedce099f727b327cd9913a1fdc58a7f5599"},{"alg":"SHA-256","content":"fab3dd6bdab226f1c08630b1dd917e11fcb4ec5e1e020e2c16f83a0a13863e85"}]},{"bom-ref":"61ef8d254e5179b4","type":"file","name":"/usr/share/doc/base-files/README","hashes":[{"alg":"SHA-1","content":"8e1be269b98c55995b14122ff79a0aaf563b4ac1"},{"alg":"SHA-256","content":"ec7b7bf0ff681b5bb1f2eb3d2c1714face8fb61eda2e12d440ec81570124ad95"}]},{"bom-ref":"4c2857aedf7d1327","type":"file","name":"/usr/share/doc/base-files/README.FHS","hashes":[{"alg":"SHA-1","content":"6564fdf9f9f97e17460f5d55e4a6118077e1ae7e"},{"alg":"SHA-256","content":"099e7f4bdeb4ff34ee8d4ef7f158a21adbc59db46a354fd2051f6d1959e70fbc"}]},{"bom-ref":"e653212198ac2d43","type":"file","name":"/usr/share/doc/base-files/changelog.gz","hashes":[{"alg":"SHA-1","content":"57387e63076d7928f9b15243e244add6ffd50653"},{"alg":"SHA-256","content":"8e076dea29ed5b52e105a697a79274d3abb2374bfbe02f02632030b5e37ebd51"}]},{"bom-ref":"081ed248aad206dd","type":"file","name":"/usr/share/doc/base-files/copyright","hashes":[{"alg":"SHA-1","content":"969de1f844c2ef709351da220353403967ca40ab"},{"alg":"SHA-256","content":"fd7e4aae7e7b05f217bcf2d02322825c360e66c52c4c2f1b28d784d6297a1c23"}]},{"bom-ref":"4430149f67a2221a","type":"file","name":"/usr/share/lintian/overrides/base-files","hashes":[{"alg":"SHA-1","content":"57d2fffcfe0116c60c67ba3a916daa7b089e43d3"},{"alg":"SHA-256","content":"119a4bdf24d7cd618606d2988c8bccf0be530a61c8132d3e2c41ad0eab25c612"}]},{"bom-ref":"7016704c37056a22","type":"file","name":"/var/lib/dpkg/status.d/base-files","hashes":[{"alg":"SHA-1","content":"cee57635fb425fcb73f2748fe256182f74909a3b"},{"alg":"SHA-256","content":"1a11723323d4ad6c70eec94c00856ca0786c454cc69e82352a85c53b4efabc8a"}]},{"bom-ref":"89aaee2e4d038df0","type":"file","name":"/var/lib/dpkg/status.d/base-files.md5sums","hashes":[{"alg":"SHA-1","content":"274059bb1d0440c60fefab406eba78b48856d098"},{"alg":"SHA-256","content":"79e484bdf96a11ac64b8bd7ae7eba4d807ea331191f4377e150c824abb81fe8e"}]},{"bom-ref":"9b5f1e3c31ed2507","type":"file","name":"/usr/share/doc/netbase/changelog.gz","hashes":[{"alg":"SHA-1","content":"81c391d897842b77681ead560aea78928ad83270"},{"alg":"SHA-256","content":"86c353644e27061ae7410c049be8afd9286637d5816f4b21091dbc75b12aaf26"}]},{"bom-ref":"3d16988d7836fc73","type":"file","name":"/usr/share/doc/netbase/copyright","hashes":[{"alg":"SHA-1","content":"ed888a1f31b753739cde9435ff17fbab81aef830"},{"alg":"SHA-256","content":"795b66147ea5ad692991caa7008ece551fb0fa88b9c53656223bd1518dc58ab2"}]},{"bom-ref":"26f97981c2df5753","type":"file","name":"/var/lib/dpkg/status.d/netbase","hashes":[{"alg":"SHA-1","content":"f097352ca664d7718083116059582d8f1f7a97ee"},{"alg":"SHA-256","content":"98fedccdacaea717f25b010c087fa8606e1c5895ff16ba7be9f5d1ca8f7d9b5f"}]},{"bom-ref":"f0b41ec9b88b1301","type":"file","name":"/var/lib/dpkg/status.d/netbase.md5sums","hashes":[{"alg":"SHA-1","content":"76094b8fc8cc31c9324be011a4317613b195ddcd"},{"alg":"SHA-256","content":"260709411b3d0a1a1f10975bf9d3bed328389ffb46ea14d1948b619ab2caf38e"}]},{"bom-ref":"a4d64aa12f9d1f4d","type":"file","name":"/usr/share/doc/tzdata/README.Debian","hashes":[{"alg":"SHA-1","content":"8c575165448630082d22e61a7853ba16675011f0"},{"alg":"SHA-256","content":"ec79ce4f736d433cbbd630a5d9c0a0727ed449497a37bda43b6732b4ed792448"}]},{"bom-ref":"09d938d93d07a649","type":"file","name":"/usr/share/doc/tzdata/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"00edce4fc2581fef82e0e5e19b36b30cc09e05c2"},{"alg":"SHA-256","content":"82ae15bee07824b3eff7c618bb03a7e9eb03628212f1a981aeab95aa2076092c"}]},{"bom-ref":"9d1f55e216cd8315","type":"file","name":"/usr/share/doc/tzdata/changelog.gz","hashes":[{"alg":"SHA-1","content":"41bd37d974be3d72f618fbd0de34cdb15f377519"},{"alg":"SHA-256","content":"6f9e115b447932253b3724351f6cf2f8796a7807794f020034343e62ee0c141b"}]},{"bom-ref":"c9b6da2396b6649b","type":"file","name":"/usr/share/doc/tzdata/copyright","hashes":[{"alg":"SHA-1","content":"aea2b97caa943cd88b5c1e03d1ac7055425f9aec"},{"alg":"SHA-256","content":"cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"}]},{"bom-ref":"3f22d03ed61c5d5a","type":"file","name":"/usr/share/lintian/overrides/tzdata","hashes":[{"alg":"SHA-1","content":"fc7ff763f32a91bbf9a84bcc3ed8fdf4bae604f9"},{"alg":"SHA-256","content":"538d8b8fc81c5a53aa35df83953720f58e050f0be5339daba7a6259a8997f776"}]},{"bom-ref":"ffa5c7c7398e4892","type":"file","name":"/usr/share/zoneinfo/Africa/Abidjan","hashes":[{"alg":"SHA-1","content":"5cc9b028b5bd2222200e20091a18868ea62c4f18"},{"alg":"SHA-256","content":"d2efac4e5f23d88c95d72c1db42807170f52f43dd98a205af5a92a91b9f2d997"}]},{"bom-ref":"bba6128c43b98237","type":"file","name":"/usr/share/zoneinfo/Africa/Accra","hashes":[{"alg":"SHA-1","content":"e51b14ae73c9ceba6b940ab31fc39566d5e392d7"},{"alg":"SHA-256","content":"7346770dc7af569c724fd1ce816d7149ffdff3e303420059faa1557cc959e115"}]},{"bom-ref":"ca06cd312799e2fb","type":"file","name":"/usr/share/zoneinfo/Africa/Addis_Ababa","hashes":[{"alg":"SHA-1","content":"c3ec6c02b82cdb393255b31b88841e58585c7d6a"},{"alg":"SHA-256","content":"fc87a606ec2e31f061a7806193472eb39181dd3b1a8a3563f404992bc693a77b"}]},{"bom-ref":"bf5a9c717f846371","type":"file","name":"/usr/share/zoneinfo/Africa/Algiers","hashes":[{"alg":"SHA-1","content":"edb95d3dc9238b5545f4f1d85d8bc879cdacdec8"},{"alg":"SHA-256","content":"bda1698cd542c0e6e76dfbbcdab390cdd26f37a9d5826a57a50d5aab37f3b2a6"}]},{"bom-ref":"b4655e8f464b77d0","type":"file","name":"/usr/share/zoneinfo/Africa/Asmara","hashes":[{"alg":"SHA-1","content":"da26c35de6001f6ce436ed72481197975da7ef62"},{"alg":"SHA-256","content":"65af76431c1dd400e1ada6687e648e0fba1f80138acccdf7987cd3e1cd01b199"}]},{"bom-ref":"17fe98e7e0437bb9","type":"file","name":"/usr/share/zoneinfo/Africa/Bamako","hashes":[{"alg":"SHA-1","content":"d7015e94ea3ea52f57df9fde2988ddbfffd785c8"},{"alg":"SHA-256","content":"a212ea76ad201e8a956438bd008cd333ead81dac3ebcd2df4fcddc5b0f59165e"}]},{"bom-ref":"c002e12b71c471f6","type":"file","name":"/usr/share/zoneinfo/Africa/Bangui","hashes":[{"alg":"SHA-1","content":"95e4df1f88558c46071352063438fd7efd740d24"},{"alg":"SHA-256","content":"a72ce103a74d3432bfd869efa0276a8eb4f83398f93d94e922f793b9ef7beaef"}]},{"bom-ref":"fb75364a15c3ee5e","type":"file","name":"/usr/share/zoneinfo/Africa/Banjul","hashes":[{"alg":"SHA-1","content":"8a756377248320782695b94c651f9f38435957c1"},{"alg":"SHA-256","content":"f511d8d1785320b80330d02f1d8ff3a6619f71f09539a73daba97f91cf630f5e"}]},{"bom-ref":"d11ebd87c95b4351","type":"file","name":"/usr/share/zoneinfo/Africa/Bissau","hashes":[{"alg":"SHA-1","content":"adca16c6998258a9ccabcc8d4bcfe883a8d848f5"},{"alg":"SHA-256","content":"223bb10cfe846620c716f97f6c74ba34deec751c4b297965a28042f36f69a1a9"}]},{"bom-ref":"200ca9a463de19a4","type":"file","name":"/usr/share/zoneinfo/Africa/Blantyre","hashes":[{"alg":"SHA-1","content":"e86f9fd7e39b1cfb6823edcb39dd1164df936bdf"},{"alg":"SHA-256","content":"de96b327c8198764a41bc035efd36b63075f618e7db479ebf451226a54d4bd42"}]},{"bom-ref":"cf28d7bb669930f8","type":"file","name":"/usr/share/zoneinfo/Africa/Brazzaville","hashes":[{"alg":"SHA-1","content":"a15d91431af650e7aafdedf68d45ec31d86f1e0e"},{"alg":"SHA-256","content":"4680eb49f8aa6b167969f6e27221d859792357cefe0285eb03f60725db664d57"}]},{"bom-ref":"4166daa2c223bb5e","type":"file","name":"/usr/share/zoneinfo/Africa/Bujumbura","hashes":[{"alg":"SHA-1","content":"eccd392d987e133182ce336005a4714e9e5fad6a"},{"alg":"SHA-256","content":"c880a655aba172cecd4ae8eddd5f8d4cdde07686f00223e4adcc086dad320e7e"}]},{"bom-ref":"6fef82aad4cf03af","type":"file","name":"/usr/share/zoneinfo/Africa/Cairo","hashes":[{"alg":"SHA-1","content":"428e1f5f708eb4c131f29185bd602223027b3eac"},{"alg":"SHA-256","content":"2dfb7e1822d085a4899bd56a526b041681c84b55617daee91499fd1990a989fb"}]},{"bom-ref":"aa87d06ad7ce9abb","type":"file","name":"/usr/share/zoneinfo/Africa/Casablanca","hashes":[{"alg":"SHA-1","content":"8299b0d609b0f62013f4320df4b92583c21071fc"},{"alg":"SHA-256","content":"e11a956f0fc5dd9b9ca29202da2bc027c583c23e7044e0c007aeed0697577200"}]},{"bom-ref":"86c80dc151d3b281","type":"file","name":"/usr/share/zoneinfo/Africa/Ceuta","hashes":[{"alg":"SHA-1","content":"029ce64badb36722c9e2191f3ce858c514aabbc1"},{"alg":"SHA-256","content":"0b0fb6fe714319b37c5aa22c56971abb2668a165fc8f72a6c763e70b47c7badf"}]},{"bom-ref":"fdd7137dc4c97877","type":"file","name":"/usr/share/zoneinfo/Africa/Conakry","hashes":[{"alg":"SHA-1","content":"d9eef5864a0db2b82c647282aae34c3152de54a1"},{"alg":"SHA-256","content":"93b62b3d76c1d4a477d84d232c576f9b9f21e428a42635db94eaca2c59b7b2ec"}]},{"bom-ref":"cb39902718cfbce7","type":"file","name":"/usr/share/zoneinfo/Africa/Dakar","hashes":[{"alg":"SHA-1","content":"cc33bc67d266dc2d49dd08b413605d6e974eecb3"},{"alg":"SHA-256","content":"40733be9374ab5a9bd38be2be2664e538f97a265bbe7d898a6167d3800cb228b"}]},{"bom-ref":"c917454fb751aa04","type":"file","name":"/usr/share/zoneinfo/Africa/Dar_es_Salaam","hashes":[{"alg":"SHA-1","content":"3ece541c6f4d5b8c6407a3ea0c83ac812970912a"},{"alg":"SHA-256","content":"4fc4f312a5287024c7f8473d753b6d1bcde396138d778adf5fce60dddcc9b53f"}]},{"bom-ref":"f9e8a29bacb4eb55","type":"file","name":"/usr/share/zoneinfo/Africa/Djibouti","hashes":[{"alg":"SHA-1","content":"7f985b7ced38006f4cad1c92ebfd87f35f5c9e1f"},{"alg":"SHA-256","content":"b92bac77f2dd9edd59397c0315e116fd0dc4fbc1ae6cd266687a2822877959f1"}]},{"bom-ref":"b0d0e27b10ed9b3e","type":"file","name":"/usr/share/zoneinfo/Africa/Douala","hashes":[{"alg":"SHA-1","content":"d0225f31e516a27e2c3e3bb4f1a92995c95a6bee"},{"alg":"SHA-256","content":"3b014a5d1cbee2524ae309a895cbe0fe47da87c12016fe8cc2562ac79906590b"}]},{"bom-ref":"8c314a65d48c60b6","type":"file","name":"/usr/share/zoneinfo/Africa/El_Aaiun","hashes":[{"alg":"SHA-1","content":"30b58415b36d7646e0a3a3c2b04738f778bafa09"},{"alg":"SHA-256","content":"516082a902c9c5df2ab13630f36933f56d6cbb05b94d1827670df5b03583cf6d"}]},{"bom-ref":"8125f849338767ca","type":"file","name":"/usr/share/zoneinfo/Africa/Freetown","hashes":[{"alg":"SHA-1","content":"7687166d1782cd3455d5552766a083f9729b4688"},{"alg":"SHA-256","content":"77d05b2ed586a9d22f6e4a791ec0634256dc919faac6279bdb7db388a9c1f67b"}]},{"bom-ref":"6e1cf85969e7cbc9","type":"file","name":"/usr/share/zoneinfo/Africa/Gaborone","hashes":[{"alg":"SHA-1","content":"867be7affa61e2f3f2c7b18896ad5b897d3f2ddc"},{"alg":"SHA-256","content":"3ca27c9dd26ccfd118a270eaee39195154cd63f15700d14de650bf7493cec628"}]},{"bom-ref":"b735924adecc6461","type":"file","name":"/usr/share/zoneinfo/Africa/Harare","hashes":[{"alg":"SHA-1","content":"c5447a74c8348dd55bce2544becd5e94db494814"},{"alg":"SHA-256","content":"22720486f3e24b8e4b4f746afd2e0020f22d3a6c055b79579457e3efc2373ee5"}]},{"bom-ref":"12a1bbfbd89514e5","type":"file","name":"/usr/share/zoneinfo/Africa/Johannesburg","hashes":[{"alg":"SHA-1","content":"65c0d4ab314cb72b8d8c768e3d0c3218848b61f1"},{"alg":"SHA-256","content":"6c1bcc752668e77585a308ae8543bd0bccd8e813865626e809bf94f3fe3d977e"}]},{"bom-ref":"6c3f80293a22df3a","type":"file","name":"/usr/share/zoneinfo/Africa/Juba","hashes":[{"alg":"SHA-1","content":"48173811f532aabc17b3798c40fad46a3df0e543"},{"alg":"SHA-256","content":"5159c8a843c9c072d3302fabe6a6501cdbfda29a1856c29dabeb5aff95d4c3f4"}]},{"bom-ref":"534b20fc1b353042","type":"file","name":"/usr/share/zoneinfo/Africa/Kampala","hashes":[{"alg":"SHA-1","content":"ff253770d5916b2b1e96aa2585c07e47e1b2f4f1"},{"alg":"SHA-256","content":"5e23eb14b36a74840f4490a272ffc7b1f271a5829a349015f878ddb2bf34d9aa"}]},{"bom-ref":"b42663a3164acf52","type":"file","name":"/usr/share/zoneinfo/Africa/Khartoum","hashes":[{"alg":"SHA-1","content":"7cde30d5acfd99119ef22162c1f8bcafb86eaf03"},{"alg":"SHA-256","content":"318583a09dc070222d65d029a1e3a0b565830f1aaec13a27e6fe533863fbd3ea"}]},{"bom-ref":"20ea9de5c65652bf","type":"file","name":"/usr/share/zoneinfo/Africa/Kigali","hashes":[{"alg":"SHA-1","content":"648695b8be4b148b52f35dcfc294529efcbb7b06"},{"alg":"SHA-256","content":"8cd9c1bb40c4452e61520a9dfc9a409a67109bad6f41f413c786998d00cbc9cf"}]},{"bom-ref":"219568c8fa026b79","type":"file","name":"/usr/share/zoneinfo/Africa/Kinshasa","hashes":[{"alg":"SHA-1","content":"3724d5c3dd6dfcaafb01d9cebc8a087cbd2a39b8"},{"alg":"SHA-256","content":"7ae6d0e96d674a4c232cb01faf61a954340d84ea92a71a63ebd060e1c67d8c08"}]},{"bom-ref":"293a462b8511c48f","type":"file","name":"/usr/share/zoneinfo/Africa/Lagos","hashes":[{"alg":"SHA-1","content":"30ba925b4670235915dddfa1dd824dd9d7295eac"},{"alg":"SHA-256","content":"cffeb0282ccbd7fba0e493ff8677a1e5a6dd5197885042e437f95a773f844846"}]},{"bom-ref":"27461e3c8bef718e","type":"file","name":"/usr/share/zoneinfo/Africa/Libreville","hashes":[{"alg":"SHA-1","content":"2b9ba63e019dacff0390829874008955a6ade749"},{"alg":"SHA-256","content":"44575c7c30a1281ec495adb7a404888ed4d7e41c0234f13767ae7b1a1458be73"}]},{"bom-ref":"80c44bdf5396aa70","type":"file","name":"/usr/share/zoneinfo/Africa/Lome","hashes":[{"alg":"SHA-1","content":"68eb6f1e3a7769a5929611e8784299f588d33d3b"},{"alg":"SHA-256","content":"5b031c585ed04311c7c7c14b2ee23ba49cb22ded8ddee8adffc9f14de68d2ba8"}]},{"bom-ref":"ef74c9064a2ce84d","type":"file","name":"/usr/share/zoneinfo/Africa/Luanda","hashes":[{"alg":"SHA-1","content":"c137669c8f29e290a40f2283ea8da6410ccf09b8"},{"alg":"SHA-256","content":"c87aa48fc0f0043c6d101335acc8c7ab4ffc2707c14a8f5b1d6d1abf3bdec69a"}]},{"bom-ref":"6fc679746b4529ef","type":"file","name":"/usr/share/zoneinfo/Africa/Lubumbashi","hashes":[{"alg":"SHA-1","content":"c2519e82a4e4a1f7cc483375f8a0be9677b2c9c7"},{"alg":"SHA-256","content":"ed509eccb6e51d5cd529388c57692a641a5b9313233897a1bfabdb612a415c04"}]},{"bom-ref":"c414b41764b39eb1","type":"file","name":"/usr/share/zoneinfo/Africa/Lusaka","hashes":[{"alg":"SHA-1","content":"5f2aba3bc50e1b5fca46c49942dba5580dbaaa95"},{"alg":"SHA-256","content":"fac7c446a8dcddffc75a7dca5c762444f74df9f83c70cc505b138db85242dea4"}]},{"bom-ref":"c7b8948cbbc03556","type":"file","name":"/usr/share/zoneinfo/Africa/Malabo","hashes":[{"alg":"SHA-1","content":"1dbc54024377111937bd6e111ae482445d3b935f"},{"alg":"SHA-256","content":"8d17cee7263820e7a14499ba087cd792f4f4b358bb4c874f24c42537ce975704"}]},{"bom-ref":"6f32f1f72574f246","type":"file","name":"/usr/share/zoneinfo/Africa/Maputo","hashes":[{"alg":"SHA-1","content":"b0ff96d087e4c86adb55b851c0d3800dfbb05e9a"},{"alg":"SHA-256","content":"444ed3a710414bc6bf43eb27e591da49d3be3db153449a6a0c9473f7e39fdbcb"}]},{"bom-ref":"b32abae723964f6a","type":"file","name":"/usr/share/zoneinfo/Africa/Maseru","hashes":[{"alg":"SHA-1","content":"ec8714963f44f02c100bafb8d8def8cf5b3a177b"},{"alg":"SHA-256","content":"be0b75733f8dfc6ff35bd69c3d0f94abc72e1d6897c81f53d0ba7da1d72227b6"}]},{"bom-ref":"ae11df4a98d62b35","type":"file","name":"/usr/share/zoneinfo/Africa/Mbabane","hashes":[{"alg":"SHA-1","content":"c426025717e52a7a341db2a5d8f03d2734480b6c"},{"alg":"SHA-256","content":"b0b8a11ab3cc1a97295b0bcde33b1129de82616b2f83987687926e100d3adf91"}]},{"bom-ref":"61f7e8a9c7b0ff6b","type":"file","name":"/usr/share/zoneinfo/Africa/Mogadishu","hashes":[{"alg":"SHA-1","content":"abe168cbcc5083974ad6c71c9353384a8e0e4340"},{"alg":"SHA-256","content":"cf5c8032414fd86bdafddb2cdfd6813730f7ec4a08cb92b22a5f1403490fa7e2"}]},{"bom-ref":"b946d8844f0bbc0a","type":"file","name":"/usr/share/zoneinfo/Africa/Monrovia","hashes":[{"alg":"SHA-1","content":"81b045ed68f73a8806c5f2104b573b0479c19bd0"},{"alg":"SHA-256","content":"f95b095b9714e0a76f7e061a415bf895cbb399a28854531de369cee915ce05d5"}]},{"bom-ref":"a7cc25bfc2be62a1","type":"file","name":"/usr/share/zoneinfo/Africa/Nairobi","hashes":[{"alg":"SHA-1","content":"289d1fb5a419107bc1d23a84a9e06ad3f9ee8403"},{"alg":"SHA-256","content":"c89b2e253a8926a6cecf7eff34e4bfcdb7fe24daff22d84718c30deec0ea4968"}]},{"bom-ref":"fffd563ad847df88","type":"file","name":"/usr/share/zoneinfo/Africa/Ndjamena","hashes":[{"alg":"SHA-1","content":"035072509f30da9a5a27b48910ae180f9c6b4b15"},{"alg":"SHA-256","content":"f13dc0d199bd1a3d01be6eab77cf2ddc60172a229d1947c7948a98964608d0a3"}]},{"bom-ref":"ec14cd1b8546d3ad","type":"file","name":"/usr/share/zoneinfo/Africa/Niamey","hashes":[{"alg":"SHA-1","content":"a6200d9483bd6a84a86eeae28d1e87cf48360cf0"},{"alg":"SHA-256","content":"78a49cb93c76e4f036933c36ace93e46ea1d7ccf58c7b086dd8f1c5eb441a400"}]},{"bom-ref":"3f16ac770fd7c4cc","type":"file","name":"/usr/share/zoneinfo/Africa/Nouakchott","hashes":[{"alg":"SHA-1","content":"8d1be259ee1a362657c8cf41a697666f3f527497"},{"alg":"SHA-256","content":"7fde47dac81d3d51ed1bf257f8834faa4da20d4ba1d85b824f86bf2cd79ac801"}]},{"bom-ref":"b936fe7936008a81","type":"file","name":"/usr/share/zoneinfo/Africa/Ouagadougou","hashes":[{"alg":"SHA-1","content":"a9307b0a57ad23ee7866849d5d088b09a398cd29"},{"alg":"SHA-256","content":"fe2dc2c6ab2ef71c41bb3542802a3c18a2d657befa39f3e61321c12677d16caf"}]},{"bom-ref":"c7904f6c34e70b8e","type":"file","name":"/usr/share/zoneinfo/Africa/Porto-Novo","hashes":[{"alg":"SHA-1","content":"334499ff26ab816d7e15aef1606d3aaaa034b86b"},{"alg":"SHA-256","content":"30a8a8c8c9337afff37986d7c36afe814c8b56cb75e958dd89bca1ef6dff731d"}]},{"bom-ref":"2b672755364b4ed6","type":"file","name":"/usr/share/zoneinfo/Africa/Sao_Tome","hashes":[{"alg":"SHA-1","content":"7d2cac076d99bc5e38ba27b67113317ad496d3b1"},{"alg":"SHA-256","content":"31d8f1a50dbaf2ecc9ed9c7566ba0552d454c2ab09e85ff263701857d157c352"}]},{"bom-ref":"f490acc13c99cb21","type":"file","name":"/usr/share/zoneinfo/Africa/Tripoli","hashes":[{"alg":"SHA-1","content":"fabf4010ab003c26947df60b5e359781670caa70"},{"alg":"SHA-256","content":"5b5769b460fbd13ee9a46a28d1f733150783888a749ee96d2cd3d5eba3300767"}]},{"bom-ref":"bf6e75c5cc8dd9e2","type":"file","name":"/usr/share/zoneinfo/Africa/Tunis","hashes":[{"alg":"SHA-1","content":"c44e2d3c1e351f1004ab69ea559feb8ccdd65f64"},{"alg":"SHA-256","content":"38554c10ce1e613d84cf46deba1114093488a5c165756c6c576b84a1364850d2"}]},{"bom-ref":"7ba65caecf650bc6","type":"file","name":"/usr/share/zoneinfo/Africa/Windhoek","hashes":[{"alg":"SHA-1","content":"f7cab3d13d3213a13658ce399f74cc878cf8953d"},{"alg":"SHA-256","content":"c6e86fb9dacc1f86a59d59a8b924d023c60bf05fc76e0b05d8443b0192b3b87b"}]},{"bom-ref":"672a9e58af0351e2","type":"file","name":"/usr/share/zoneinfo/America/Adak","hashes":[{"alg":"SHA-1","content":"be58a7c839146fa675eeb6dad748c08d0647542c"},{"alg":"SHA-256","content":"201d4387025000a6e13c9f631cb7fccd6e4369dec7224052f9d86feb81353a53"}]},{"bom-ref":"b770654d58586c8a","type":"file","name":"/usr/share/zoneinfo/America/Anchorage","hashes":[{"alg":"SHA-1","content":"275760f2eb22160c578089566f68042a5f4d2f57"},{"alg":"SHA-256","content":"a190353523d2d8159dca66299c21c53bc0656154be965e4a2e0d84cfd09b113b"}]},{"bom-ref":"504ce149709a0991","type":"file","name":"/usr/share/zoneinfo/America/Anguilla","hashes":[{"alg":"SHA-1","content":"b56405c5331a039220756566b1420ecd5fe74926"},{"alg":"SHA-256","content":"434fbfb6b97c6d6ef4a036030bb901a49c74b7a4df8b6e0a1dcfd3cedf8a1fc1"}]},{"bom-ref":"22756cededaacaec","type":"file","name":"/usr/share/zoneinfo/America/Antigua","hashes":[{"alg":"SHA-1","content":"cf3bc75f6436818554f2f960bc375e1d66936d80"},{"alg":"SHA-256","content":"d63c0dde8af51ad22539678225d3f58c760f0f8971dc5e43783644853087b14e"}]},{"bom-ref":"9d39a68f2de1c148","type":"file","name":"/usr/share/zoneinfo/America/Araguaina","hashes":[{"alg":"SHA-1","content":"86307f5f8222c3ae21815c2844f6fca38f94b55d"},{"alg":"SHA-256","content":"929a628b2b6649079eb1f97234660cdebf0d5549750be820bb4f2cf7f4edf9ca"}]},{"bom-ref":"39281a8ba483fc19","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Buenos_Aires","hashes":[{"alg":"SHA-1","content":"6e7ba0a5dcf870abab721a47adbbc8f93af1db56"},{"alg":"SHA-256","content":"9ed9ff1851da75bac527866e854ea1daecdb170983c92f665d5e52dbca64185f"}]},{"bom-ref":"dd046193be5a8f4f","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Catamarca","hashes":[{"alg":"SHA-1","content":"ac9a4e79fe5a861447c23d68cccb35762d5f3aa4"},{"alg":"SHA-256","content":"7621f57fdea46db63eee0258427482347b379fd7701c9a94852746371d4bec8d"}]},{"bom-ref":"f549f7320bbf1af7","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Cordoba","hashes":[{"alg":"SHA-1","content":"04f2815d23c3c63ac6bd204a2935f18366c8d182"},{"alg":"SHA-256","content":"d57a883fc428d9b3d1efdd3d86b008faa02db726e6c045b89acec58d903961fc"}]},{"bom-ref":"de05967d610f4002","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Jujuy","hashes":[{"alg":"SHA-1","content":"12099cd844cb19e4842eca3457c937dd9580b0fd"},{"alg":"SHA-256","content":"e474744e564589fc09e672d39a0ef25978024f1f664616a17ece3f5aaef4c0e6"}]},{"bom-ref":"5800c250e8dc8cbc","type":"file","name":"/usr/share/zoneinfo/America/Argentina/La_Rioja","hashes":[{"alg":"SHA-1","content":"a2c4c6ee89eacd8b99867fddcd8db684e15f8ee9"},{"alg":"SHA-256","content":"65ffc4dda905135614b7d319e31c5b4673aba766c7d43f818ec73448b15f4725"}]},{"bom-ref":"d760a654ce88474d","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Mendoza","hashes":[{"alg":"SHA-1","content":"e321681c40214a181d2c4ec2015f740507811fbe"},{"alg":"SHA-256","content":"e43262618790a5c2c147f228209b64e3722cc0978661ac31e46ca4b33b89f8dc"}]},{"bom-ref":"4b4ed55568965067","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Rio_Gallegos","hashes":[{"alg":"SHA-1","content":"a508a0daafb22185e4f39d040b2f15053bc2b2a5"},{"alg":"SHA-256","content":"4fded6003c2f6ba25bc480af88d414b7fee2c3d73e9e5a08e10242b1c10d49c9"}]},{"bom-ref":"817781addd433a32","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Salta","hashes":[{"alg":"SHA-1","content":"ba6390b0c61d1c92c30692a309b9cfd3c54f9a41"},{"alg":"SHA-256","content":"013c34b91eaccd628fb3a8f3767eab7af4bb5310970f6e8e44aea3966b232f5f"}]},{"bom-ref":"4113ed3aab4db675","type":"file","name":"/usr/share/zoneinfo/America/Argentina/San_Juan","hashes":[{"alg":"SHA-1","content":"2ef1b1742c1daf27a441e1dd81f3ee2e21cbab6f"},{"alg":"SHA-256","content":"aa55baf776b44e7a1fcbe45d71506e598dc3bd34c6c56c1c61d294dd8f7ca57f"}]},{"bom-ref":"11abdc41c814b455","type":"file","name":"/usr/share/zoneinfo/America/Argentina/San_Luis","hashes":[{"alg":"SHA-1","content":"c6469d1173cff2a995e00bef9764294185d65af6"},{"alg":"SHA-256","content":"59875cae8e7e15ef8de8b910b0ac31ff5b55a339a7069e7c0ced7e049b36b2ea"}]},{"bom-ref":"22755fdd237477cb","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Tucuman","hashes":[{"alg":"SHA-1","content":"9bbe6f5300224148f2451195f471e7f310cd2bde"},{"alg":"SHA-256","content":"c2c8e0d5ae4033574fda08ebd75da4defb79e2dadc38e33f4ad17be31cef0497"}]},{"bom-ref":"152a48d4c8259bd3","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Ushuaia","hashes":[{"alg":"SHA-1","content":"0d6b6844b13bf120a80b7e72147ca94a111ae39e"},{"alg":"SHA-256","content":"f79e3c56fabf929c3f357e6ceb9bd8b886eabf0195f8f071ab099cadf94b2345"}]},{"bom-ref":"ffc79d250e508100","type":"file","name":"/usr/share/zoneinfo/America/Aruba","hashes":[{"alg":"SHA-1","content":"7617563c6fe86e6b8c1c2ac36fe9fb001f362453"},{"alg":"SHA-256","content":"e05ef0b458a717e7c83d8bc16c50e3a74a719fb5f3725b1c4fe7569a1b07fcfc"}]},{"bom-ref":"524084cdfd3a3465","type":"file","name":"/usr/share/zoneinfo/America/Asuncion","hashes":[{"alg":"SHA-1","content":"e91a29807bc92d61324d265ab40c3fa651e66cb7"},{"alg":"SHA-256","content":"a9e3a3a4b284bb3ed45dabfb7b1df7e14c482e835c7b5856ab6cdfbf1ef4c709"}]},{"bom-ref":"d664edc8ed14c65a","type":"file","name":"/usr/share/zoneinfo/America/Atikokan","hashes":[{"alg":"SHA-1","content":"c29c262e36f69ff18874e0df8f46c7af5508c1ff"},{"alg":"SHA-256","content":"e1af781ad3c751d43edac773f568a7b0a9fd57f4223385e6163e3c1533cc7920"}]},{"bom-ref":"c8be32ba9207c293","type":"file","name":"/usr/share/zoneinfo/America/Bahia","hashes":[{"alg":"SHA-1","content":"f6df0a2d176d0df66fae90bc35a9f8f1ee9b249b"},{"alg":"SHA-256","content":"7262e448003320d9736065c1a800c4537b8f800f52e67b7ea75015dd9cbce956"}]},{"bom-ref":"bb16ee6253ba015d","type":"file","name":"/usr/share/zoneinfo/America/Bahia_Banderas","hashes":[{"alg":"SHA-1","content":"33e0f3d5c7eace9077bacfa4f2b6e1e4b374fdb5"},{"alg":"SHA-256","content":"32fad7189e4bcda1ce7a0b89ab1b33c63c4c85569f1956e4fa88d711ceff6042"}]},{"bom-ref":"c7d2d3ddceec32b2","type":"file","name":"/usr/share/zoneinfo/America/Barbados","hashes":[{"alg":"SHA-1","content":"5904a49c6c0ce8f10178fe13174ed9c964a8312a"},{"alg":"SHA-256","content":"8a66be42bae16b3bb841fbeed99d3e7ba13e193898927b8906ee9cdb2546f4b1"}]},{"bom-ref":"6cf3d9e0682ced53","type":"file","name":"/usr/share/zoneinfo/America/Belem","hashes":[{"alg":"SHA-1","content":"b29f1ee834833e89c06ef39b80b8f8c0b49ad31d"},{"alg":"SHA-256","content":"ff6e7c85064b0845c15fcc512f2412c3e004fa38839a3570257df698de545049"}]},{"bom-ref":"959975d1a0ba24a2","type":"file","name":"/usr/share/zoneinfo/America/Belize","hashes":[{"alg":"SHA-1","content":"4728ee967fe9745f4b614e5b511da1c08bd3689c"},{"alg":"SHA-256","content":"a647cb63629f3dc85b7896b5a56717996030a7866546fc562d57b35e7adb930b"}]},{"bom-ref":"b9c52435d7d27fe0","type":"file","name":"/usr/share/zoneinfo/America/Blanc-Sablon","hashes":[{"alg":"SHA-1","content":"247313b6f6c2e1ad65a0a3006d951e0a436ae57d"},{"alg":"SHA-256","content":"b5537964f9883b7bdcdff6b2a3083aa9bbe385e838389b43153f72f08b96df7e"}]},{"bom-ref":"46a88a8712fd43dd","type":"file","name":"/usr/share/zoneinfo/America/Boa_Vista","hashes":[{"alg":"SHA-1","content":"a32d00603897fd4d970a675e5c01656f8652f598"},{"alg":"SHA-256","content":"5785553a4ac5515d6a51f569f44f7be0838916603943142b72d6ad4c111bfa1b"}]},{"bom-ref":"9817b7d4d5bcd25c","type":"file","name":"/usr/share/zoneinfo/America/Bogota","hashes":[{"alg":"SHA-1","content":"1e810e3d76edd6adf16384b7e49d2236b9c57ee1"},{"alg":"SHA-256","content":"afe3b7e1d826b7507bc08da3c5c7e5d2b0ae33dfb0d7f66a8c63708c98700e24"}]},{"bom-ref":"1bd058a5cdbfa4b7","type":"file","name":"/usr/share/zoneinfo/America/Boise","hashes":[{"alg":"SHA-1","content":"e0608b89be80aaa6660eee5964203ad760b0659a"},{"alg":"SHA-256","content":"ec742c34f262521790805cf99152ef4e77f9c615c061a78036a0ec9312b3d95b"}]},{"bom-ref":"e43aeec1abb456c1","type":"file","name":"/usr/share/zoneinfo/America/Cambridge_Bay","hashes":[{"alg":"SHA-1","content":"dcfc3c07c7366b75916af1dccd366fd1077e5b18"},{"alg":"SHA-256","content":"ff8c51957dd6755a4472aa13ea6c83ecd7930979e7f4e624fe21f4d3a6f050ba"}]},{"bom-ref":"65a1f8154ab7067c","type":"file","name":"/usr/share/zoneinfo/America/Campo_Grande","hashes":[{"alg":"SHA-1","content":"9a7b1e23290eeb4394e91e0ef4adc00b9ba4def5"},{"alg":"SHA-256","content":"e41044351dfff20269e05fd48f6451927bd173824958d44f9d953d13bb5bf102"}]},{"bom-ref":"aa824edfc636cf48","type":"file","name":"/usr/share/zoneinfo/America/Cancun","hashes":[{"alg":"SHA-1","content":"cf74e0c9c8ba2365819123eaddd6817606064eaf"},{"alg":"SHA-256","content":"11d574370d968cced59e3147a2ae63b126cbbae13b78fd4e13be2eb44c96246e"}]},{"bom-ref":"b73c4e0f2e8689d3","type":"file","name":"/usr/share/zoneinfo/America/Caracas","hashes":[{"alg":"SHA-1","content":"3914e45c3922bc30b89498066fb637cc04886462"},{"alg":"SHA-256","content":"d8da705cf12d42423cd96099b905875dfeba54200371ac0ca5f84a4ecb80d31e"}]},{"bom-ref":"7eb7dc0f1d1856c6","type":"file","name":"/usr/share/zoneinfo/America/Cayenne","hashes":[{"alg":"SHA-1","content":"4f888b09b894c79fa691466a4f4eaaa83da367e0"},{"alg":"SHA-256","content":"6ad55b5b90a1262290feafb7905b3e0cb4d365af69b64887926265ab8017a18e"}]},{"bom-ref":"3b09b413fb9515f9","type":"file","name":"/usr/share/zoneinfo/America/Cayman","hashes":[{"alg":"SHA-1","content":"19d734b426acc9a6693adf04984ed7997f331e9b"},{"alg":"SHA-256","content":"8a2ab69b8045ea3681c799a08704335f1111f7373e21f4ee08e8ae84eb408fc9"}]},{"bom-ref":"80dcfb53b64136c9","type":"file","name":"/usr/share/zoneinfo/America/Chicago","hashes":[{"alg":"SHA-1","content":"0a037f985f6fa0b392c95c7afb247f16a3925a7e"},{"alg":"SHA-256","content":"feba326ebe88eac20017a718748c46c68469a1e7f5e7716dcb8f1d43a6e6f686"}]},{"bom-ref":"74296f7f4ef41095","type":"file","name":"/usr/share/zoneinfo/America/Chihuahua","hashes":[{"alg":"SHA-1","content":"e0c67cc4ed5fe366fb39d9e55b02082254606e47"},{"alg":"SHA-256","content":"dcd8336de760f00cc0ab1b1b4121b48d5471f8bc58970d62de4c7e63397ed887"}]},{"bom-ref":"8259285b3a143a32","type":"file","name":"/usr/share/zoneinfo/America/Ciudad_Juarez","hashes":[{"alg":"SHA-1","content":"fe11c20a18788db4260afcaa5d952c219f4777d2"},{"alg":"SHA-256","content":"8abe1bdbb0e216b84bd07e1f650f769c46be041a0f7cb588cf7a61537ef77601"}]},{"bom-ref":"9631ae6a3417637f","type":"file","name":"/usr/share/zoneinfo/America/Costa_Rica","hashes":[{"alg":"SHA-1","content":"2d1fd66de0198ddfcc1958fbaaaaba9cdb7b1d8f"},{"alg":"SHA-256","content":"ef8ad86ba96b80893296cf4f907a3c482625f683aa8ae1b94bb31676725e94fe"}]},{"bom-ref":"38a4ffc00429e72f","type":"file","name":"/usr/share/zoneinfo/America/Coyhaique","hashes":[{"alg":"SHA-1","content":"0922bbda5c964aac267330bedf39deae6d2e0636"},{"alg":"SHA-256","content":"1c54d0a27e44241baf597e2406334a6d29124ccc3a7edce42e070bab4f77c027"}]},{"bom-ref":"1206552a204c31b7","type":"file","name":"/usr/share/zoneinfo/America/Creston","hashes":[{"alg":"SHA-1","content":"4f0aa95a64b82c5cd06dc73afb3fffa37e145ec3"},{"alg":"SHA-256","content":"74d39aef5420436779ba1edc97ec5999efbcbb79cc47d189ecf4a4b562033914"}]},{"bom-ref":"97bdb1da5f432bd4","type":"file","name":"/usr/share/zoneinfo/America/Cuiaba","hashes":[{"alg":"SHA-1","content":"1a6b69bdf16991900ae16a00deb7ffbf722d5486"},{"alg":"SHA-256","content":"33416c47c4fdb388c54aecc3f108baa6ab5be917f6353cf254728666b9f9ea7e"}]},{"bom-ref":"bb28ee0fa8392765","type":"file","name":"/usr/share/zoneinfo/America/Curacao","hashes":[{"alg":"SHA-1","content":"88581cc94985e8f6692d43d148c1c793fb220360"},{"alg":"SHA-256","content":"646108ca5019e62cbfac806c5d112d1ff65f5912242c8f5d4233ff108ca7dec6"}]},{"bom-ref":"b3148693f2d8707d","type":"file","name":"/usr/share/zoneinfo/America/Danmarkshavn","hashes":[{"alg":"SHA-1","content":"3bfae70ff7ffa8b928ba4bf0bcb5452d09ec0407"},{"alg":"SHA-256","content":"6116407d40a856d68bd4bf8c60c60c1f5c3239a5509df528fe0167bcc5d2bb3c"}]},{"bom-ref":"83033e2b8bdd4781","type":"file","name":"/usr/share/zoneinfo/America/Dawson","hashes":[{"alg":"SHA-1","content":"dc241cb66d50821505cc7708d43ee9b1e77a36dc"},{"alg":"SHA-256","content":"ac01e1cae32eca37ff7b20364811bbe8c4417ff7e3ff18b9140ba2595420261c"}]},{"bom-ref":"d2f9ec3fa9fe74bc","type":"file","name":"/usr/share/zoneinfo/America/Dawson_Creek","hashes":[{"alg":"SHA-1","content":"dd98b887a02f1ae2785d5d6fe7d77e91ec5aae83"},{"alg":"SHA-256","content":"6895c2c8fe23de0804e3018237e2eb4bd8690ffe73587cd04de4802935843d43"}]},{"bom-ref":"fc28174f768122b1","type":"file","name":"/usr/share/zoneinfo/America/Denver","hashes":[{"alg":"SHA-1","content":"faa7d6cf4178d032d8ba8a4d77eac0fd47f8a718"},{"alg":"SHA-256","content":"32e819c00a43b3c348f539d700d425504f20b8d068c16418d26fa9b693e775c9"}]},{"bom-ref":"008fe24f4b024965","type":"file","name":"/usr/share/zoneinfo/America/Detroit","hashes":[{"alg":"SHA-1","content":"6597537b399eab91a66e32bb4edae466de96a146"},{"alg":"SHA-256","content":"85e733f32a98d828f907ad46de02d9740559bd180af65d0ff7473f80dfae0f98"}]},{"bom-ref":"0accf5924b262703","type":"file","name":"/usr/share/zoneinfo/America/Dominica","hashes":[{"alg":"SHA-1","content":"bcff62237fd34abc18ba24c9dd10608e6852826b"},{"alg":"SHA-256","content":"7e7db465be161ee7c531100137bf880f3acee56b1874e20661be218ae48f0a8c"}]},{"bom-ref":"cebedd0568f7325c","type":"file","name":"/usr/share/zoneinfo/America/Edmonton","hashes":[{"alg":"SHA-1","content":"4f441f7a62122e43a963260550efb1a1ff3100c2"},{"alg":"SHA-256","content":"f939087dcdd096f6827f4a7c08e678dd8d47441025fa7011522f8975778ad6f1"}]},{"bom-ref":"30e61e5198f16b90","type":"file","name":"/usr/share/zoneinfo/America/Eirunepe","hashes":[{"alg":"SHA-1","content":"45e5dd1baab63d6970c0424cd8ae77bfadfdfd61"},{"alg":"SHA-256","content":"a52f741d9cd1c07e137fcba098a1df8a9857ef308fa99921ff408d6fe7c43003"}]},{"bom-ref":"b002c74f498e3c28","type":"file","name":"/usr/share/zoneinfo/America/El_Salvador","hashes":[{"alg":"SHA-1","content":"45b4b952081502968b04b36e7cae24b987e9f532"},{"alg":"SHA-256","content":"82f18df0b923fac1a6dbfaecf0e52300c7f5a0cb4aa765deb3a51f593d16aa05"}]},{"bom-ref":"ed1f944b488f6c50","type":"file","name":"/usr/share/zoneinfo/America/Fort_Nelson","hashes":[{"alg":"SHA-1","content":"a453ec818cd948cc2492666443d4e39637ed7040"},{"alg":"SHA-256","content":"7ab7ce0ebdc3ad2a73eb990074eed3b367466d9c6f75d10fea0c78057df2d89d"}]},{"bom-ref":"abecf6cbeef25e46","type":"file","name":"/usr/share/zoneinfo/America/Fortaleza","hashes":[{"alg":"SHA-1","content":"aa8e9c8cd8301dd0a61085ada31923f7e1ccc983"},{"alg":"SHA-256","content":"9884ee32b44b4535b2a22174e0ecbf519f20c59a1f4e95c36e533cb7b721ed28"}]},{"bom-ref":"92e5c597af50f294","type":"file","name":"/usr/share/zoneinfo/America/Glace_Bay","hashes":[{"alg":"SHA-1","content":"40ba9843662a853c1d3643395db1a75c1164951f"},{"alg":"SHA-256","content":"1bc0c62c609aa47fda60217f3a168be50a277fb14e02000fc1e94ee61b425817"}]},{"bom-ref":"72d8a63a7c1bf829","type":"file","name":"/usr/share/zoneinfo/America/Goose_Bay","hashes":[{"alg":"SHA-1","content":"21d4df7695accb7b5164e41e28452f9655cd91a0"},{"alg":"SHA-256","content":"26068bb9e8214af5f683bdb914e7c882982fb2ac591b29163a1019586a506516"}]},{"bom-ref":"7830b9661117be91","type":"file","name":"/usr/share/zoneinfo/America/Grand_Turk","hashes":[{"alg":"SHA-1","content":"48735366abbf3760087cd1533f24415136763745"},{"alg":"SHA-256","content":"e1838510f2bad017a5dbf7c2b18eaf499c5470c24a8e22adc8e7ff4349211305"}]},{"bom-ref":"6d4ab91cb0785b7c","type":"file","name":"/usr/share/zoneinfo/America/Grenada","hashes":[{"alg":"SHA-1","content":"22c51e5eee62238f0bb0194178ac827af426ebbb"},{"alg":"SHA-256","content":"c9885c70cded8b2588d77c3834a38a148e0836ccfa5c5e7e2bc25f6033aae7bb"}]},{"bom-ref":"9429a9c31ede3c21","type":"file","name":"/usr/share/zoneinfo/America/Guadeloupe","hashes":[{"alg":"SHA-1","content":"7736231d77c559a048fefe32162aab135afbe815"},{"alg":"SHA-256","content":"add9720f2ed382210e7a64178c261615160071b7d576af02633317deae9cc702"}]},{"bom-ref":"a0a8dd44a478d5e6","type":"file","name":"/usr/share/zoneinfo/America/Guatemala","hashes":[{"alg":"SHA-1","content":"e0d50c845873aa466c9a2b020326d57af4d39b3d"},{"alg":"SHA-256","content":"76e81480277a418e76c87907b943f88d15b3a39c78dfd2108a06980af105e3a4"}]},{"bom-ref":"3c998ebaafed3283","type":"file","name":"/usr/share/zoneinfo/America/Guayaquil","hashes":[{"alg":"SHA-1","content":"8415ce0daac4cfe819154671e05b4185b9c08970"},{"alg":"SHA-256","content":"3db705e1bbc6026f9a17076d18fa2d272de46f8370a325b0c60c0bf7c05e5160"}]},{"bom-ref":"1e6b4b68b88435e8","type":"file","name":"/usr/share/zoneinfo/America/Guyana","hashes":[{"alg":"SHA-1","content":"d48d26f50f53db2dd9ddcbb6acb5723cb49e81b2"},{"alg":"SHA-256","content":"89c1eed182c2261c24f43e3b7f85420478277b1eb21ab638245b6391f308783b"}]},{"bom-ref":"22f6c4bf8e982461","type":"file","name":"/usr/share/zoneinfo/America/Halifax","hashes":[{"alg":"SHA-1","content":"93568fd7e148b3f61fca5f36f8ae0a5b3b107fe3"},{"alg":"SHA-256","content":"4d9a667393f05a82df4df42843f6f7535ec113689529278d911d07a3c99b4e7f"}]},{"bom-ref":"3fe0b6adf1914235","type":"file","name":"/usr/share/zoneinfo/America/Havana","hashes":[{"alg":"SHA-1","content":"51c1a7a700e4028481e506e58faf22f9677c5e29"},{"alg":"SHA-256","content":"1d441e02e281b04908e522d98eaca75c808e51539a8e42b3287e6bf8ebf939d7"}]},{"bom-ref":"12e5637cc9e16a9d","type":"file","name":"/usr/share/zoneinfo/America/Hermosillo","hashes":[{"alg":"SHA-1","content":"e055ab758b61beef7d8a4ee5a6b38d789c5f6b2c"},{"alg":"SHA-256","content":"8b160a7acb4b992ee05a86e4f4aaba16d2d9a35caa6d601cb6b1542a5bb372dc"}]},{"bom-ref":"c3769881e5df4b79","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Indianapolis","hashes":[{"alg":"SHA-1","content":"ad1a26bddb9304a620b2c6f7ec9f3a5226622906"},{"alg":"SHA-256","content":"90d2b2f4a8fd202b226187c209b020833300edec5ff86a463ccc685e8707532c"}]},{"bom-ref":"75919e6c43ef25b0","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Knox","hashes":[{"alg":"SHA-1","content":"41fdfe70a9789d427dc4be468f559a97ee9fcf54"},{"alg":"SHA-256","content":"0acbd9e412b0daa55abf7c7f17c094f6d68974393b8d7e3509fb2a9acea35d5f"}]},{"bom-ref":"1b4243a36fdaf19a","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Marengo","hashes":[{"alg":"SHA-1","content":"0530ef4b3396d7031cc5e4ff82dc42c10f2f89a1"},{"alg":"SHA-256","content":"7f7b50fa580c49403b9ef9fae295e12ad24bee65b319a8e809e81ae4c10949b2"}]},{"bom-ref":"db93ccbfc6490b33","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Petersburg","hashes":[{"alg":"SHA-1","content":"570cef94f900163bce34b3f85b9ea5b36df92146"},{"alg":"SHA-256","content":"03cf0e1ee334460de230b1e32a05eafddda36427554b2b5442cfbd5b429c1724"}]},{"bom-ref":"319060ba8f5643ff","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Tell_City","hashes":[{"alg":"SHA-1","content":"20594c1309a07d4691ff9af0a77782b5e2d95c61"},{"alg":"SHA-256","content":"e1d5aa02bf58d815df2f8a40424fbcd5cde01a5d9c35d1d7383effc09861867f"}]},{"bom-ref":"8513be1cc2bdd4e2","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Vevay","hashes":[{"alg":"SHA-1","content":"3959be4d9e86c9c1a7f8febc46554584b2a7ceff"},{"alg":"SHA-256","content":"1fb551d86fbfb03fc2e519b83f78358910b515608f8389b43060f73f53cbcec9"}]},{"bom-ref":"10595fecfdf461a6","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Vincennes","hashes":[{"alg":"SHA-1","content":"f9a3d65b42b008c5a85c73934fcf94eaeac4b931"},{"alg":"SHA-256","content":"eb6980c53ec03c509aa3281f96713374ea5ef9fb96d7239b23a9ba11451c4bb0"}]},{"bom-ref":"af50f7434f2d98f2","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Winamac","hashes":[{"alg":"SHA-1","content":"5d169fbd02f628dd6fdafbbab7a7e4a6da54fd21"},{"alg":"SHA-256","content":"69918cda347c087f411d252aed7ca08b078377a768ad72cf5e0db8e97b1b47ab"}]},{"bom-ref":"793d04f240ac8f1b","type":"file","name":"/usr/share/zoneinfo/America/Inuvik","hashes":[{"alg":"SHA-1","content":"1291de8f6d914ee264f0b27a55278ff12a00ad7a"},{"alg":"SHA-256","content":"e89fa66a90e7ae4f40d4bb6cc28137e2da92cbfb9f79d70404dc62c64ac48c8a"}]},{"bom-ref":"ae756344532f7a8b","type":"file","name":"/usr/share/zoneinfo/America/Iqaluit","hashes":[{"alg":"SHA-1","content":"210193fdb9be1a88f5d245ddf3dce819469be233"},{"alg":"SHA-256","content":"7de3a7c40374374afe335aa592b03824cc9ac28734b6a69ed2288108f0c0b389"}]},{"bom-ref":"742371f33488ee08","type":"file","name":"/usr/share/zoneinfo/America/Jamaica","hashes":[{"alg":"SHA-1","content":"77453a2772c127d0b213f8580ff7890cbf7b4929"},{"alg":"SHA-256","content":"c256a089e50f45fe7e6de89efa1ed0b0e35b3738c6b26f2f32cf2e7f6f29c36f"}]},{"bom-ref":"6ad706bf0169c937","type":"file","name":"/usr/share/zoneinfo/America/Juneau","hashes":[{"alg":"SHA-1","content":"740e88dcd737d076404c386330bd379d55ee8281"},{"alg":"SHA-256","content":"93b8716f46864677e713e0c18b72e472303344fc807f4fc7c34bd515f8c679bd"}]},{"bom-ref":"c54adc77995149ee","type":"file","name":"/usr/share/zoneinfo/America/Kentucky/Louisville","hashes":[{"alg":"SHA-1","content":"a63a322042aab6a2583de2f636a5eb15f71eae33"},{"alg":"SHA-256","content":"b4fd3bdb157f9ffbc8423c71709efb0067868fac8bd4a3e99f77f089db3d8355"}]},{"bom-ref":"45a73ab1167b8ecb","type":"file","name":"/usr/share/zoneinfo/America/Kentucky/Monticello","hashes":[{"alg":"SHA-1","content":"ad63bf4d1228ab308b2ed6758c21fbebb56395db"},{"alg":"SHA-256","content":"2ed7720a8f3906b5d0b3aae51fad589bef0aa961c7e8fc003a30f44318487733"}]},{"bom-ref":"1db702008e11c0e6","type":"file","name":"/usr/share/zoneinfo/America/La_Paz","hashes":[{"alg":"SHA-1","content":"631b8d0f538c7ec23d132fd7d72fb1ff64b938ae"},{"alg":"SHA-256","content":"3c0185d9553f40ec36c53d42a9da763fc023f615cc55694207257b72f7c843f9"}]},{"bom-ref":"b99e73f004cc77e5","type":"file","name":"/usr/share/zoneinfo/America/Lima","hashes":[{"alg":"SHA-1","content":"75864c99309070f61b033c039b7509c89da5ab08"},{"alg":"SHA-256","content":"2470c283de6ec3a044bb86b819fca2926d6cf2b9bc02c60f1bc749c5040d645b"}]},{"bom-ref":"6a4a6b5095eead7e","type":"file","name":"/usr/share/zoneinfo/America/Los_Angeles","hashes":[{"alg":"SHA-1","content":"a4f1faebf0f0d032290ef87bb9973c2ff8f84074"},{"alg":"SHA-256","content":"68977bb9ad6d186fefc6c7abd36010a66e30008dcb2d376087a41c49861e7268"}]},{"bom-ref":"68ae1ccadb703af2","type":"file","name":"/usr/share/zoneinfo/America/Maceio","hashes":[{"alg":"SHA-1","content":"c0295301332918d79abf0bb349cc1fee3b9f2db9"},{"alg":"SHA-256","content":"a738cd82199e1e1bc5e1a237703ab61bfe6def505234621b4401793662720e6c"}]},{"bom-ref":"abd1fce743df662d","type":"file","name":"/usr/share/zoneinfo/America/Managua","hashes":[{"alg":"SHA-1","content":"566a887308e8e16a9cebb62f3d4124b42c331674"},{"alg":"SHA-256","content":"c41cc5d350079f61367c3f10772f831c57b7e94aa878da4a3df0a176e04a59d9"}]},{"bom-ref":"925918605415ee9d","type":"file","name":"/usr/share/zoneinfo/America/Manaus","hashes":[{"alg":"SHA-1","content":"a759afda024a0ba961569017b3003805849c6f61"},{"alg":"SHA-256","content":"969e91964717250ee64ac2aa9c4802f2cbc956b143264ff5eb1c6f7e9352a4ae"}]},{"bom-ref":"8d0f5e3c42dff1d7","type":"file","name":"/usr/share/zoneinfo/America/Martinique","hashes":[{"alg":"SHA-1","content":"caf0e4c5fdae59d1b6c1278ad7ac84bf03bcb0a9"},{"alg":"SHA-256","content":"7ccb3cd24394d9816f0b47fdcb67a37bdec9780b536016a65eb9e54ee9cd2f34"}]},{"bom-ref":"bb32d9fce04b0891","type":"file","name":"/usr/share/zoneinfo/America/Matamoros","hashes":[{"alg":"SHA-1","content":"638e4541bddbb0164c8d62590ff1bb97f88b822e"},{"alg":"SHA-256","content":"7eaf8fa9d999ad0f7c52c1661c0f62be3059bf91840514ceb8b4390aee5a8d6f"}]},{"bom-ref":"b01caedd6c3f91e7","type":"file","name":"/usr/share/zoneinfo/America/Mazatlan","hashes":[{"alg":"SHA-1","content":"44c28415e815f8e2b53604195f85da07b04d829d"},{"alg":"SHA-256","content":"0561f636a54f0353ecc842cf37fd8117c2a596bb26424aa0d5eba3b10be79f1f"}]},{"bom-ref":"a1016680aec69585","type":"file","name":"/usr/share/zoneinfo/America/Menominee","hashes":[{"alg":"SHA-1","content":"88fd8d108c020a3294eae6c83ad187cf0b01a602"},{"alg":"SHA-256","content":"02bbfd58b6df84d72946c5231c353be7b044770969d3c1addf4022c46de0674e"}]},{"bom-ref":"f1f3bc6e58826c81","type":"file","name":"/usr/share/zoneinfo/America/Merida","hashes":[{"alg":"SHA-1","content":"8e07f8356362c517ef41035a0394a59363cebfc0"},{"alg":"SHA-256","content":"4953441c26b38e899fb67b8f5416b2148f84f884345a696e1df4e91cfd21dddd"}]},{"bom-ref":"deb3a4923f61bc99","type":"file","name":"/usr/share/zoneinfo/America/Metlakatla","hashes":[{"alg":"SHA-1","content":"9f327158b98652913af4d66c5257cfc014340536"},{"alg":"SHA-256","content":"b709a27864d563657e53c9c5c6abf1edab18bfc1958de59d2edace23b500a552"}]},{"bom-ref":"bef5ee0ac372b2a1","type":"file","name":"/usr/share/zoneinfo/America/Mexico_City","hashes":[{"alg":"SHA-1","content":"f46bb76507fbd52204eef47c12c9320bd7945af7"},{"alg":"SHA-256","content":"528836f85316cf6a35da347ab0af6f7a625a98b7a8e8e105310477b34c53c647"}]},{"bom-ref":"7af30a3991305382","type":"file","name":"/usr/share/zoneinfo/America/Miquelon","hashes":[{"alg":"SHA-1","content":"1418becc2c2023ac3dba15d27e5fd6b6b3b6fd5a"},{"alg":"SHA-256","content":"c1e3fb359fc8c508ace29266314768a6211b28e217c2457b2d3c6e9e0cdbf06d"}]},{"bom-ref":"3b3ccfe548f4caf3","type":"file","name":"/usr/share/zoneinfo/America/Moncton","hashes":[{"alg":"SHA-1","content":"c08e5d548c3bb971f1a1236c397ded4f7227d769"},{"alg":"SHA-256","content":"5a6bfe6e4f5a28a7165b33a9735505bbaec739fc1a224d969a1dcb82a19cb72b"}]},{"bom-ref":"919ed79d5c75170f","type":"file","name":"/usr/share/zoneinfo/America/Monterrey","hashes":[{"alg":"SHA-1","content":"ceaf09cf6075be4ff98b5716e65d197c9f302864"},{"alg":"SHA-256","content":"622c5311226e6dfe990545f2ea0df6840336811e065d73ea394e2dbf42f7906d"}]},{"bom-ref":"10fd42d566b756a1","type":"file","name":"/usr/share/zoneinfo/America/Montevideo","hashes":[{"alg":"SHA-1","content":"06e3ef1048ffd289a424fba8e053601b353cc2fa"},{"alg":"SHA-256","content":"e237204de80ae57f05d32358ce4fb7a32499e14f57434f546d327f9a5bbc37bd"}]},{"bom-ref":"7c56b1b9074fb1db","type":"file","name":"/usr/share/zoneinfo/America/Montserrat","hashes":[{"alg":"SHA-1","content":"70066c0c822c4e6d490b0bf3e4dea4e129ae99fc"},{"alg":"SHA-256","content":"c5048b50bdc8f0e2e1ca4643fea2eda2375c64df32c6d4ca7d36bf23e5165df7"}]},{"bom-ref":"3f90888f1c694b3f","type":"file","name":"/usr/share/zoneinfo/America/Nassau","hashes":[{"alg":"SHA-1","content":"c592b2705f6cae2e3a848e4d840fb8020bb0e777"},{"alg":"SHA-256","content":"304a41fcbd71dd49f0c2a8cec0da83bc27e04183ce9e10768dec0bc223b15788"}]},{"bom-ref":"088af601bd1919a2","type":"file","name":"/usr/share/zoneinfo/America/New_York","hashes":[{"alg":"SHA-1","content":"bc9337182ee4bad790b527f56bd3d2130691d693"},{"alg":"SHA-256","content":"e9ed07d7bee0c76a9d442d091ef1f01668fee7c4f26014c0a868b19fe6c18a95"}]},{"bom-ref":"8f55c04d59dd2f0b","type":"file","name":"/usr/share/zoneinfo/America/Nome","hashes":[{"alg":"SHA-1","content":"1e6cf03e0c8fbb7a079090cf164e73291681bafc"},{"alg":"SHA-256","content":"da2cccdfe3fe3ea27dcdae8c761cc57ccbcf14dabb1a29baf6d02f1303de636b"}]},{"bom-ref":"64343d8f7ff7a476","type":"file","name":"/usr/share/zoneinfo/America/Noronha","hashes":[{"alg":"SHA-1","content":"f0e29b45f9003c1ff8ed350b40b1369e8a569d0f"},{"alg":"SHA-256","content":"dd1e252d5f238394a58e10b9395542939d58efb11f8e8eb309efa8a6983f145a"}]},{"bom-ref":"edc9bfe03df8652a","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/Beulah","hashes":[{"alg":"SHA-1","content":"99080962e50069d5e6a206bff8931a67b5afebe9"},{"alg":"SHA-256","content":"aad81ba8dbbc3370241c5da7fbfa12a6cd69613e12c607256e490f29b5da047b"}]},{"bom-ref":"dbf2ac063823714c","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/Center","hashes":[{"alg":"SHA-1","content":"16ee5640265f404a2a64cbb48547b834b780cf71"},{"alg":"SHA-256","content":"f5959b2bd60a92ab942f2054152dcbaff89dc5bb7b57bcb85b810ed0a9f6d2cc"}]},{"bom-ref":"eb68dc7fbbf4bde2","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/New_Salem","hashes":[{"alg":"SHA-1","content":"6d1defaee32cee5fdaaa1405460d9ee4e4dceb55"},{"alg":"SHA-256","content":"0c7fdbb107ee5272b6a1b75bd3a2a08ac3b85cbaa1b75d815ddae052c659bde8"}]},{"bom-ref":"f72d38e85f761037","type":"file","name":"/usr/share/zoneinfo/America/Nuuk","hashes":[{"alg":"SHA-1","content":"4ff7ac72af2c09efd8e1779e5fba28288439df41"},{"alg":"SHA-256","content":"d10822ffacf8c01b25cee6d99f0f862eea713a894818a9f1a3b63353519c4202"}]},{"bom-ref":"e53d3c5929b2438d","type":"file","name":"/usr/share/zoneinfo/America/Ojinaga","hashes":[{"alg":"SHA-1","content":"346cae590643f608e6c31870966e576f2c194936"},{"alg":"SHA-256","content":"6f7f10ffb55d902673695c1bece5ee75d8a1240cd428f4d3a97726a419b59ed1"}]},{"bom-ref":"ac3dc4a94737b29f","type":"file","name":"/usr/share/zoneinfo/America/Panama","hashes":[{"alg":"SHA-1","content":"a94fbc2d567e41723f03629b6c9a864260108a17"},{"alg":"SHA-256","content":"91ac80fe976931c490d058c8ce8b5d71ffa6d4961f6ca13ea9c153f0b0bccea0"}]},{"bom-ref":"7e85ec0dee8e9391","type":"file","name":"/usr/share/zoneinfo/America/Paramaribo","hashes":[{"alg":"SHA-1","content":"af2b3e2554003e56ec6e09f4ab2cc646cef58e06"},{"alg":"SHA-256","content":"1e6e6d0f05269e84eb4d43c43b8580adf485ef8663cb0544a1ccb890be751730"}]},{"bom-ref":"35aa252c0ed8ff4a","type":"file","name":"/usr/share/zoneinfo/America/Phoenix","hashes":[{"alg":"SHA-1","content":"a3f54df3a017c38626f04bd9576a0a11663303fd"},{"alg":"SHA-256","content":"8a5973d2c62e2cbf2520f2b44e4a2ee9d2f455c93f0f45bfdeb4533af1584664"}]},{"bom-ref":"c47556479d4d7241","type":"file","name":"/usr/share/zoneinfo/America/Port-au-Prince","hashes":[{"alg":"SHA-1","content":"9901445a7bf4a993111d087ef812890dd44a67be"},{"alg":"SHA-256","content":"d3d64025de083a23297dda54b85d54e3847f851b7a06fa409055ce9d83bdc8e3"}]},{"bom-ref":"67713b78f24d46c6","type":"file","name":"/usr/share/zoneinfo/America/Port_of_Spain","hashes":[{"alg":"SHA-1","content":"8ee1b0d3b895b4195e0b580b67c0b2ee1010d29d"},{"alg":"SHA-256","content":"d7b813d9e39530528917fb32a700cfb9d905c061228eb45f90153e68adc52fad"}]},{"bom-ref":"65f9923b2e8bda94","type":"file","name":"/usr/share/zoneinfo/America/Porto_Velho","hashes":[{"alg":"SHA-1","content":"d55253cee37291a6cf91e4bbccca6473cf6679aa"},{"alg":"SHA-256","content":"6517f380612edba86797724fb6264b3921468ff58149b38a7622c2d712327397"}]},{"bom-ref":"cddd45a393e5e3be","type":"file","name":"/usr/share/zoneinfo/America/Puerto_Rico","hashes":[{"alg":"SHA-1","content":"fcf8be5296496a5dd3a7a97ed331b0bb5c861450"},{"alg":"SHA-256","content":"8491e557ff801a8306516b8ca5946ff5f2e6821af31477eb47d7d191cc5a6497"}]},{"bom-ref":"2d857463cf351892","type":"file","name":"/usr/share/zoneinfo/America/Punta_Arenas","hashes":[{"alg":"SHA-1","content":"5a64891fd90cbc2ba9e1d7dfe1689dee65affef3"},{"alg":"SHA-256","content":"dfd2c88e86a8399349656b1820dfd061d842e1caea6c2e8b5abc683d6761f441"}]},{"bom-ref":"fac6f0a1841c35ba","type":"file","name":"/usr/share/zoneinfo/America/Rankin_Inlet","hashes":[{"alg":"SHA-1","content":"f517c389db4ac89bc79cbf8ee5736f0cad7bc7b9"},{"alg":"SHA-256","content":"9d782a8cbdced815747a6f9793ca9545165bfd7d324261c4eaf9924af23d2b37"}]},{"bom-ref":"85573b97f770f7e8","type":"file","name":"/usr/share/zoneinfo/America/Recife","hashes":[{"alg":"SHA-1","content":"6a681fe7cafc3cabe9a7ef75699e4e5fa7f6a81a"},{"alg":"SHA-256","content":"8a314dd99cd97b9a0161d97c020dd2c261a38f625e558617d95a3bebb836b3a2"}]},{"bom-ref":"ad2f6c25da1fc52d","type":"file","name":"/usr/share/zoneinfo/America/Regina","hashes":[{"alg":"SHA-1","content":"ecd6b0c718b65c0c90e8097943a899c0b0cb60d8"},{"alg":"SHA-256","content":"ca3a93d3ca476c80987bcdc7f099ad68306f085a91bfb4dfcdedd8f31b97ba4c"}]},{"bom-ref":"ce2a941762399c92","type":"file","name":"/usr/share/zoneinfo/America/Resolute","hashes":[{"alg":"SHA-1","content":"c01bda981211a1387a2c18d7a57165e72da83d95"},{"alg":"SHA-256","content":"0a7314d9d048fbadefb7cf89d10d51a29c7ef1bf694422e386faf270c21e7468"}]},{"bom-ref":"5fc2d9ce30c8aef6","type":"file","name":"/usr/share/zoneinfo/America/Rio_Branco","hashes":[{"alg":"SHA-1","content":"23649fa3b661b1a7b1332e38479d24bcdb4e902f"},{"alg":"SHA-256","content":"d7ba27926f0ffd580c904ae32bdaebd2ac0d9e2eeaa7db6071467dde0de5b4eb"}]},{"bom-ref":"987239e6baea7563","type":"file","name":"/usr/share/zoneinfo/America/Santarem","hashes":[{"alg":"SHA-1","content":"f39fa90abacd688c7f6599bdbdd8c144a0b7c5b1"},{"alg":"SHA-256","content":"1a5fe5237a4f679ed42185d6726693a45a960c0e6b7ba6c78759d6b3f674f8d7"}]},{"bom-ref":"dffadde74bb97d6c","type":"file","name":"/usr/share/zoneinfo/America/Santiago","hashes":[{"alg":"SHA-1","content":"6788d98647fb2019aa749acfb7236e77e84c4533"},{"alg":"SHA-256","content":"ef9d2bf24112c65671eea391722ad6ae2cbf5f2f6ed5fcee8cc2c860780bfa01"}]},{"bom-ref":"ae1448395bafcd94","type":"file","name":"/usr/share/zoneinfo/America/Santo_Domingo","hashes":[{"alg":"SHA-1","content":"a135300f73df9c427db37aa9ba29e25f83463211"},{"alg":"SHA-256","content":"0cab5a123f1f43ddb26c84d3594e019b5eb44bda732665156e36964677a7c54e"}]},{"bom-ref":"cb0f92a1cab5f53e","type":"file","name":"/usr/share/zoneinfo/America/Sao_Paulo","hashes":[{"alg":"SHA-1","content":"96caf0f5c9ad021d2ca06e2b48ef7e3e52bff41d"},{"alg":"SHA-256","content":"70edd519e90c19d49fd72e1ffd4824a433117acdbafa5d68194a038252225108"}]},{"bom-ref":"3af16c14e89d25ce","type":"file","name":"/usr/share/zoneinfo/America/Scoresbysund","hashes":[{"alg":"SHA-1","content":"7497b479af7c157e844a90ecbfc041db4f639f04"},{"alg":"SHA-256","content":"75a39cf7fa0b8f250c4f8453d43588fbcc7d0e0ae58be81e2d45ce8891292c96"}]},{"bom-ref":"fa3f7855dd03aba1","type":"file","name":"/usr/share/zoneinfo/America/Sitka","hashes":[{"alg":"SHA-1","content":"7bb2fd466acd0399f44f56c2ed9a2a0353fb2f82"},{"alg":"SHA-256","content":"6a24bb164dfb859a7367d56478941e17e06a4cb442d503930a03002704fc5310"}]},{"bom-ref":"51db6589691fc052","type":"file","name":"/usr/share/zoneinfo/America/St_Johns","hashes":[{"alg":"SHA-1","content":"4336075a81adbebeb26ca297ce309dc595b86463"},{"alg":"SHA-256","content":"af5fb5eee2afdbb799dc9b15930fc32d941ba3ac2f8eeb95bbb0b6a43b263a02"}]},{"bom-ref":"562de5f395c043f5","type":"file","name":"/usr/share/zoneinfo/America/St_Kitts","hashes":[{"alg":"SHA-1","content":"8650003c5445719bf811a5a41fafe67841258986"},{"alg":"SHA-256","content":"afc412c84fb12ae86faca5a8e0878cbf91c32dd3c4b7485ead82d4533d0059f6"}]},{"bom-ref":"e21abb5c1e28e13e","type":"file","name":"/usr/share/zoneinfo/America/St_Lucia","hashes":[{"alg":"SHA-1","content":"a91eac7701417067bf7f6b8d635a59741125e983"},{"alg":"SHA-256","content":"236ae9122a1b4b1cc9f8e7a2f59dcf167198b208d5cc058bea4642d60a2d94de"}]},{"bom-ref":"07b3e8fedb4be67f","type":"file","name":"/usr/share/zoneinfo/America/St_Thomas","hashes":[{"alg":"SHA-1","content":"16bd3f2ce6deb13ec0c1f136a0d91dcddf081a21"},{"alg":"SHA-256","content":"5b1f38380e227d9d815400286437a6fbdd8ef838e724683db5f4655a6f351553"}]},{"bom-ref":"1fedd0791cd1778b","type":"file","name":"/usr/share/zoneinfo/America/St_Vincent","hashes":[{"alg":"SHA-1","content":"9f3030aa1b5fe2189230828dad9070a7142318b5"},{"alg":"SHA-256","content":"3549bddd8952b7e47d6a5d04d501d522521e3380e3b04e864cf13b661f5ffdef"}]},{"bom-ref":"e33fb7a9fc4a1aa1","type":"file","name":"/usr/share/zoneinfo/America/Swift_Current","hashes":[{"alg":"SHA-1","content":"e607b1ddf124e4061e437365e16404633bbdc4bd"},{"alg":"SHA-256","content":"45128e17bbd90bc56f6310fc3cfe09d7f8543dac8a04fecbbbcd1abd191f3c36"}]},{"bom-ref":"9dcdd95dd2e73bde","type":"file","name":"/usr/share/zoneinfo/America/Tegucigalpa","hashes":[{"alg":"SHA-1","content":"fe5537f0f326f4513aaf98ba68268b0798e72e0b"},{"alg":"SHA-256","content":"1333b3ee7b5396b78cabaf4967609c01bf0fb3df15f5b50c378f34b693c8cb0e"}]},{"bom-ref":"ac779b0ac51bdf12","type":"file","name":"/usr/share/zoneinfo/America/Thule","hashes":[{"alg":"SHA-1","content":"c4e304073f4f90890439ca6205d60e20d2495f16"},{"alg":"SHA-256","content":"f31b8f45a654f1180ee440aa1581d89a71e2a1cf35b0139a8a5915bbc634da2f"}]},{"bom-ref":"12517640a4a7eded","type":"file","name":"/usr/share/zoneinfo/America/Tijuana","hashes":[{"alg":"SHA-1","content":"c92e6141574feabc23b47e1f9254ce030b7e49e7"},{"alg":"SHA-256","content":"4a5b95ef1cd99b6e0b80c5d2515b75703d40944ef2fdb744eb91e10c87572dcb"}]},{"bom-ref":"f81e4e534afd4f4f","type":"file","name":"/usr/share/zoneinfo/America/Toronto","hashes":[{"alg":"SHA-1","content":"a6d038ecff7126ee19ebb08a40d157c9a79964cd"},{"alg":"SHA-256","content":"a587a1a1607439f7bac283e1815f2bdbafb9649a453d18e06c2e44e6996d888f"}]},{"bom-ref":"955a05c6db4a432f","type":"file","name":"/usr/share/zoneinfo/America/Tortola","hashes":[{"alg":"SHA-1","content":"b54b1d241ae640d6266bd323de6b255f9b4870f4"},{"alg":"SHA-256","content":"2630eeb7e722f660ef4df14899437b18d2cbc092f66304427c0538257a08bda2"}]},{"bom-ref":"dffe38813192d0c0","type":"file","name":"/usr/share/zoneinfo/America/Vancouver","hashes":[{"alg":"SHA-1","content":"b42a450523068cc1434b8774082525d8dc2a8e4f"},{"alg":"SHA-256","content":"b249ca1f48d23d66a6f831df337e6a5ecf0d6a6edde5316591423d4a0c6bcb28"}]},{"bom-ref":"0d39845297b4b491","type":"file","name":"/usr/share/zoneinfo/America/Whitehorse","hashes":[{"alg":"SHA-1","content":"4a8f00d33b5ca551a16cedc68cc8528fb4c111d8"},{"alg":"SHA-256","content":"4eb47a3c29d81be9920a504ca21aa53fcaa76215cc52cc9d23e2feaae5c5c723"}]},{"bom-ref":"e6a8dbdfd43e48ee","type":"file","name":"/usr/share/zoneinfo/America/Winnipeg","hashes":[{"alg":"SHA-1","content":"684c62d80d16a9256c9123074466cc5d0288daea"},{"alg":"SHA-256","content":"ecffbf610ae77857289fb40a4933a79221a3129a450e7dd9e3c309d6aabc541c"}]},{"bom-ref":"19c78fccb5e45196","type":"file","name":"/usr/share/zoneinfo/America/Yakutat","hashes":[{"alg":"SHA-1","content":"f115ac1b5b64b28cad149f1cdf10fb0649fe5c48"},{"alg":"SHA-256","content":"b45c2729bbf0872ca7e0b353027e727bf2560ddc6309eacd0edee83b05303b63"}]},{"bom-ref":"83b61444c39a77bb","type":"file","name":"/usr/share/zoneinfo/Antarctica/Casey","hashes":[{"alg":"SHA-1","content":"da1d193862e1725420329b257e1b856b13dcdc7a"},{"alg":"SHA-256","content":"f8c45f27605f5b7f12c009a914042a53ad991ac268056fc49b61a093d620be52"}]},{"bom-ref":"8d6cb2dae67a1a68","type":"file","name":"/usr/share/zoneinfo/Antarctica/Davis","hashes":[{"alg":"SHA-1","content":"87abeedc268901cc371d93faf9b775634a6c401b"},{"alg":"SHA-256","content":"e8fa24c8e69a212453375dec8acb8681db79bc6e40d98a8da282697cb4dbe524"}]},{"bom-ref":"2fab7e11dfc6135a","type":"file","name":"/usr/share/zoneinfo/Antarctica/DumontDUrville","hashes":[{"alg":"SHA-1","content":"75d2d21bb5e63457224fb011ed6326a204470f49"},{"alg":"SHA-256","content":"83c1d02d8f9a377a7a6b3fb4e0a74739d65816737fffef25b4746e63d7905fe2"}]},{"bom-ref":"5ac613f0b9d07b68","type":"file","name":"/usr/share/zoneinfo/Antarctica/Macquarie","hashes":[{"alg":"SHA-1","content":"99cbdcf1d9afe0907b96f0ca06636bde4e5383c3"},{"alg":"SHA-256","content":"89eed195a53c4474e8ad5563f8c5fc4ad28cab1fe85dfe141f63d4aa9cdcc1ed"}]},{"bom-ref":"f2d99118d5ab71f2","type":"file","name":"/usr/share/zoneinfo/Antarctica/Mawson","hashes":[{"alg":"SHA-1","content":"cb34c38a02c76beb5b321971d94869451a5ceab1"},{"alg":"SHA-256","content":"f535b583fcf4b64e447de07b2baf55268f1a80eefe2bd67159b8aa34a9d464d1"}]},{"bom-ref":"d122ea0c22bd24e9","type":"file","name":"/usr/share/zoneinfo/Antarctica/McMurdo","hashes":[{"alg":"SHA-1","content":"eb3f7a6e5fcc4afa8f57a639e1a7f451c617a29e"},{"alg":"SHA-256","content":"bfcb3bf057d9b44e1c5fab524e1493c8c05f24fcd78785de5ec9a06e9733a322"}]},{"bom-ref":"c302ad6ecdbb369c","type":"file","name":"/usr/share/zoneinfo/Antarctica/Palmer","hashes":[{"alg":"SHA-1","content":"12519921ed4c4f6684c5069a251141378f7134a4"},{"alg":"SHA-256","content":"0d6fc35c1c97839327319fb0d5b35dbbc6f494a3980ff120acf45de44732126e"}]},{"bom-ref":"e60527485b393551","type":"file","name":"/usr/share/zoneinfo/Antarctica/Rothera","hashes":[{"alg":"SHA-1","content":"05bc718d8f51e2dc23989d149b8dc7529a87bf1b"},{"alg":"SHA-256","content":"4102359b520de3fd9ee816f4cfeace61a3b0c69e178cc24338a33d4850d43ca8"}]},{"bom-ref":"5649634ae17fbf0d","type":"file","name":"/usr/share/zoneinfo/Antarctica/Syowa","hashes":[{"alg":"SHA-1","content":"9a3e07db6f99c173b4124ff8b3fde368b2d3065e"},{"alg":"SHA-256","content":"56799d572a5d25486c070d57b97644704408166a22aa861c76997c86ddfb4206"}]},{"bom-ref":"ffa2c3a2e02b67ba","type":"file","name":"/usr/share/zoneinfo/Antarctica/Troll","hashes":[{"alg":"SHA-1","content":"0f3bab6c4d956dd8e8bb969e354e1a211980e244"},{"alg":"SHA-256","content":"df3ae1f8ffe3302b2cf461b01c9247932a5967276ae26920a3f4c3a9cb67ddce"}]},{"bom-ref":"00ffdfbf41cdd116","type":"file","name":"/usr/share/zoneinfo/Antarctica/Vostok","hashes":[{"alg":"SHA-1","content":"cab2a7ae9eb3304377d15b3761e4beca547fb07e"},{"alg":"SHA-256","content":"fd919da6bacf97141ca6169c92cf789f6a6e5a7c816564b5a9f17b329124355d"}]},{"bom-ref":"db3eb156b3455631","type":"file","name":"/usr/share/zoneinfo/Asia/Aden","hashes":[{"alg":"SHA-1","content":"55d32df7c5c9f2219a53a75b5e293875efda007f"},{"alg":"SHA-256","content":"74f10e9f2d5a1d2bb1f0fb84ff35029d1e0dea924ce40ce1828dd3bfd2f7dad9"}]},{"bom-ref":"3c513e59ddf348a4","type":"file","name":"/usr/share/zoneinfo/Asia/Almaty","hashes":[{"alg":"SHA-1","content":"4b4d8aabb1fd81e39b5b8fd2d3506875966a3c34"},{"alg":"SHA-256","content":"0027ca41ce1a18262ee881b9daf8d4c0493240ccc468da435d757868d118c81e"}]},{"bom-ref":"3667d223faeb8e46","type":"file","name":"/usr/share/zoneinfo/Asia/Amman","hashes":[{"alg":"SHA-1","content":"fdffb8cdba7aaf42ba9f8e1f1d9093c21ed77027"},{"alg":"SHA-256","content":"5fd1b785b66b85d591515bc49aaf85e05e94a1c4156698f0a2b6c17eee93d9f6"}]},{"bom-ref":"472848ac1ff57a95","type":"file","name":"/usr/share/zoneinfo/Asia/Anadyr","hashes":[{"alg":"SHA-1","content":"5e18546688a8d72426a93024673be6a7b890ca49"},{"alg":"SHA-256","content":"8430d3972e397a3a1554ff40974ed398aa5300234625a20f95c5cb45bb06ff88"}]},{"bom-ref":"f633e00aa2dbde7b","type":"file","name":"/usr/share/zoneinfo/Asia/Aqtau","hashes":[{"alg":"SHA-1","content":"b5c1626f08af9ec32dadbbfcdb69f5a2a83445cb"},{"alg":"SHA-256","content":"0397b164ddb9e896a01494dc6ac81d0ab43c8223aa6761053115580564daa990"}]},{"bom-ref":"25d47f012dc2e4c3","type":"file","name":"/usr/share/zoneinfo/Asia/Aqtobe","hashes":[{"alg":"SHA-1","content":"67f145b5d2958ced37d7c63144ca314cc3a5619c"},{"alg":"SHA-256","content":"2d0ecfe4b1047bb8db59b8eabf398cefd734a3a01d65e084c504be7ce5a9f32c"}]},{"bom-ref":"a0103eee0e77cf91","type":"file","name":"/usr/share/zoneinfo/Asia/Ashgabat","hashes":[{"alg":"SHA-1","content":"f077f5395b29d53b145792d5e2e309a99c4a7092"},{"alg":"SHA-256","content":"2f80d85769995b272c61e1c8ca95f33ba64d637b43f308e0c5f3d1d993d6dba7"}]},{"bom-ref":"88485daa9a61469e","type":"file","name":"/usr/share/zoneinfo/Asia/Atyrau","hashes":[{"alg":"SHA-1","content":"879556e7e91d36d29c7921b7693b3aafa95ce9bf"},{"alg":"SHA-256","content":"dee128f3d391c8326a43f4ed6907487fd50f681f16a88450562d2079e63d8151"}]},{"bom-ref":"fd3da50759114181","type":"file","name":"/usr/share/zoneinfo/Asia/Baghdad","hashes":[{"alg":"SHA-1","content":"10843b2e6588534f57e4c05255923c461fcaf40d"},{"alg":"SHA-256","content":"9503125273ae8a36dca13682a8c3676219ef2ad4b62153ff917140cde3d53435"}]},{"bom-ref":"5ab7e921d81db578","type":"file","name":"/usr/share/zoneinfo/Asia/Bahrain","hashes":[{"alg":"SHA-1","content":"34b43ec78165217412f04071142e8fbdeafc3a73"},{"alg":"SHA-256","content":"e7bfd6ad48c4aa065512cc0835a11e40ed127e12168c28e429e25c96cbdf3dcf"}]},{"bom-ref":"3bce9394895b15bd","type":"file","name":"/usr/share/zoneinfo/Asia/Baku","hashes":[{"alg":"SHA-1","content":"8409d8a1289864bf61dd17a80524eb6aa36e9be8"},{"alg":"SHA-256","content":"be11e796268e751c8db9d974b0524574bca7120d0773423e22264d7db0de09b3"}]},{"bom-ref":"0384b2852b420c39","type":"file","name":"/usr/share/zoneinfo/Asia/Bangkok","hashes":[{"alg":"SHA-1","content":"5c81d559f702a0239d5bf025c97e70b2c577682e"},{"alg":"SHA-256","content":"798ab4be1f3d3758f4ebd511a10bed06ed277446a5e853ebb5b17c58228aa43c"}]},{"bom-ref":"640ebc97e3ea2240","type":"file","name":"/usr/share/zoneinfo/Asia/Barnaul","hashes":[{"alg":"SHA-1","content":"1391b2598eff6e35378e261f36dd2f57b3e491bf"},{"alg":"SHA-256","content":"d9cd42abc5d89418326d140c3fcc343427fb91a2c3acf66d1a7e0ce622596c9a"}]},{"bom-ref":"c245137da6a7a76c","type":"file","name":"/usr/share/zoneinfo/Asia/Beirut","hashes":[{"alg":"SHA-1","content":"fba8b66863fcd6bcabec3a13467e0b3450650ad5"},{"alg":"SHA-256","content":"fd9ff664083f88bf6f539d490c1f02074e2e5c10eb7f590b222b3e2675da4b6a"}]},{"bom-ref":"003ee235a38c4cb8","type":"file","name":"/usr/share/zoneinfo/Asia/Bishkek","hashes":[{"alg":"SHA-1","content":"d6c73a90b411c39d97ccda0ad8a57f252456881c"},{"alg":"SHA-256","content":"768ff8922d49bd22aea54aef973f634641eca4385dbe4d43d88901c85b248c93"}]},{"bom-ref":"5902ed49ec278ce5","type":"file","name":"/usr/share/zoneinfo/Asia/Brunei","hashes":[{"alg":"SHA-1","content":"69a6365a741d1f6691d51a8ad67b5e6f6c94011c"},{"alg":"SHA-256","content":"04c323c04999f6b32836959f83c22b94b8516cc29b756e3ca5a75117e146a257"}]},{"bom-ref":"01b3bbf715cdd233","type":"file","name":"/usr/share/zoneinfo/Asia/Chita","hashes":[{"alg":"SHA-1","content":"4a265169da96777e85b65b87ed5a3d64d801e791"},{"alg":"SHA-256","content":"e0808e7005401169cff9c75ffd826ed7f90262760f1b6fef61f49bb8d23e5702"}]},{"bom-ref":"7025e2ed179595af","type":"file","name":"/usr/share/zoneinfo/Asia/Colombo","hashes":[{"alg":"SHA-1","content":"0fe53f0c887f168201f4c4767068dadb1a698581"},{"alg":"SHA-256","content":"1c679af63b30208833ee4db42d3cdb2ad43252e9faec83f91efb19ae60096496"}]},{"bom-ref":"12f0c2dab21dfaca","type":"file","name":"/usr/share/zoneinfo/Asia/Damascus","hashes":[{"alg":"SHA-1","content":"716b40d34b96db89c27eeb936693481abad8288b"},{"alg":"SHA-256","content":"fb90ce2ad6329e7b146189c13108a7dd7b2d850f58e651bebdd9e20fde6d2037"}]},{"bom-ref":"56df5c457c282e55","type":"file","name":"/usr/share/zoneinfo/Asia/Dhaka","hashes":[{"alg":"SHA-1","content":"5779829aea6d010cea872e6c2b6f1ac661d825e3"},{"alg":"SHA-256","content":"dcae6594685ca4275930c709ba8988095bfb9599434695383d46f90ed171f25e"}]},{"bom-ref":"a74a9fd1f39e1946","type":"file","name":"/usr/share/zoneinfo/Asia/Dili","hashes":[{"alg":"SHA-1","content":"f71f19932f5f7e625447e241be76b34dd2e75115"},{"alg":"SHA-256","content":"9d4384e3039ac9fc4b4d9c3becc8aa43802f9ccecd8e0b20bbb82fb1ba227f61"}]},{"bom-ref":"0985a4a13ce8f7a1","type":"file","name":"/usr/share/zoneinfo/Asia/Dubai","hashes":[{"alg":"SHA-1","content":"612f06ce47e5c3acb96b2b6eb8075d89ece41f90"},{"alg":"SHA-256","content":"fa06b49b7b9af58ea4496444cf6fd576d715024abcdd6ad6defc63048ed6346b"}]},{"bom-ref":"1343c45714ed4421","type":"file","name":"/usr/share/zoneinfo/Asia/Dushanbe","hashes":[{"alg":"SHA-1","content":"1694cb3276a637899c86f26176b2b1f862d47eda"},{"alg":"SHA-256","content":"15493d4edfc68a67d1ba57166a612fb8ebc0ec5439d987d9a90db0f3ca8cc7a3"}]},{"bom-ref":"b2f5035056ea9689","type":"file","name":"/usr/share/zoneinfo/Asia/Famagusta","hashes":[{"alg":"SHA-1","content":"d7f718a82b28e4fedb4e6501fc94ca2a6ec758c8"},{"alg":"SHA-256","content":"085adcca077cb9d7b9c7a384b5f33f0f0d0a607a31a4f3f3ab8e8aa075718e37"}]},{"bom-ref":"d59a6b10d22d20b5","type":"file","name":"/usr/share/zoneinfo/Asia/Gaza","hashes":[{"alg":"SHA-1","content":"169848cd25c3fe443c5d0bdd5c96d68a949cfe78"},{"alg":"SHA-256","content":"b7463171440be7754d2a729b2a28e7d0e13f31aaf21329e89da6ec7be893b73b"}]},{"bom-ref":"c2c5ac9ccc45f27d","type":"file","name":"/usr/share/zoneinfo/Asia/Hebron","hashes":[{"alg":"SHA-1","content":"201832bdac94204b130b3d01a26f608357e8da26"},{"alg":"SHA-256","content":"e98d144872b1fb1a02c42aff5a90ae337a253f5bd41a7ceb7271a2c9015ca9d4"}]},{"bom-ref":"dc07972638222c25","type":"file","name":"/usr/share/zoneinfo/Asia/Ho_Chi_Minh","hashes":[{"alg":"SHA-1","content":"a96c3b96b551d852706b95e0bb739f8e62aee915"},{"alg":"SHA-256","content":"e23774e40786df8d8cc1ef0fb6a6a72ba32c94d9cb7765fb06ed4dfd8c96065e"}]},{"bom-ref":"9291b4a152e74f15","type":"file","name":"/usr/share/zoneinfo/Asia/Hong_Kong","hashes":[{"alg":"SHA-1","content":"0c3205dd5ec08d17c2161af789df8d05b1bda1b6"},{"alg":"SHA-256","content":"6a5fcee243e5ab92698242d88c4699ceb7208a22ee97d342d11e41ebd2555a17"}]},{"bom-ref":"7c3c0b0fe162db0b","type":"file","name":"/usr/share/zoneinfo/Asia/Hovd","hashes":[{"alg":"SHA-1","content":"5f8950afc6522a8c920cbeb079ac39ca26d52e38"},{"alg":"SHA-256","content":"2549cea2cecf3538b65512b10fa5e7695477369ba1b17fcf8b5f2b23355ed71c"}]},{"bom-ref":"438580924d98622f","type":"file","name":"/usr/share/zoneinfo/Asia/Irkutsk","hashes":[{"alg":"SHA-1","content":"f82e877820027d4c48be625842047a6cfe008234"},{"alg":"SHA-256","content":"894259095063a5f078acd2893abea0d33519b5c718624fc6934c13925c7c623d"}]},{"bom-ref":"25b4b4138c7f56e1","type":"file","name":"/usr/share/zoneinfo/Asia/Jakarta","hashes":[{"alg":"SHA-1","content":"be35b8895cd70cc9c5744d30260e82f0421a9337"},{"alg":"SHA-256","content":"4ef13306f4b37f314274eb0c019d10811f79240e717f790064e361cb98045d11"}]},{"bom-ref":"617073569deb6d50","type":"file","name":"/usr/share/zoneinfo/Asia/Jayapura","hashes":[{"alg":"SHA-1","content":"70cd707f6e144cf0cb40af01a70b9c4739208e48"},{"alg":"SHA-256","content":"8a1cd477e2fc1d456a1be35ad743323c4f986308d5163fb17abaa34cde04259b"}]},{"bom-ref":"5d6980825b356b28","type":"file","name":"/usr/share/zoneinfo/Asia/Jerusalem","hashes":[{"alg":"SHA-1","content":"89e42d27cfb78255ae18ee02f5a4c8e3ba57dde0"},{"alg":"SHA-256","content":"254b964265b94e16b4a498f0eb543968dec25f4cf80fba29b3d38e4a775ae837"}]},{"bom-ref":"c4a8eb91b1cdc659","type":"file","name":"/usr/share/zoneinfo/Asia/Kabul","hashes":[{"alg":"SHA-1","content":"b2379e605267b8766f9e34d322a5e3a657df7113"},{"alg":"SHA-256","content":"89a97b4afc1e1d34170e5efd3275e6e901ed8b0da2ed9b757b9bab2d753c4aaf"}]},{"bom-ref":"e17278d073474f5f","type":"file","name":"/usr/share/zoneinfo/Asia/Kamchatka","hashes":[{"alg":"SHA-1","content":"9902b94b8a6fbc3d4533f43d9be5cdb6302693ce"},{"alg":"SHA-256","content":"a4103445bca72932ac30299fda124c67f8605543de9a6b3e55c78c309ed00bae"}]},{"bom-ref":"1eb2b1b4b1ac6b49","type":"file","name":"/usr/share/zoneinfo/Asia/Karachi","hashes":[{"alg":"SHA-1","content":"a4c69f1551a0a9bdd8d1817c547bd18218b570a3"},{"alg":"SHA-256","content":"881fa658c4d75327c1c00919773f3f526130d31b20c48b9bf8a348eda9338649"}]},{"bom-ref":"977474d76de637dd","type":"file","name":"/usr/share/zoneinfo/Asia/Kathmandu","hashes":[{"alg":"SHA-1","content":"454f1d251f8a9cd2c1559897f6b38a53fdbfe249"},{"alg":"SHA-256","content":"4d4796eeb0d289f3934ac371be8f628086197c621311951ffb4123825c910d6b"}]},{"bom-ref":"31494e342d7f509e","type":"file","name":"/usr/share/zoneinfo/Asia/Khandyga","hashes":[{"alg":"SHA-1","content":"7ddab9699af73544e5b52a7477e0c5532216c59a"},{"alg":"SHA-256","content":"5d8cc4dadb04e526b2f698347070d090413d693bb2da988548b006c7f77e7663"}]},{"bom-ref":"a835dd398470edd2","type":"file","name":"/usr/share/zoneinfo/Asia/Kolkata","hashes":[{"alg":"SHA-1","content":"856df72f3f593ff1e183505d743bf65e40a30aca"},{"alg":"SHA-256","content":"e90c341036cb7203200e293cb3b513267e104a39a594f35e195254e6bc0a17cf"}]},{"bom-ref":"6099c6a6054799b8","type":"file","name":"/usr/share/zoneinfo/Asia/Krasnoyarsk","hashes":[{"alg":"SHA-1","content":"ec3786f8744bad78bbfc370674ad33ccba5d4080"},{"alg":"SHA-256","content":"9f3470e0f2360222bf19ef39e1bf14ed3483c342c6432ddc6b962e38e5365f02"}]},{"bom-ref":"0c0b20c4fcb4dfc3","type":"file","name":"/usr/share/zoneinfo/Asia/Kuala_Lumpur","hashes":[{"alg":"SHA-1","content":"18b9c35a14e2337928f7a077024e3ce3abfcffd8"},{"alg":"SHA-256","content":"1a414f6514a08b0bdc3253e926d12e4445cd2d12f0d82be067ab4c8eae63e5bb"}]},{"bom-ref":"9240f7225118d152","type":"file","name":"/usr/share/zoneinfo/Asia/Kuching","hashes":[{"alg":"SHA-1","content":"951d0ec46419658895f8005b2583badeff166bdb"},{"alg":"SHA-256","content":"2ac02d4346a8708368ce2c705bb0a4a2b63ed4f4cb96c8fb5149d01903046134"}]},{"bom-ref":"69789c110086fe18","type":"file","name":"/usr/share/zoneinfo/Asia/Kuwait","hashes":[{"alg":"SHA-1","content":"6877a65a1c8a2d545b73d3f5b9528e4ab95f5afc"},{"alg":"SHA-256","content":"012915ba833940360fc0c411e0798174be07bebfbeea2c77a8ceb7884a609107"}]},{"bom-ref":"40840e28ac8610af","type":"file","name":"/usr/share/zoneinfo/Asia/Macau","hashes":[{"alg":"SHA-1","content":"bbd377edbc12abe7cd74edc80086dd21bb34a6ca"},{"alg":"SHA-256","content":"32f02447246cac0dabd39d88b65c85e5b8761617918c8d233f0834b88887d989"}]},{"bom-ref":"40ae08289f8a61fa","type":"file","name":"/usr/share/zoneinfo/Asia/Magadan","hashes":[{"alg":"SHA-1","content":"34134a81b737efcc82e3be92b2d222319b36f510"},{"alg":"SHA-256","content":"72ac23290b7c4e5ce7335c360decc066ecf512378e7cbc4f792635f62f7391f4"}]},{"bom-ref":"d31dfa38c6904e02","type":"file","name":"/usr/share/zoneinfo/Asia/Makassar","hashes":[{"alg":"SHA-1","content":"2d411fa607c974fe3d77ee18612a21717d226b5e"},{"alg":"SHA-256","content":"3a126d0aa493114faee67d28a4154ee41bbec10cdc60fcbd4bfe9a02125780ec"}]},{"bom-ref":"e70a78030b14056e","type":"file","name":"/usr/share/zoneinfo/Asia/Manila","hashes":[{"alg":"SHA-1","content":"d1cabdadc66cf3536c77a812baa074080b2140ca"},{"alg":"SHA-256","content":"f314d21c542e615756dd385d36a896cd57ba16fef983fe6b4d061444bbf1ac9e"}]},{"bom-ref":"b44682e37c3382f2","type":"file","name":"/usr/share/zoneinfo/Asia/Muscat","hashes":[{"alg":"SHA-1","content":"aaf28b8cd2b209c5e99611859edaa41a227c179a"},{"alg":"SHA-256","content":"b955876fbfc5248022f0037c730ce8c17ac58c5bd46701e20364c3f24745ab61"}]},{"bom-ref":"84aeab48e4b619ac","type":"file","name":"/usr/share/zoneinfo/Asia/Nicosia","hashes":[{"alg":"SHA-1","content":"642099c037f5f40aa6152f7590e3cee90b7ae64a"},{"alg":"SHA-256","content":"d149e6d08153ec7c86790ec5def4daffe9257f2b0282bba5a853ba043d699595"}]},{"bom-ref":"3ab6bdbc8cb922ad","type":"file","name":"/usr/share/zoneinfo/Asia/Novokuznetsk","hashes":[{"alg":"SHA-1","content":"52b0a7aff4332d6481b146155abbe90912bc1aaf"},{"alg":"SHA-256","content":"bd019ca8a766626583765ef740f65373269d9e8a5ed513c9e2806065e950bbdd"}]},{"bom-ref":"b1bcecff510a639f","type":"file","name":"/usr/share/zoneinfo/Asia/Novosibirsk","hashes":[{"alg":"SHA-1","content":"823fbd64d76bfdcb6e3b0206b731fe407a6a188d"},{"alg":"SHA-256","content":"0292f7b36d075f6788027a34dc709ad915dd94ba2d55bf49be7665ed6d6c334d"}]},{"bom-ref":"5d030a344d880de6","type":"file","name":"/usr/share/zoneinfo/Asia/Omsk","hashes":[{"alg":"SHA-1","content":"cb67208994f35a825847c36964546c8b8d1ad243"},{"alg":"SHA-256","content":"c316c47ac7deedd24e90d3df7ea4f04fac2e4d249333a13d7f4b85300cb33023"}]},{"bom-ref":"6cc443c67d685a9d","type":"file","name":"/usr/share/zoneinfo/Asia/Oral","hashes":[{"alg":"SHA-1","content":"deec78c1cebcbd9efb7c57486ca0344e5f8f1fb3"},{"alg":"SHA-256","content":"88c8ea0f82ef0e0cb1375e6fec2ab211d043c8115a3a50a1c17d701f3d898954"}]},{"bom-ref":"7471cbac254203c0","type":"file","name":"/usr/share/zoneinfo/Asia/Phnom_Penh","hashes":[{"alg":"SHA-1","content":"7470e7293b5ca83d2846f3b963a3cfd9735ab5d5"},{"alg":"SHA-256","content":"acbe7662c323fd5d10cf906013321fd67f4c451c7436f4acc8d5717f70ccbcad"}]},{"bom-ref":"013bfd231562edd6","type":"file","name":"/usr/share/zoneinfo/Asia/Pontianak","hashes":[{"alg":"SHA-1","content":"ce2c32e874ec64696f76be4439aad95cc7e3c4e7"},{"alg":"SHA-256","content":"8a7397c2e2ad8cabf5cff7a588f65222a8d2b7ac21b6ec613de1b56298d4fc14"}]},{"bom-ref":"334e07460cdc53a1","type":"file","name":"/usr/share/zoneinfo/Asia/Pyongyang","hashes":[{"alg":"SHA-1","content":"99b004e8e97b94265617932951e7227b635ced64"},{"alg":"SHA-256","content":"ffe8371a70c0b5f0d7e17024b571fd8c5a2e2d40e63a8be78e839fbd1a540ec1"}]},{"bom-ref":"b5f46cb739956af4","type":"file","name":"/usr/share/zoneinfo/Asia/Qatar","hashes":[{"alg":"SHA-1","content":"918dda414e2e89ca2b735946a84d94c42a24f452"},{"alg":"SHA-256","content":"574ac525d2c722b4e82795a5dbc573568c3009566863c65949e369fbb90ebe36"}]},{"bom-ref":"692e55be87afa10d","type":"file","name":"/usr/share/zoneinfo/Asia/Qostanay","hashes":[{"alg":"SHA-1","content":"f7e8708a8ae86992953f273773b65d1e36e4afe4"},{"alg":"SHA-256","content":"f76633d7074fa667abc02f50d5685c95e2023102c3c1c68d8550ae36c09e77b5"}]},{"bom-ref":"7d7222e7af116a1e","type":"file","name":"/usr/share/zoneinfo/Asia/Qyzylorda","hashes":[{"alg":"SHA-1","content":"001a7c9f9de8d7edab286c756c0d0c03e90fad88"},{"alg":"SHA-256","content":"6a2491c70a146d0f930477f6c1cc9a3a141bf3a8f78d0a57c1c41a48f9c0b705"}]},{"bom-ref":"b56079c88db00231","type":"file","name":"/usr/share/zoneinfo/Asia/Riyadh","hashes":[{"alg":"SHA-1","content":"bde5a629fdb78b40544b8018b2578f0b085045cc"},{"alg":"SHA-256","content":"aeaf4a3e3f25d050679ca9fddd690c780d489e036d4f3939fe8578b04661738c"}]},{"bom-ref":"5a627b8c1a40b735","type":"file","name":"/usr/share/zoneinfo/Asia/Sakhalin","hashes":[{"alg":"SHA-1","content":"ebaa95b0bf93239c1ccf8f96856b86dc58afe726"},{"alg":"SHA-256","content":"f7901d3f03a049ed20f70771ebb90a2c36e3bd8dc5b697950680166c955ca34c"}]},{"bom-ref":"7fcc639bb4c2884a","type":"file","name":"/usr/share/zoneinfo/Asia/Samarkand","hashes":[{"alg":"SHA-1","content":"7bbf5c916ddd50548e8e5ed0324c59dc1fe9a693"},{"alg":"SHA-256","content":"0417ba1a0fca95242e4b9840cafbe165698295c2c96858e708d182dfdd471d03"}]},{"bom-ref":"2b7c549c63585da1","type":"file","name":"/usr/share/zoneinfo/Asia/Seoul","hashes":[{"alg":"SHA-1","content":"53c1223d1f4dec149d0cadd6d488672619abf0d6"},{"alg":"SHA-256","content":"2c8f4bb15dd77090b497e2a841ff3323ecbbae4f9dbb9edead2f8dd8fb5d8bb4"}]},{"bom-ref":"0d48a5c19380e084","type":"file","name":"/usr/share/zoneinfo/Asia/Shanghai","hashes":[{"alg":"SHA-1","content":"79360e38e040eaa15b6e880296c1d1531f537b6f"},{"alg":"SHA-256","content":"64ffc2e43a94435a043c040d1d3af7e92d031adc78e7737af1861baa4eeef3e6"}]},{"bom-ref":"313abf45d3838794","type":"file","name":"/usr/share/zoneinfo/Asia/Singapore","hashes":[{"alg":"SHA-1","content":"429a0689e9ed127265705febf2c9aa5f47ac3547"},{"alg":"SHA-256","content":"739e349e40a3e820c222f70c4c9d55810b65987ffb14e494d08b145ed3445711"}]},{"bom-ref":"8cf9d513be9b5bd7","type":"file","name":"/usr/share/zoneinfo/Asia/Srednekolymsk","hashes":[{"alg":"SHA-1","content":"e860fc369629019ed59b45f5fed235cc6ea8dfb2"},{"alg":"SHA-256","content":"d039655bcab95605c4315e5cfe72c912566c3696aebcd84d00242972076a125d"}]},{"bom-ref":"d75e677800a8532f","type":"file","name":"/usr/share/zoneinfo/Asia/Taipei","hashes":[{"alg":"SHA-1","content":"515e1ab82b216406f364cf666dae998e4b8dc6f8"},{"alg":"SHA-256","content":"0cc990c0ea4faa5db9b9edcd7fcbc028a4f87a6d3a0f567dac76cb222b718b19"}]},{"bom-ref":"4b7d4b87ecb1ae48","type":"file","name":"/usr/share/zoneinfo/Asia/Tashkent","hashes":[{"alg":"SHA-1","content":"bbc8a292471ac05d8774b14bcb177ab7fd7f7398"},{"alg":"SHA-256","content":"2d2fb24f1874bf5be626843d23a7d8f8811193bba43e6a2f571d94b7ff9bf888"}]},{"bom-ref":"ebb5ede226dcc1cb","type":"file","name":"/usr/share/zoneinfo/Asia/Tbilisi","hashes":[{"alg":"SHA-1","content":"7cb93f7abf7171eb40186248ecc885b541836e74"},{"alg":"SHA-256","content":"c3a50dc60ca7e015554c5e56900b71a3fbbb9e7218dba99a90a4399d18227ddb"}]},{"bom-ref":"ff0d87fd7ece9bcc","type":"file","name":"/usr/share/zoneinfo/Asia/Tehran","hashes":[{"alg":"SHA-1","content":"a7cb8bf300b3177e2506a838f7fd218880350e57"},{"alg":"SHA-256","content":"a996eb28d87f8c73af608beada143b344fc2e9c297d84da7915d731ba97566b4"}]},{"bom-ref":"88bdedf7697c4510","type":"file","name":"/usr/share/zoneinfo/Asia/Thimphu","hashes":[{"alg":"SHA-1","content":"16dc4bbfe2b3668b9b737033f4ecb2a9c1ee7e6a"},{"alg":"SHA-256","content":"ba26bca2be5db4393155466b70bc248db4f3f42ed984bab44f88e513862fbaf4"}]},{"bom-ref":"3af30f04b6e54e53","type":"file","name":"/usr/share/zoneinfo/Asia/Tokyo","hashes":[{"alg":"SHA-1","content":"41852e7fc829ff3ace521bc3ebc60b6e43b56da6"},{"alg":"SHA-256","content":"a02b9e66044dc5c35c5f76467627fdcba4aee1cc958606b85c777095cad82ceb"}]},{"bom-ref":"fc1994f2357c1383","type":"file","name":"/usr/share/zoneinfo/Asia/Tomsk","hashes":[{"alg":"SHA-1","content":"5e7464939be7db8572e95aea8381f94bca70f91d"},{"alg":"SHA-256","content":"efb6207492f111344a8d08e76871dfe78c4102a372c130f0410999e6fe80ab6f"}]},{"bom-ref":"c5cde9a8d8993070","type":"file","name":"/usr/share/zoneinfo/Asia/Ulaanbaatar","hashes":[{"alg":"SHA-1","content":"90cad7fd7da7d6546622901db622595f1880f593"},{"alg":"SHA-256","content":"bb2412cc8065d1fd935c7ae6526dd53ecd42f6ba34d77858980971eb25238776"}]},{"bom-ref":"a01e043c70594a2d","type":"file","name":"/usr/share/zoneinfo/Asia/Urumqi","hashes":[{"alg":"SHA-1","content":"c4fba0cb8c5f2ef8232782883fca5e7af1b1fdb2"},{"alg":"SHA-256","content":"0045c32793f140e85e3d9670d50665f7c9a80cd6be6d6dc8dd654d4191c13d80"}]},{"bom-ref":"978fcad965aea20f","type":"file","name":"/usr/share/zoneinfo/Asia/Ust-Nera","hashes":[{"alg":"SHA-1","content":"0040f6ac898a101ca796115d646c4825833c0290"},{"alg":"SHA-256","content":"2406614403dd6ce2fd00bf961ce2fc6998f1759c4b9860cd046302c3d4cab51f"}]},{"bom-ref":"b97f0a3b5a5108fa","type":"file","name":"/usr/share/zoneinfo/Asia/Vientiane","hashes":[{"alg":"SHA-1","content":"228615c5a479755fa54ee20987afe594f4bd1ad6"},{"alg":"SHA-256","content":"8bfb2a6f1f2d1eb19da3f4c8898fe59ae2cb41aab690954857e95bf9d9cdaae6"}]},{"bom-ref":"4d17a949e251ede3","type":"file","name":"/usr/share/zoneinfo/Asia/Vladivostok","hashes":[{"alg":"SHA-1","content":"7480790ddac173ba580e52d0f8754eeacbff02b6"},{"alg":"SHA-256","content":"5a892182d8f69f0523f7dda1ed2c9f07f7d134700a7cf37386c7ffa19a629bc7"}]},{"bom-ref":"8f6ce4c75f2f93f2","type":"file","name":"/usr/share/zoneinfo/Asia/Yakutsk","hashes":[{"alg":"SHA-1","content":"79d6a645076e873ce22c53a10b3de9e27df7b2fe"},{"alg":"SHA-256","content":"455088979d84bccae9d911b6860d9c8c34abf5086cb1c6804fe355f35c70ef37"}]},{"bom-ref":"68d0729e855b41b4","type":"file","name":"/usr/share/zoneinfo/Asia/Yangon","hashes":[{"alg":"SHA-1","content":"b800894b13386d65d24df73322e82ee622f843de"},{"alg":"SHA-256","content":"647b97f97547afc746263acf439716edbf23414bf78a1c9df95ccde78e6694c0"}]},{"bom-ref":"341c964bbfd99b7d","type":"file","name":"/usr/share/zoneinfo/Asia/Yekaterinburg","hashes":[{"alg":"SHA-1","content":"16f2954e67502e5e98391383ab4712700e456ee8"},{"alg":"SHA-256","content":"37355cd8388f7b2c3415d307c123d0245f64dedbd676dac44d988de7ca72c4b9"}]},{"bom-ref":"00d6af1d7dad40e7","type":"file","name":"/usr/share/zoneinfo/Asia/Yerevan","hashes":[{"alg":"SHA-1","content":"f10e1a31e38b267009bed042efd8a54c7b2043a2"},{"alg":"SHA-256","content":"934587b56416fdc0428dc12ff273f4d5c54f79354395fd7c950d3fbba7229f5a"}]},{"bom-ref":"319b5d2db8be3d72","type":"file","name":"/usr/share/zoneinfo/Atlantic/Azores","hashes":[{"alg":"SHA-1","content":"172bb51ca8e3d7d4ad2a4a08c50776d31b27bc62"},{"alg":"SHA-256","content":"91dba61a9e3608f795cfc5c469d802ab610b1c00fd8890b6db2236d48d541857"}]},{"bom-ref":"3a87a1e29ab603d3","type":"file","name":"/usr/share/zoneinfo/Atlantic/Bermuda","hashes":[{"alg":"SHA-1","content":"44e7011574ab916094cc410221bcff4960831155"},{"alg":"SHA-256","content":"2cd18a7ccb2762fc089a34f2cd7acb84c3871c3bbba88ebb45b60d2afbc8d792"}]},{"bom-ref":"fd0494036c81d4e8","type":"file","name":"/usr/share/zoneinfo/Atlantic/Canary","hashes":[{"alg":"SHA-1","content":"395c4e66b52d9181e31450d07b5365a10ec26aa3"},{"alg":"SHA-256","content":"ca62bdb9faa986f3630cade1ce290de067e4711dd07820623cac9573a16395b0"}]},{"bom-ref":"bfdb9ddca0080d98","type":"file","name":"/usr/share/zoneinfo/Atlantic/Cape_Verde","hashes":[{"alg":"SHA-1","content":"897189e0cda96bfb3248ee7f48706fe94d687fc1"},{"alg":"SHA-256","content":"11242f13775e308fa5c7d986d3224b12c157e4a465fbb73a803e4eda1d199bd4"}]},{"bom-ref":"498fc0a05fb308d1","type":"file","name":"/usr/share/zoneinfo/Atlantic/Faroe","hashes":[{"alg":"SHA-1","content":"dd6b1178a2066e496edfcd2426d44ea5dd23a3d8"},{"alg":"SHA-256","content":"3626dd64f66d6a99d847f9b22199cc753692286b0e04682e8e3d3f4f636f033b"}]},{"bom-ref":"c309ddfcb455a80c","type":"file","name":"/usr/share/zoneinfo/Atlantic/Madeira","hashes":[{"alg":"SHA-1","content":"18738836410da9e19de07a766494d71f957f6e36"},{"alg":"SHA-256","content":"95863ce4c0b9f8650a1319b7e778b1c2d643c5ab186af4d35842efbf94572f11"}]},{"bom-ref":"f1e5496dbb8e50a0","type":"file","name":"/usr/share/zoneinfo/Atlantic/Reykjavik","hashes":[{"alg":"SHA-1","content":"dca85c80179204018293e1b58a04d89e86a6ca5c"},{"alg":"SHA-256","content":"99291a4411992de52b9bcf0478771a5a711ddf95a7f808361b5d07b48dc6d9f8"}]},{"bom-ref":"b4a3a02faefb7028","type":"file","name":"/usr/share/zoneinfo/Atlantic/South_Georgia","hashes":[{"alg":"SHA-1","content":"b2acac8196001a9458b5e6c6921d781df3290d78"},{"alg":"SHA-256","content":"419ef67d12a9e8a82fcbb0dfc871a1b753159f31a048fba32d07785cc8cdaeb7"}]},{"bom-ref":"c2ec505b4a2ebab4","type":"file","name":"/usr/share/zoneinfo/Atlantic/St_Helena","hashes":[{"alg":"SHA-1","content":"8e37214bbd267cbe81d4febd457cac21ae972d1f"},{"alg":"SHA-256","content":"a6dfe04a0d3889bca9b71df65370184b41c8a83efb4eb1222da544478d0f6d5d"}]},{"bom-ref":"c83a98e49068d800","type":"file","name":"/usr/share/zoneinfo/Atlantic/Stanley","hashes":[{"alg":"SHA-1","content":"f612730123deabdd609145696adeea2ea26f499f"},{"alg":"SHA-256","content":"7b128c2f0f8ff79db04b5153c558e7514d66903d8ebca503c2d0edf081a07fcc"}]},{"bom-ref":"5ab4e0069471c384","type":"file","name":"/usr/share/zoneinfo/Australia/Adelaide","hashes":[{"alg":"SHA-1","content":"91e31f0fe53950a7e8ac0bd66964069d4d7dabe9"},{"alg":"SHA-256","content":"95dd846f153be6856098f7bbd37cfe23a6aa2e0d0a9afeb665c086ce44f9476d"}]},{"bom-ref":"e707e88150e82339","type":"file","name":"/usr/share/zoneinfo/Australia/Brisbane","hashes":[{"alg":"SHA-1","content":"d1cae3c294b3bc9e1d4a1e1e5457f63abb6b554e"},{"alg":"SHA-256","content":"796e90cf37b6b74faca5e2669afb7524ccdb91269d20a744f385c773b254b467"}]},{"bom-ref":"a660e1fdf5b4e9ab","type":"file","name":"/usr/share/zoneinfo/Australia/Broken_Hill","hashes":[{"alg":"SHA-1","content":"7f8d2d9322173a3390737371410592ecbcb9e858"},{"alg":"SHA-256","content":"de4ff79634ef4b91927e8ed787ac3bd54811dda03060f06c9c227e9a51180aa4"}]},{"bom-ref":"0f82c1c1f64a6dc6","type":"file","name":"/usr/share/zoneinfo/Australia/Darwin","hashes":[{"alg":"SHA-1","content":"fa21b92f3596419128a660acccf2f1cf6aa66ab0"},{"alg":"SHA-256","content":"7e7d08661216f7c1409f32e283efc606d5b92c0e788da8dd79e533838b421afa"}]},{"bom-ref":"440b800ab389b08c","type":"file","name":"/usr/share/zoneinfo/Australia/Eucla","hashes":[{"alg":"SHA-1","content":"abf9ae83cf5720d60dfc849f06ea666b6e6c1a0f"},{"alg":"SHA-256","content":"2f112e156c8cb1efdc00b56d4560a47fab08204935de34382575bc9366a049df"}]},{"bom-ref":"4bf51503abc80a76","type":"file","name":"/usr/share/zoneinfo/Australia/Hobart","hashes":[{"alg":"SHA-1","content":"db8884f4beb55ae0c292403cdb8ffc47c18effcd"},{"alg":"SHA-256","content":"18b412ce021fb16c4ebe628eae1a5fa1f5aa20d41fea1dfa358cb799caba81c8"}]},{"bom-ref":"3cbeebd0a1298218","type":"file","name":"/usr/share/zoneinfo/Australia/Lindeman","hashes":[{"alg":"SHA-1","content":"8ac554523fc5300e535323ce58e46f8adb72c2e5"},{"alg":"SHA-256","content":"c4ce94771db6a0b3682d1d58ec64211ce628bfc9f0df140daa073f35543624ae"}]},{"bom-ref":"deac5aa4dc49e18c","type":"file","name":"/usr/share/zoneinfo/Australia/Lord_Howe","hashes":[{"alg":"SHA-1","content":"2304257244b530bcd036aae724f99aff416198f8"},{"alg":"SHA-256","content":"2ee7f42f1fe2247ba1de465de0bc518dfdfab4b179fb05b650531534a353ee08"}]},{"bom-ref":"202db419b19cd5a8","type":"file","name":"/usr/share/zoneinfo/Australia/Melbourne","hashes":[{"alg":"SHA-1","content":"d6f744692e6c8b73de1eef051814f00e0d159e6a"},{"alg":"SHA-256","content":"96fc7f31072e9cc73abb6b2622b97c5f8dbb6cbb17be3920a4249d8d80933413"}]},{"bom-ref":"ea90b0ad498c1ecb","type":"file","name":"/usr/share/zoneinfo/Australia/Perth","hashes":[{"alg":"SHA-1","content":"bb00a26c7ab0df1054fa1c4a71f0bd836a9be5f8"},{"alg":"SHA-256","content":"025d4339487853fa1f3144127959734b20f7c7b4948cff5d72149a0541a67968"}]},{"bom-ref":"0458a6bce0dfb823","type":"file","name":"/usr/share/zoneinfo/Australia/Sydney","hashes":[{"alg":"SHA-1","content":"ca9f55088c536a5cb6993b1a5fe361c0617bc4fd"},{"alg":"SHA-256","content":"42c3857585b16db2f8ffd47ba19faa60f473340de8d4fe9320ea7be861605906"}]},{"bom-ref":"903cc53cdfc6661d","type":"file","name":"/usr/share/zoneinfo/CET","hashes":[{"alg":"SHA-1","content":"bb74b77367a8f2cdba57e6fe87646ec679c01fd5"},{"alg":"SHA-256","content":"a38a2692b33f22c213c68a14a3c92b33ddb55df05dbd1b3d261c065c677e6298"}]},{"bom-ref":"8f961d54b3189ace","type":"file","name":"/usr/share/zoneinfo/CST6CDT","hashes":[{"alg":"SHA-1","content":"b7320421c536a8d90de0f180f229f4ff16fa41e8"},{"alg":"SHA-256","content":"5866ed6751708d15fa25ea3f4c25cab1f783b3857dba15c625f7272c9864decd"}]},{"bom-ref":"de32593e513a32b4","type":"file","name":"/usr/share/zoneinfo/EET","hashes":[{"alg":"SHA-1","content":"2f31ef3ca9f69bae3d8ed8b9895bd4507054e975"},{"alg":"SHA-256","content":"80656c5b9faa9c8eedcbcbea54ad400d686e9ebbc04fc9140bbf4651ffbfec6f"}]},{"bom-ref":"9cc95932315e5a3e","type":"file","name":"/usr/share/zoneinfo/EST","hashes":[{"alg":"SHA-1","content":"6420e75b41f85aaeb0a57fd5006229b934290e32"},{"alg":"SHA-256","content":"b8a13f54f29fc46c9812ccaa57f0dd136316e79becfea522a0e7489f91a8a1b7"}]},{"bom-ref":"e1555244a4ad7518","type":"file","name":"/usr/share/zoneinfo/EST5EDT","hashes":[{"alg":"SHA-1","content":"35eeee583e3a83cf86a1c72624a1d98716031423"},{"alg":"SHA-256","content":"7f0cc4313d638276367438ddd04a83976ebfecb0bea05e3c05de27839df5d47d"}]},{"bom-ref":"b15b333c82a573e8","type":"file","name":"/usr/share/zoneinfo/Etc/GMT","hashes":[{"alg":"SHA-1","content":"2a8483df5c2809f1dfe0c595102c474874338379"},{"alg":"SHA-256","content":"6d9f378883c079f86c0387a5547a92c449869d806e07de10084ab04f0249018d"}]},{"bom-ref":"d2df380b71d88033","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+1","hashes":[{"alg":"SHA-1","content":"694bd47ee2b5d93fd043dd144c5dce214e163dd8"},{"alg":"SHA-256","content":"d50ce5d97f6b43f45711fd75c87d3dc10642affa61e947453fb134caef6cf884"}]},{"bom-ref":"94b298f6ae7160cb","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+10","hashes":[{"alg":"SHA-1","content":"df25f8ee32cd9ac7f9d3fdafb6ccc897e0675a5c"},{"alg":"SHA-256","content":"244432432425902d28e994dd7958d984220e87a70ae5317b1f4d0f925b3eb142"}]},{"bom-ref":"da059269fa9922ae","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+11","hashes":[{"alg":"SHA-1","content":"326fa090be74ccc8e561a72ff2833a9a80460977"},{"alg":"SHA-256","content":"b56bdcbd830509a13ad27255bc3aeba2feecb49becd4a4183b2ae1977773714b"}]},{"bom-ref":"9bbcda7dde25112b","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+12","hashes":[{"alg":"SHA-1","content":"9813523e1f092d2f0c0cd3e5f13e2738a51cb350"},{"alg":"SHA-256","content":"6fbd0712112babc2099aaf31edc399cb8791fffddfab9b871e98ef3c1107a8c0"}]},{"bom-ref":"d0ba8480bc1c7db0","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+2","hashes":[{"alg":"SHA-1","content":"e3c40ede5206526dd50a7f8d710afad3da46c12e"},{"alg":"SHA-256","content":"4fa129e7386c94129b61a10215407a8142a1de24d93f23285b59238689f1ad4a"}]},{"bom-ref":"e2f0a05b1c146c4b","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+3","hashes":[{"alg":"SHA-1","content":"8f68d2cb81ec1c386f80f820d6aaf54b7444f5cd"},{"alg":"SHA-256","content":"406a18ac4d386d427e3b32f7eddb763194f917158d2e92433d55e025bb2d6190"}]},{"bom-ref":"70b81e24e4e77405","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+4","hashes":[{"alg":"SHA-1","content":"32cfcd637174d91744d7dff4744e199750faf9d1"},{"alg":"SHA-256","content":"456ae43648bec15ed7f9ca1ed15bee7c17ba2eb595a643c98226b94106049c1a"}]},{"bom-ref":"0a0b6d2cf222f4ba","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+5","hashes":[{"alg":"SHA-1","content":"cef7ce7bf61e746cc1ae39bbab9112bf1dfdc455"},{"alg":"SHA-256","content":"a1199e0b8d5d8185d3fb3cf264844a5cdf48bdd2f60dae674eec261b6fe9ac80"}]},{"bom-ref":"c7a19cd239fca2cf","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+6","hashes":[{"alg":"SHA-1","content":"750271da92432a39887c376cd346144d785d4445"},{"alg":"SHA-256","content":"77a7409f089e8f2148da7ec0cc59455b4685013eb360d123048106d2ebb4b1b4"}]},{"bom-ref":"e32bdaa584d5f419","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+7","hashes":[{"alg":"SHA-1","content":"6ca6def25e8ec04a636003be3f3642e9b165b5f0"},{"alg":"SHA-256","content":"4ea8d86f3774607a71d708ac160d3c275f704e983aced24b2e89e0658fe5a33b"}]},{"bom-ref":"16b310b9304ddf80","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+8","hashes":[{"alg":"SHA-1","content":"5c83913964f148a5e9d5add7eb511586880f4373"},{"alg":"SHA-256","content":"b61ffc6c832662044f09eb01adb981851af48d03bbc2177bd0b898f477f02729"}]},{"bom-ref":"5c6d2909e67f6b8f","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+9","hashes":[{"alg":"SHA-1","content":"fefc384f96a7e856e72e7d723eb2638cb3e7d469"},{"alg":"SHA-256","content":"42ae44ea2512ec9309232993ed8a2a948f0cb6ab55cb49abf6deb3585b5673d6"}]},{"bom-ref":"addeabcf4c190959","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-1","hashes":[{"alg":"SHA-1","content":"0ab7ceaed57872977f2162ead3e08b3a2984757c"},{"alg":"SHA-256","content":"ef7175794f2e01018fde6728076abdf428df31a9c61479377de7e58e9f69602e"}]},{"bom-ref":"e6d07642f4877112","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-10","hashes":[{"alg":"SHA-1","content":"4081769004bdca6d05daa595d53c5e64e9da7dfd"},{"alg":"SHA-256","content":"7ca5963702c13a9d4e90a8ed735c3d2c85c94759934c3f8976f61f951cb522b5"}]},{"bom-ref":"f200f3b72908d381","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-11","hashes":[{"alg":"SHA-1","content":"268a542f171d142870c273ea63d2b297e9132424"},{"alg":"SHA-256","content":"0f64bbf67ea9b1af6df7fdaf8f9c08ac5a471f63892dc08a3fabedc3315920d6"}]},{"bom-ref":"42db6bd79b75cbda","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-12","hashes":[{"alg":"SHA-1","content":"7a7f58e042a671281dbf35baa7db93fc4661a80b"},{"alg":"SHA-256","content":"99ee15ea599623c812afc1fb378d56003d04c30d5a9e1fc4177e10afd5284a72"}]},{"bom-ref":"039c565a66216559","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-13","hashes":[{"alg":"SHA-1","content":"9f692f0a177436496fa8381438ee7ed1f9ae3f1a"},{"alg":"SHA-256","content":"c5b99b1b505003a0e5a5afe2530106c89c56e1adedea599ac1d3ca004f2f6d1f"}]},{"bom-ref":"fb3ed77fb8bb30e4","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-14","hashes":[{"alg":"SHA-1","content":"f073c38db02ac6096f4f32948eda1574a34d9d0b"},{"alg":"SHA-256","content":"3e95e8444061d36a85a6fc55323da957d200cd242f044ed73ef9cdf6a499f8a7"}]},{"bom-ref":"5cd124af5a1d9178","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-2","hashes":[{"alg":"SHA-1","content":"44c80b54e02666339300ec84db1f6f5566b5ba92"},{"alg":"SHA-256","content":"bdeea158b75eba22e1a9a81a58ba8c0fa1cdc9b4b57214708ee75f4d9d9b6011"}]},{"bom-ref":"ce74a48c38126532","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-3","hashes":[{"alg":"SHA-1","content":"3de0e41581d474c91db326d9e755fe1b11172983"},{"alg":"SHA-256","content":"37bee320b6a7b8b0d590bb1dba35d94aef9db078b0379308a7087b7cc5227eca"}]},{"bom-ref":"ab32ada6ebc02318","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-4","hashes":[{"alg":"SHA-1","content":"b81f76f5a16830f56841502d65c3d271a0d94ee4"},{"alg":"SHA-256","content":"2d2928e5f547a8f979cdfc231aa91b31afce167beda53ea8ff8c58c4dcfd9f9a"}]},{"bom-ref":"36ad2c0972c68ba1","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-5","hashes":[{"alg":"SHA-1","content":"4978924cbee929c87b2726c9d9b4d2d5d7590da6"},{"alg":"SHA-256","content":"b8b69247931bd7c1d14ec000e52bde63d3c027dedd3bc433216a8d5dedf065be"}]},{"bom-ref":"a0386d9d1ba2b943","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-6","hashes":[{"alg":"SHA-1","content":"773e9072d36b0f3dca58dc5de24b9947f3fefdeb"},{"alg":"SHA-256","content":"25237e454029849e747e922fedc602eae9ebb6bcfd4b55a66bea620c79467bb7"}]},{"bom-ref":"22b44cb05dd4c1b4","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-7","hashes":[{"alg":"SHA-1","content":"6c3c180b690aee6c0320e6703f2f781618c4221e"},{"alg":"SHA-256","content":"bd500e17cc54f53f444a7c3af1cd12157a5cbe4a28a5a8b04d1d336de7c71d25"}]},{"bom-ref":"7870278e7c055992","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-8","hashes":[{"alg":"SHA-1","content":"280e22a595351b1fa0fdc3b3a3deed4e4840e31a"},{"alg":"SHA-256","content":"4bbc4541b14ca620d9cb8bf92f80fd7c2ae3448cf3a0b0b9a7c49edb7c62eeeb"}]},{"bom-ref":"0a3d90fa7e06702d","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-9","hashes":[{"alg":"SHA-1","content":"f62a1c06f8a901efa933208ae9501c9a2f78a269"},{"alg":"SHA-256","content":"239bc736650af98ca0fd2d6c905378e15195cc1824b6316055088320a3b868c2"}]},{"bom-ref":"992b32f1cb527a16","type":"file","name":"/usr/share/zoneinfo/Etc/UTC","hashes":[{"alg":"SHA-1","content":"d0b8991654116e9395714102c41d858c1454b3bd"},{"alg":"SHA-256","content":"8b85846791ab2c8a5463c83a5be3c043e2570d7448434d41398969ed47e3e6f2"}]},{"bom-ref":"076f9a6d643b6ef4","type":"file","name":"/usr/share/zoneinfo/Europe/Amsterdam","hashes":[{"alg":"SHA-1","content":"f1caa90c7251a050d3d56127fd21f5fb54dec1cd"},{"alg":"SHA-256","content":"a70f079e056dddb53942b473bbbd2a3a67faf5323292592096f554b5ef67b4aa"}]},{"bom-ref":"0f68a180c4a7ba7e","type":"file","name":"/usr/share/zoneinfo/Europe/Andorra","hashes":[{"alg":"SHA-1","content":"4fbea0614a049786c42ba65ea8bea4b12a7a6ef3"},{"alg":"SHA-256","content":"8130798c2426bc8c372498b5fef01c398ba1b733c147a457531f60555ea9eae8"}]},{"bom-ref":"0900917378138dff","type":"file","name":"/usr/share/zoneinfo/Europe/Astrakhan","hashes":[{"alg":"SHA-1","content":"6bdbac46bf6de697e0cb750be284973b05035877"},{"alg":"SHA-256","content":"cb0b732fdd8a55fa326ce980844f5e1ea98c72f2599b96f48ece460dd5882444"}]},{"bom-ref":"7b01a95ffa262b94","type":"file","name":"/usr/share/zoneinfo/Europe/Athens","hashes":[{"alg":"SHA-1","content":"fd241e817c1f999471c30d301238211a16f95866"},{"alg":"SHA-256","content":"5c363e14151d751c901cdf06c502d9e1ac23b8e956973954763bfb39d5c53730"}]},{"bom-ref":"e363c194804dd19c","type":"file","name":"/usr/share/zoneinfo/Europe/Belgrade","hashes":[{"alg":"SHA-1","content":"961a2223fd1573ab344930109fbd905336175c5f"},{"alg":"SHA-256","content":"3a95adb06156044fd2fa662841c0268c2b5af47c1b19000d9d299563d387093a"}]},{"bom-ref":"4959c5c9cfb2d9c2","type":"file","name":"/usr/share/zoneinfo/Europe/Berlin","hashes":[{"alg":"SHA-1","content":"918341ad71f9d3acd28997326e42d5b00fba41e0"},{"alg":"SHA-256","content":"5ee475f71a0fc1a32faeb849f8c39c6e7aa66d6d41ec742b97b3a7436b3b0701"}]},{"bom-ref":"1b40549261aca9ac","type":"file","name":"/usr/share/zoneinfo/Europe/Brussels","hashes":[{"alg":"SHA-1","content":"d90f3247c4716c2e1068d5ad9c88ca2091bec4e8"},{"alg":"SHA-256","content":"812f55aeb6e8cde9ddf4786e15eb4256b21e82cf5f5d28da1bad17d94570cac0"}]},{"bom-ref":"2cb9e2aebfbd0782","type":"file","name":"/usr/share/zoneinfo/Europe/Bucharest","hashes":[{"alg":"SHA-1","content":"7176e5201942e3b2db81c853b0215abc86fd0ae7"},{"alg":"SHA-256","content":"9df83af9b5360fa0cc1166fd10c2014799319cdb1b0d2c7450a7c71ff673a857"}]},{"bom-ref":"c770dcce9303b2c1","type":"file","name":"/usr/share/zoneinfo/Europe/Budapest","hashes":[{"alg":"SHA-1","content":"91adb207dce9a1bfffd91c527c87591862b5befa"},{"alg":"SHA-256","content":"94dc2ac5672206fc3d7a2f35550c082876c2fd90c98e980753a1c5838c025246"}]},{"bom-ref":"4ff2a586334f7d83","type":"file","name":"/usr/share/zoneinfo/Europe/Chisinau","hashes":[{"alg":"SHA-1","content":"3c7ec1a8e357d2bbaead94d299dbe16db67b43ba"},{"alg":"SHA-256","content":"a7527faea144d77a4bf1ca4146b1057beb5e088f1fd1f28ae2e4d4cbfe1d885e"}]},{"bom-ref":"1a8731bdd32bfb19","type":"file","name":"/usr/share/zoneinfo/Europe/Copenhagen","hashes":[{"alg":"SHA-1","content":"76ebb86b9bcd6ca766af94c2182b65cabacba932"},{"alg":"SHA-256","content":"abb8806e477bcbd42f6c08ba5c664450e4f034309161646ef55402c54ad9d355"}]},{"bom-ref":"9f493e061d61c332","type":"file","name":"/usr/share/zoneinfo/Europe/Dublin","hashes":[{"alg":"SHA-1","content":"2122cd57243fa8c021136373cb21454c0f80ff05"},{"alg":"SHA-256","content":"40e8d2a1c3b572284da39f6f4245b1bc814f452c44f5aa73d0a011571d5ccc43"}]},{"bom-ref":"60c27d88ae366cc2","type":"file","name":"/usr/share/zoneinfo/Europe/Gibraltar","hashes":[{"alg":"SHA-1","content":"122f8383ab55c80eb33fe83cb2c8e870104260ee"},{"alg":"SHA-256","content":"6bced6a5a065bf123880053d3a940e90df155096e2ad55987fe55f14b4c8a12e"}]},{"bom-ref":"318040295e95e7ca","type":"file","name":"/usr/share/zoneinfo/Europe/Guernsey","hashes":[{"alg":"SHA-1","content":"115ab983357fade1e8adf15c145c8265cf973a32"},{"alg":"SHA-256","content":"63454225987aa547bd9b47d41f274ee90de8d52c66c3c624d42508da55cf8cb0"}]},{"bom-ref":"35644c381dc8a440","type":"file","name":"/usr/share/zoneinfo/Europe/Helsinki","hashes":[{"alg":"SHA-1","content":"3f01ceaf46492fcbd8753bc6cff72ca73df6d1f1"},{"alg":"SHA-256","content":"184901ecbb158667a0b7b62eb9685e083bc3182edbecdc3d6d3743192f6a9097"}]},{"bom-ref":"a5127136d704fb62","type":"file","name":"/usr/share/zoneinfo/Europe/Isle_of_Man","hashes":[{"alg":"SHA-1","content":"83a6f93c88b340212d80ecc4103b5e708d3da856"},{"alg":"SHA-256","content":"8c20e22715c8950b0a30c68f191d9fbf2ebef60189279f2ca99cbabc14ec1b12"}]},{"bom-ref":"2c36aebc6605e7d6","type":"file","name":"/usr/share/zoneinfo/Europe/Istanbul","hashes":[{"alg":"SHA-1","content":"df6cbece3d9afb3aedb44e131b6e68a6cf74ca8e"},{"alg":"SHA-256","content":"d92d00fdfed5c6fc84ac930c08fa8adf7002840dbd21590caf5a3e4a932d3319"}]},{"bom-ref":"2f57dda52ea5b682","type":"file","name":"/usr/share/zoneinfo/Europe/Jersey","hashes":[{"alg":"SHA-1","content":"e35cf0a296a73e09a708107b74c5a04fb3971c7f"},{"alg":"SHA-256","content":"7ae8f42ddba0b50ac3b52b23f967a0cd0da7cddbbfdbc711152b38d4146b673d"}]},{"bom-ref":"071cd3e72ee6f04e","type":"file","name":"/usr/share/zoneinfo/Europe/Kaliningrad","hashes":[{"alg":"SHA-1","content":"a02a78fd9fd74fa6cd9abe6546273519018d5030"},{"alg":"SHA-256","content":"b3b19749ed58bcc72cec089484735303a2389c03909ff2a6cff66a2583be2cc3"}]},{"bom-ref":"3f5a5321d6edd65e","type":"file","name":"/usr/share/zoneinfo/Europe/Kirov","hashes":[{"alg":"SHA-1","content":"22357ac98d315c82d585badfb9afe934a709f107"},{"alg":"SHA-256","content":"3fb4f665fe44a3aa382f80db83f05f8858d48138f47505e5af063e419d5e0559"}]},{"bom-ref":"51075a3211454c25","type":"file","name":"/usr/share/zoneinfo/Europe/Kyiv","hashes":[{"alg":"SHA-1","content":"946d9ae0ff7ee36e2d8809629da945ae868f4d65"},{"alg":"SHA-256","content":"fb0ae91bd8cfb882853f5360055be7c6c3117fd2ff879cf727a4378e3d40c0d3"}]},{"bom-ref":"745a924385600f1e","type":"file","name":"/usr/share/zoneinfo/Europe/Lisbon","hashes":[{"alg":"SHA-1","content":"b9298daf385db9e18080b3d9f46be2c944714ec1"},{"alg":"SHA-256","content":"92b07cb24689226bf934308d1f1bd33c306aa4da610c52cd5bce25077960502c"}]},{"bom-ref":"804d65c642fe7718","type":"file","name":"/usr/share/zoneinfo/Europe/Ljubljana","hashes":[{"alg":"SHA-1","content":"a6183ba40c890d7f7997afe8a9842361bbc857a2"},{"alg":"SHA-256","content":"2267951ff4cc76cebc3e804b8cca03648c169ec16ce0cbf9e5dfbe51e748043f"}]},{"bom-ref":"7f6f28b0961e3a91","type":"file","name":"/usr/share/zoneinfo/Europe/London","hashes":[{"alg":"SHA-1","content":"1beba7108ea93c7111dabc9d7f4e4bfdea383992"},{"alg":"SHA-256","content":"c85495070dca42687df6a1c3ee780a27cbcb82f1844750ea6f642833a44d29b4"}]},{"bom-ref":"494f0676def08d06","type":"file","name":"/usr/share/zoneinfo/Europe/Luxembourg","hashes":[{"alg":"SHA-1","content":"efcfc52aa249c0515ebaab94ed3d98e191e07950"},{"alg":"SHA-256","content":"f7be03bdffd7d50212286d732224c92487c66afa1b3b6d475154be1dfcac39c6"}]},{"bom-ref":"5682bd211602a8d9","type":"file","name":"/usr/share/zoneinfo/Europe/Madrid","hashes":[{"alg":"SHA-1","content":"373ee9e3d0ba9edf1ebd6497d5f1ffb50a62984f"},{"alg":"SHA-256","content":"9a42d7d37ad6dedd2d9b328120f7bf9e852f6850c4af00baff964f659b161cea"}]},{"bom-ref":"6463251b1b13d329","type":"file","name":"/usr/share/zoneinfo/Europe/Malta","hashes":[{"alg":"SHA-1","content":"eede4ec7a48fc8ada059d1462e2c090eda8c6c91"},{"alg":"SHA-256","content":"12129c6cf2f8efbeb9b56022439edcbac68ad9368842a64282d268119b3751dd"}]},{"bom-ref":"4fe2eff6353ffb53","type":"file","name":"/usr/share/zoneinfo/Europe/Minsk","hashes":[{"alg":"SHA-1","content":"e36f1daec8979122825de4903770b79e0eabcd88"},{"alg":"SHA-256","content":"9a7f3acddacd5a92580df139d48cbd9f5f998b6a624f26fd10f692d80fae1894"}]},{"bom-ref":"121a889d3d4240bb","type":"file","name":"/usr/share/zoneinfo/Europe/Monaco","hashes":[{"alg":"SHA-1","content":"9eb927aa739c775cc3e390b7d65719be9170ecd1"},{"alg":"SHA-256","content":"e74b956576175ea7e7afe2b8b6c48d976e8265b463bbae42f924e9f35f305fce"}]},{"bom-ref":"d2371ceb1e4d5e4b","type":"file","name":"/usr/share/zoneinfo/Europe/Moscow","hashes":[{"alg":"SHA-1","content":"d4d01723421789b2d2b54ffedee60283e94f5e65"},{"alg":"SHA-256","content":"2a69287d1723e93f0f876f0f242866f09569d77b91bde7fa4d9d06b8fcd4883c"}]},{"bom-ref":"cbe2d57621e14e75","type":"file","name":"/usr/share/zoneinfo/Europe/Oslo","hashes":[{"alg":"SHA-1","content":"d8838a66441249a79ab65c959eff3dbd379a1a06"},{"alg":"SHA-256","content":"51d0844618f5258a71de88e68a5691a32568478a8c035f8f12fea11b09e9b090"}]},{"bom-ref":"62ff3e06762f711a","type":"file","name":"/usr/share/zoneinfo/Europe/Paris","hashes":[{"alg":"SHA-1","content":"f065dd54ad27c008caa5e96b7fec1e7859fcc003"},{"alg":"SHA-256","content":"ab77a1488a2dd4667a4f23072236e0d2845fe208405eec1b4834985629ba7af8"}]},{"bom-ref":"49d1ebbdfd91fc7b","type":"file","name":"/usr/share/zoneinfo/Europe/Prague","hashes":[{"alg":"SHA-1","content":"c95c20c6a17e873cb68c1b064e6ba98852aaa27d"},{"alg":"SHA-256","content":"1bd7dd8545e6cf1eb9d419f267a57b00e60857d115e5a309326e3878968b2d9c"}]},{"bom-ref":"859868bc60160480","type":"file","name":"/usr/share/zoneinfo/Europe/Riga","hashes":[{"alg":"SHA-1","content":"799671bdcad326eb5707eb620342c69bac5e6580"},{"alg":"SHA-256","content":"849dbfd26d6d696f48b80fa13323f99fe597ed83ab47485e2accc98609634569"}]},{"bom-ref":"de72e94a14fc8b31","type":"file","name":"/usr/share/zoneinfo/Europe/Rome","hashes":[{"alg":"SHA-1","content":"2ef35f507ab176828a5c751f702144ede463e385"},{"alg":"SHA-256","content":"d5ade82cc4a232949b87d43157c84b2c355b66a6ac87cf6250ed6ead80b5018f"}]},{"bom-ref":"9538d83d09b286e8","type":"file","name":"/usr/share/zoneinfo/Europe/Samara","hashes":[{"alg":"SHA-1","content":"a8bab29224d52a19e5960c2c66557748fb55c4e5"},{"alg":"SHA-256","content":"cf68a79ea499f3f964132f1c23217d24cfc57e73b6b1665aa9e16a3a1f290fb3"}]},{"bom-ref":"2caa123737dd6efd","type":"file","name":"/usr/share/zoneinfo/Europe/Sarajevo","hashes":[{"alg":"SHA-1","content":"4f20170e7f4f29f21170ce80eea092f277458fb8"},{"alg":"SHA-256","content":"a3e49aca8bf331e3c6d0faf68ab466cde901c8051a8674e926acd2c66deaff57"}]},{"bom-ref":"1c47b9d54e95a890","type":"file","name":"/usr/share/zoneinfo/Europe/Saratov","hashes":[{"alg":"SHA-1","content":"916029e1ff74b86bd860098a43bacbac34677fb5"},{"alg":"SHA-256","content":"04c7a3e3d1e5406db80960a1e5538436b0778cfb893d270fb3346d6fb32b2772"}]},{"bom-ref":"12af18fba889440f","type":"file","name":"/usr/share/zoneinfo/Europe/Simferopol","hashes":[{"alg":"SHA-1","content":"f1773f7624c418081fb3ab76ac1a64ab60f2e9be"},{"alg":"SHA-256","content":"b7397bc5d355499a6b342ba5e181392d2a6847d268ba398eabc55b6c1f301e27"}]},{"bom-ref":"c1eee8b6dd1d5d2b","type":"file","name":"/usr/share/zoneinfo/Europe/Skopje","hashes":[{"alg":"SHA-1","content":"7b58851e47db58ec69309054cab75166ce725f62"},{"alg":"SHA-256","content":"50301171643800580da77e75187dc2f9ec2e0b40860578248c9c3dd0c348dcb8"}]},{"bom-ref":"ad92082e47aecaf2","type":"file","name":"/usr/share/zoneinfo/Europe/Sofia","hashes":[{"alg":"SHA-1","content":"541f61fa9ef15b102f8661b684ad9976bd81b929"},{"alg":"SHA-256","content":"84240a5df30dae7039c47370feecd38cacd5c38f81becab9a063b8c940afe6d6"}]},{"bom-ref":"c510fbd4365bf88e","type":"file","name":"/usr/share/zoneinfo/Europe/Stockholm","hashes":[{"alg":"SHA-1","content":"318f50064cedc8263f9883058b2fcf2ab17ba783"},{"alg":"SHA-256","content":"5e0a7819287cfa9cdd78978ff13436d235830d48f5ed1ebd87a4584db2d87768"}]},{"bom-ref":"43c042b9bed4349a","type":"file","name":"/usr/share/zoneinfo/Europe/Tallinn","hashes":[{"alg":"SHA-1","content":"dff1b1743ddf6474e691fae0a6dab8ee93d81789"},{"alg":"SHA-256","content":"e1ae890b4688a4ccea215ecedf9ce81b42cb270910ab90285d9da2be489cebec"}]},{"bom-ref":"a3f4d5eb48c8acb2","type":"file","name":"/usr/share/zoneinfo/Europe/Tirane","hashes":[{"alg":"SHA-1","content":"3b9be3df7968b0c46feed0a46349324179daaa84"},{"alg":"SHA-256","content":"ced959c824bd5825de556f2706e9f74f28b91d463412d15b8816c473582e72ec"}]},{"bom-ref":"38e4ae631ab984aa","type":"file","name":"/usr/share/zoneinfo/Europe/Ulyanovsk","hashes":[{"alg":"SHA-1","content":"f5d943bf83a0dffa86018b8512df7179536fb4ae"},{"alg":"SHA-256","content":"9c5b207154e64e2885cc7b722434673bedc7e064407c079c79be9bda31472d44"}]},{"bom-ref":"ef18376e475288ee","type":"file","name":"/usr/share/zoneinfo/Europe/Vaduz","hashes":[{"alg":"SHA-1","content":"7506d222b6bc2a1ea5b435cfb42d624cba4a09e7"},{"alg":"SHA-256","content":"a7b7adba7d5cbdab931406b197603bdb12f5b9952ca7e91cf8f17c5d729955c8"}]},{"bom-ref":"b809c7fe5e55cd35","type":"file","name":"/usr/share/zoneinfo/Europe/Vienna","hashes":[{"alg":"SHA-1","content":"1da9833989405bd5ff21d58013704f9f00cefd7b"},{"alg":"SHA-256","content":"6662379000c4e9b9eb24471caa1ef75d7058dfa2f51b80e4a624d0226b4dad49"}]},{"bom-ref":"25ecb9665353b628","type":"file","name":"/usr/share/zoneinfo/Europe/Vilnius","hashes":[{"alg":"SHA-1","content":"88bfe2ba142bad0856984a813ac8b93939fd6b3e"},{"alg":"SHA-256","content":"505cd15f7a2b09307c77d23397124fcb9794036a013ee0aed54265fb60fb0b75"}]},{"bom-ref":"95f56a5da5dc4840","type":"file","name":"/usr/share/zoneinfo/Europe/Volgograd","hashes":[{"alg":"SHA-1","content":"a4deb32b25919c4fbeec94d043abbdcc27b45bd6"},{"alg":"SHA-256","content":"46016fb7b9b367e4ed20a2fd0551e6a0d64b21e2c8ba20dd5de635d20dbfbe4b"}]},{"bom-ref":"58d5762dd97977c7","type":"file","name":"/usr/share/zoneinfo/Europe/Warsaw","hashes":[{"alg":"SHA-1","content":"011e06118f3e209794b175332ffb109e2583e4f7"},{"alg":"SHA-256","content":"4e22c33db79517472480b54491a49e0da299f3072d7490ce97f1c4fd6779acab"}]},{"bom-ref":"71dff6f8e411a0de","type":"file","name":"/usr/share/zoneinfo/Europe/Zagreb","hashes":[{"alg":"SHA-1","content":"e39288f28df39d863141dbc771b897663d5bba0c"},{"alg":"SHA-256","content":"799e8a8826651db19a97b6231c4aca1813391e942ddaf289ceefcb1f868e620d"}]},{"bom-ref":"a63a8ccdacbd6354","type":"file","name":"/usr/share/zoneinfo/Europe/Zurich","hashes":[{"alg":"SHA-1","content":"782d7d6812933a263ebfff012a0120d480071b1b"},{"alg":"SHA-256","content":"2b9418ed48e3d9551c84a4786e185bd2181d009866c040fbd729170d038629ef"}]},{"bom-ref":"0f4f2eefafedc57e","type":"file","name":"/usr/share/zoneinfo/Factory","hashes":[{"alg":"SHA-1","content":"d970812ef3dca71b59cc3dab08ba3391d4dd1418"},{"alg":"SHA-256","content":"6851652b1f771d7a09a05e124ae4e50fc719b4903e9dee682b301ae9e5f65789"}]},{"bom-ref":"69cfd96e8c656ec7","type":"file","name":"/usr/share/zoneinfo/HST","hashes":[{"alg":"SHA-1","content":"dd19fb47754132dd60feee8d83b57868b00d21b7"},{"alg":"SHA-256","content":"d589029dcbe02fd6790a6528e1593c55b426800ed9010d0fb44dfb8f5c8e962f"}]},{"bom-ref":"31cfa970e4d40b2a","type":"file","name":"/usr/share/zoneinfo/Indian/Antananarivo","hashes":[{"alg":"SHA-1","content":"0bb320226cc29e4a4698db1346d6989367f1fd44"},{"alg":"SHA-256","content":"7c045fb862767cb86ae329a1a808dbfb8d04910550be71a4fcf5ebe5e5824c99"}]},{"bom-ref":"c17a5e0a4aaa51c1","type":"file","name":"/usr/share/zoneinfo/Indian/Chagos","hashes":[{"alg":"SHA-1","content":"e56a740e0b4703426b63bf2ea71650a2ae0defda"},{"alg":"SHA-256","content":"db7076ea9c302b48315bb4cfefa1a5b7263e454fe8e911864ab17dde917b4b51"}]},{"bom-ref":"c2749bba524d005b","type":"file","name":"/usr/share/zoneinfo/Indian/Christmas","hashes":[{"alg":"SHA-1","content":"f2294aecee43f52f0b3d91c4c367c78bba49cca2"},{"alg":"SHA-256","content":"2782345835ff2d8009c6cc76bd4d0477114940a444fab44bd54bcd42fd3da42b"}]},{"bom-ref":"b3df1017b6781581","type":"file","name":"/usr/share/zoneinfo/Indian/Cocos","hashes":[{"alg":"SHA-1","content":"60cdb758d55ae111094106ccb19e262460b4b99f"},{"alg":"SHA-256","content":"3d7fa4f09a6085a8e3be1963b418d6a336a2bbd361512a557a8002cb6700c4df"}]},{"bom-ref":"6030a1c78df7aa19","type":"file","name":"/usr/share/zoneinfo/Indian/Comoro","hashes":[{"alg":"SHA-1","content":"f718ec27068898d7f08b5ce37dcaf8cb04667f0c"},{"alg":"SHA-256","content":"4f2dc7f436427a68c992f877d9c331baffef0f65023fd9bca4c0dd697e88ff70"}]},{"bom-ref":"9cdd3f592e244453","type":"file","name":"/usr/share/zoneinfo/Indian/Kerguelen","hashes":[{"alg":"SHA-1","content":"4fbb6ab4175a34358b8d327c190a07f73a97427b"},{"alg":"SHA-256","content":"a08bdde9b99014c2d479fa019f87357d04ce01ac0672b3dc9a07b68d4ec1b18a"}]},{"bom-ref":"61ec5296098d3616","type":"file","name":"/usr/share/zoneinfo/Indian/Mahe","hashes":[{"alg":"SHA-1","content":"90b660705982b78b56d30eac6bd1f31eb7563786"},{"alg":"SHA-256","content":"64d5e36a82ffa3ae7bdb15e0b204a66dde43fd291a09a6b2a25a523758def36c"}]},{"bom-ref":"67b4b15e7593de74","type":"file","name":"/usr/share/zoneinfo/Indian/Maldives","hashes":[{"alg":"SHA-1","content":"a77b20e17ce1c1f9c4767d1ddf03a67b0312ce6c"},{"alg":"SHA-256","content":"7544016eb9a8077a1d5ac32ddcad58527078e3b03a9e45b7691d5a1f374b17b3"}]},{"bom-ref":"1a341e8e448a631b","type":"file","name":"/usr/share/zoneinfo/Indian/Mauritius","hashes":[{"alg":"SHA-1","content":"1c264edb46f9058fb482a727ec95bb67807ec804"},{"alg":"SHA-256","content":"93abd651571f537812d4ad767bf68cc3a05e49d32f74bc822510802fb083d20a"}]},{"bom-ref":"d9f504276a98e468","type":"file","name":"/usr/share/zoneinfo/Indian/Mayotte","hashes":[{"alg":"SHA-1","content":"0fd6b7080df4ff3f3984e3d3195c12370e7ec3f1"},{"alg":"SHA-256","content":"ab52952d2b74e897e330f67b329a0a4c7d34e9e585cce1ada8a10cbd4d11523f"}]},{"bom-ref":"f6b1d42d014b1a13","type":"file","name":"/usr/share/zoneinfo/Indian/Reunion","hashes":[{"alg":"SHA-1","content":"0dddd804940bce94439fc229340bd41f9666ef37"},{"alg":"SHA-256","content":"9479d2561ec2602b83044338758b160e4d34e81480ce79023f18e24ed2ff5a22"}]},{"bom-ref":"97bd1dc2a7568e5e","type":"file","name":"/usr/share/zoneinfo/MET","hashes":[{"alg":"SHA-1","content":"b61547b7d3527b7c4197d9abc67f235fb84ca74c"},{"alg":"SHA-256","content":"8b708a4ae3f837f3c08fba3e09b93cccf11d16cd0259604201f8362570f1e55f"}]},{"bom-ref":"810756dce433ae7d","type":"file","name":"/usr/share/zoneinfo/MST","hashes":[{"alg":"SHA-1","content":"08b1a2c5f0353ea65d0b7a721f4348a6d9532939"},{"alg":"SHA-256","content":"e88430bed4f5d81cf5a538aa16ea15c4d63ee15892ed9ad81e8e673d6c3328fc"}]},{"bom-ref":"78364945002bc12d","type":"file","name":"/usr/share/zoneinfo/MST7MDT","hashes":[{"alg":"SHA-1","content":"1d52486562742dcb8b2ef09f17106406763d3dd3"},{"alg":"SHA-256","content":"f75d04937d852a84b265663f1f5f551da56fa9bf89b2f9d64ce387be1acab04d"}]},{"bom-ref":"287afa1bce16783c","type":"file","name":"/usr/share/zoneinfo/PST8PDT","hashes":[{"alg":"SHA-1","content":"7cafd1b0c1a2c0e3be2e8205b87e20b4b3c384f4"},{"alg":"SHA-256","content":"43b4c22e413af5aea0ee63e83c092a860fb4752b728800b48d594cef6286fd1f"}]},{"bom-ref":"e69b1d7d10f86ad8","type":"file","name":"/usr/share/zoneinfo/Pacific/Apia","hashes":[{"alg":"SHA-1","content":"442116a1776e38b80a519df388e5e3e992081f74"},{"alg":"SHA-256","content":"726e92e83d15747b1da8b264ba95091faa4bca76a8e50970a4c99123d9b9647e"}]},{"bom-ref":"806ff704305bbeef","type":"file","name":"/usr/share/zoneinfo/Pacific/Auckland","hashes":[{"alg":"SHA-1","content":"78d4d3a481c49ab7ff31722bced30e1c31e8bc98"},{"alg":"SHA-256","content":"8000e3a323e8fd0212414e9426b020707a771c368ca0e151747f9ddb7b814b27"}]},{"bom-ref":"c5d06461d28bcd45","type":"file","name":"/usr/share/zoneinfo/Pacific/Bougainville","hashes":[{"alg":"SHA-1","content":"4438f6699a844ec19aabc63f4ea9df91e1714ffb"},{"alg":"SHA-256","content":"64a0dafd2ff68129663968b35750eac47df06c4e7cadf2b5bca64766aaebb632"}]},{"bom-ref":"154b64614b9b5dea","type":"file","name":"/usr/share/zoneinfo/Pacific/Chatham","hashes":[{"alg":"SHA-1","content":"cb54cbb65da9481265fbb1005f8860efa5170042"},{"alg":"SHA-256","content":"96456a692175596a6ffc1d8afa4dae269dac7ad4552ba5db8ec437f200c65448"}]},{"bom-ref":"13af34cfdcb08b79","type":"file","name":"/usr/share/zoneinfo/Pacific/Chuuk","hashes":[{"alg":"SHA-1","content":"84bd517076992c1ab829d16577327e8c1873fc28"},{"alg":"SHA-256","content":"e886032958ae4430bf455c750093b16b35444fa719b5dbff2c513ac5bb4622d2"}]},{"bom-ref":"a8d8c654596beedc","type":"file","name":"/usr/share/zoneinfo/Pacific/Easter","hashes":[{"alg":"SHA-1","content":"17b3f0bf160601c93bdda3e7a0b834ecc1e06f20"},{"alg":"SHA-256","content":"64eefdb1ed60766dd954d0fdaf98b5162ad501313612ce55f61fdd506b0788d3"}]},{"bom-ref":"bfaa1ab806e8f534","type":"file","name":"/usr/share/zoneinfo/Pacific/Efate","hashes":[{"alg":"SHA-1","content":"dfcdfadd0146e60fdfa6c9a457f4fd94c062fb1a"},{"alg":"SHA-256","content":"a46e0d31578cde10494d99d99aa78bab3dd0e680a08135b81cef91f457bddba0"}]},{"bom-ref":"b566804086b9b5d4","type":"file","name":"/usr/share/zoneinfo/Pacific/Fakaofo","hashes":[{"alg":"SHA-1","content":"4ae0c959818fd9aad8518baa00dab9172c77f1d7"},{"alg":"SHA-256","content":"828c3e4a0139af973c27f020e67bc9e5250f0e0eb21fca6d87f6be40b0dc3eff"}]},{"bom-ref":"ea66bf60930c11a0","type":"file","name":"/usr/share/zoneinfo/Pacific/Fiji","hashes":[{"alg":"SHA-1","content":"3c657bce2b4fd4ebd6fbf6e435eac77d0704d3a0"},{"alg":"SHA-256","content":"c955305c2fc9c0bc9f929adf08d4e7580add30ba925c600e7a479ee37b191a23"}]},{"bom-ref":"e2f583af7e6f84c6","type":"file","name":"/usr/share/zoneinfo/Pacific/Funafuti","hashes":[{"alg":"SHA-1","content":"5c57644a1b8ea20a4f274b1f0653651614b10f0d"},{"alg":"SHA-256","content":"3fe5d8c25590a56bd2dd0fd36057b7ec1ae0c4a272e6d83b3c71103420c6bf95"}]},{"bom-ref":"f8f7748bf2dcabf2","type":"file","name":"/usr/share/zoneinfo/Pacific/Galapagos","hashes":[{"alg":"SHA-1","content":"e4dac5e58655145a568ed53ebe3c2acf5f4a3724"},{"alg":"SHA-256","content":"31db650be7dfa7cade202cc3c6c43cb5632c4e4ab965c37e8f73b2ca18e8915f"}]},{"bom-ref":"562415289e31be0d","type":"file","name":"/usr/share/zoneinfo/Pacific/Gambier","hashes":[{"alg":"SHA-1","content":"1fb4054e9a560e58b8e482bc29621d1e88201a75"},{"alg":"SHA-256","content":"cfa79817cb2cccb8e47e9aa65a76c1040501fa26da4799e874a68061bbd739ed"}]},{"bom-ref":"530b2802a6c435c1","type":"file","name":"/usr/share/zoneinfo/Pacific/Guadalcanal","hashes":[{"alg":"SHA-1","content":"5011d0291e183a54b67e5cffba2d54278478ebe5"},{"alg":"SHA-256","content":"e865fe5e9c5c0b203ae2a50c77124c14cab8b0f93466385ec6a19baf2cdf8231"}]},{"bom-ref":"be001244f30e8776","type":"file","name":"/usr/share/zoneinfo/Pacific/Guam","hashes":[{"alg":"SHA-1","content":"e89887209cf2ea7f4223ca7298e9377b233eaba6"},{"alg":"SHA-256","content":"131f739e67faacd7c6cdeea036964908caf54d3e2b925d929eb85e72b749b9f2"}]},{"bom-ref":"2e2e85c1e8349435","type":"file","name":"/usr/share/zoneinfo/Pacific/Honolulu","hashes":[{"alg":"SHA-1","content":"5d5313bee3a467f7b5311b263c7d38b52f182164"},{"alg":"SHA-256","content":"7f03d1bf5264e7ab023a2ef9b997ddfc8cb6936692407c770762b9c549523f33"}]},{"bom-ref":"7876aa1a4c773de5","type":"file","name":"/usr/share/zoneinfo/Pacific/Kanton","hashes":[{"alg":"SHA-1","content":"ae7f372f20b1ed3a9bbc2eeabd3a67156f9e65f4"},{"alg":"SHA-256","content":"52f13b7d5b79bc64bb968297d7489b84d8a596288dab0bd001757d3518588603"}]},{"bom-ref":"732e128b33fd7cd3","type":"file","name":"/usr/share/zoneinfo/Pacific/Kiritimati","hashes":[{"alg":"SHA-1","content":"37395a0b6f3d7510d03c13e1a0a92b399f7b303c"},{"alg":"SHA-256","content":"5474778aec22bf7b71eb95ad8ad5470a840483754977cd76559e5d8ee4b25317"}]},{"bom-ref":"4596a7f983ab1a60","type":"file","name":"/usr/share/zoneinfo/Pacific/Kosrae","hashes":[{"alg":"SHA-1","content":"59dabc00195b0e9a26c1304e866284e7c9963d09"},{"alg":"SHA-256","content":"566e40288e8dbee612cf9f2cf3ddb658d2225a8a8f722c7624e24e8b1d669525"}]},{"bom-ref":"4bddaa0eed946d99","type":"file","name":"/usr/share/zoneinfo/Pacific/Kwajalein","hashes":[{"alg":"SHA-1","content":"6c90cce9681748e9c5c59ba8a9070c1425a71f79"},{"alg":"SHA-256","content":"2f89c7deac6fe4404a551c58b7aedbf487d97c1ce0e4a264d7d8aeef1de804c9"}]},{"bom-ref":"ff981e261b548c94","type":"file","name":"/usr/share/zoneinfo/Pacific/Majuro","hashes":[{"alg":"SHA-1","content":"61b625183dd76cf8e734ca878228cf1c64a7ee95"},{"alg":"SHA-256","content":"0f0aa1ee05e8cfb0eec2ed67ed717cc848e133850b12ce362d2432cbb17eab34"}]},{"bom-ref":"163455ca85d0bb36","type":"file","name":"/usr/share/zoneinfo/Pacific/Marquesas","hashes":[{"alg":"SHA-1","content":"57ac5495306a7ca1ce93df12ef67956ed2d81c44"},{"alg":"SHA-256","content":"bb3b2356896eb46457a7f1519ef5e85340290c46f865a628cffafad03ee3b9f8"}]},{"bom-ref":"c538fe3a190adcc3","type":"file","name":"/usr/share/zoneinfo/Pacific/Midway","hashes":[{"alg":"SHA-1","content":"41fe30afb68b98e336f5fe43086ab7fb274fa5b0"},{"alg":"SHA-256","content":"9b903c517a790a878e17f41acd44f8782af3963a4673ae296d93ab906494cad9"}]},{"bom-ref":"e2b5e88ee8349344","type":"file","name":"/usr/share/zoneinfo/Pacific/Nauru","hashes":[{"alg":"SHA-1","content":"58548fa30aafa75c04f88b266404875a11a2c6f0"},{"alg":"SHA-256","content":"a06c68718b2ab2c67f11e4077f77143f9720d2ab6acf1d41ce81235568c4ffb8"}]},{"bom-ref":"b58e5fc7f90c2a9c","type":"file","name":"/usr/share/zoneinfo/Pacific/Niue","hashes":[{"alg":"SHA-1","content":"d65969431f77c6ed51c69499305c8bacad1e8ba6"},{"alg":"SHA-256","content":"29cd01460b2eee0d904d1f5edfb0eea91a35b140960c5328c00438c0ee98350d"}]},{"bom-ref":"cf23acb07458af0f","type":"file","name":"/usr/share/zoneinfo/Pacific/Norfolk","hashes":[{"alg":"SHA-1","content":"0f70543c0407a341ec68b97c13354ad6bc5f5000"},{"alg":"SHA-256","content":"09d11733d48a602f569fb68cc43dac5798bccc4f3c350a36e59fcbf3be09b612"}]},{"bom-ref":"07fd459663ed63f5","type":"file","name":"/usr/share/zoneinfo/Pacific/Noumea","hashes":[{"alg":"SHA-1","content":"d8e75639c5dbd5aacc617f37e2d5003747a8a2e7"},{"alg":"SHA-256","content":"1526a7a4038213b58741e8a8a78404aca57d642dd3ceed86c641fcfad217b076"}]},{"bom-ref":"93ca0e166b59b978","type":"file","name":"/usr/share/zoneinfo/Pacific/Pago_Pago","hashes":[{"alg":"SHA-1","content":"4c388c7f9a7700517fc6577943f3efe3bdddd3eb"},{"alg":"SHA-256","content":"7c262b62985863aad47f13b0ef5db2e5cc917b5d38002de9a2ea83ddb0883458"}]},{"bom-ref":"37466a32c248fd9b","type":"file","name":"/usr/share/zoneinfo/Pacific/Palau","hashes":[{"alg":"SHA-1","content":"5d7598739759a6bc5a4907695beebb6c41a8d045"},{"alg":"SHA-256","content":"0915bffcc7173e539ac68d92f641cc1da05d8efeeee7d65613062e242a27ce64"}]},{"bom-ref":"28f20bb0d4ce6c3b","type":"file","name":"/usr/share/zoneinfo/Pacific/Pitcairn","hashes":[{"alg":"SHA-1","content":"e650a33fa02e1507b3b1720fa483a3a505784d67"},{"alg":"SHA-256","content":"3bae4477514e085ff4ac48e960f02ab83c2d005de1c7224d8ae8e0a60655d247"}]},{"bom-ref":"e7deb4fedab0289e","type":"file","name":"/usr/share/zoneinfo/Pacific/Pohnpei","hashes":[{"alg":"SHA-1","content":"f5e2353d6f1802a3053770b341bcff228162896a"},{"alg":"SHA-256","content":"62a5eb2b08e1527c56c95e8f160d4bebfceef3831f3d6f36772a5fd12ee91ed4"}]},{"bom-ref":"a3f748fdb00f17e8","type":"file","name":"/usr/share/zoneinfo/Pacific/Port_Moresby","hashes":[{"alg":"SHA-1","content":"65f9954328a5fda173ff0ce420428d024a7d32c3"},{"alg":"SHA-256","content":"7a2fd78e68910cb87e454f78bafcfd0822084451f5af45fb58bfac07ee8317ad"}]},{"bom-ref":"0383e7fddc38c826","type":"file","name":"/usr/share/zoneinfo/Pacific/Rarotonga","hashes":[{"alg":"SHA-1","content":"dbdac5a429cf392f51c37a685c51690e4ff97263"},{"alg":"SHA-256","content":"deeaf48e2050a94db457228c2376d27c0f8705a43e1e18c4953aac1d69359227"}]},{"bom-ref":"a7b0b9f2b745dc3f","type":"file","name":"/usr/share/zoneinfo/Pacific/Saipan","hashes":[{"alg":"SHA-1","content":"a17a9f10a36680f61222a8545e4d69d0c2326e43"},{"alg":"SHA-256","content":"f1d685991ea1f04d186f9c9920b6d5905220348b5291a34be8be71f4aa717774"}]},{"bom-ref":"497f3477070c5714","type":"file","name":"/usr/share/zoneinfo/Pacific/Tahiti","hashes":[{"alg":"SHA-1","content":"c38a00fdc386eabc2c267e49cf2b84f7f5b5e7ba"},{"alg":"SHA-256","content":"f62a335d11580e104e2e28e60e4da6452e0c6fe2d7596d6eee7efdd2304d2b13"}]},{"bom-ref":"ac7e10efa005e511","type":"file","name":"/usr/share/zoneinfo/Pacific/Tarawa","hashes":[{"alg":"SHA-1","content":"cb335dbaaa6de98cf1f54d4a9e665c21e2cd4088"},{"alg":"SHA-256","content":"bd3e94c56eca786a6d761f34163f404804c698bc7c59a8badf494c2f89b083cd"}]},{"bom-ref":"8a9cf037b6d39679","type":"file","name":"/usr/share/zoneinfo/Pacific/Tongatapu","hashes":[{"alg":"SHA-1","content":"2948107fca9a51b432da408630a8507d5c6a1a59"},{"alg":"SHA-256","content":"6f44db6da6015031243c8a5c4be12720a099e4a4a0d8734e188649f4f6bc4c42"}]},{"bom-ref":"2247a6ce2d2d373b","type":"file","name":"/usr/share/zoneinfo/Pacific/Wake","hashes":[{"alg":"SHA-1","content":"a21b2f44f0648e9190488f32b4a388dda078d824"},{"alg":"SHA-256","content":"75327195d81c69dfa41ab383c28e1c0071914ac4be2b77e3799eb65845219859"}]},{"bom-ref":"c41e91a1666444a6","type":"file","name":"/usr/share/zoneinfo/Pacific/Wallis","hashes":[{"alg":"SHA-1","content":"c13209b5e4aaa4182475b08c01a5665264d3f7e2"},{"alg":"SHA-256","content":"080970d47e60904479964bed98763ea69a062f784d998c5f31a5d0a48d1f4ce1"}]},{"bom-ref":"1e01de6fb0d54a78","type":"file","name":"/usr/share/zoneinfo/WET","hashes":[{"alg":"SHA-1","content":"515d44469e73a5f3706413becbb22800fc3a8528"},{"alg":"SHA-256","content":"49cd25d3711f56cfda222d7b2382b2649164c220076ade418298eeb850e1810d"}]},{"bom-ref":"9eac2e3f31a76dae","type":"file","name":"/usr/share/zoneinfo/iso3166.tab","hashes":[{"alg":"SHA-1","content":"8f7821bdaf1b0eaee43f7807f84323b14f096846"},{"alg":"SHA-256","content":"a01a5d158f31d46ad8e6f8cc2a06c641810682a9397d460320f68d5421b65e71"}]},{"bom-ref":"118a633e45af315a","type":"file","name":"/usr/share/zoneinfo/leap-seconds.list","hashes":[{"alg":"SHA-1","content":"b55137daf0f9248b7f13894a6864ec4edff3d9a3"},{"alg":"SHA-256","content":"0bd731802f83a7ffbb3a7cd17f87af670032e16ad71b14747b057ca655277c25"}]},{"bom-ref":"f1c3d3da2c34e2f3","type":"file","name":"/usr/share/zoneinfo/leapseconds","hashes":[{"alg":"SHA-1","content":"35a21c8d060380dc1d63504488867bdd3dfbc7ec"},{"alg":"SHA-256","content":"816033c11b84465a03e800c5e55ead515dba53fa159b9c61da7602ea357060e8"}]},{"bom-ref":"683d220e2b606a76","type":"file","name":"/usr/share/zoneinfo/right/Africa/Abidjan","hashes":[{"alg":"SHA-1","content":"701913e83c07d3f25a355c5a0c88efa7400ebb2b"},{"alg":"SHA-256","content":"510aff425f7d2565b2325c4fb4ee1aa98d6a2c10b79d81e36dd3fea9a9773d10"}]},{"bom-ref":"ee734773a59228f1","type":"file","name":"/usr/share/zoneinfo/right/Africa/Accra","hashes":[{"alg":"SHA-1","content":"755b463c144156d2f1736dd186e9171f61cabb41"},{"alg":"SHA-256","content":"87550d4a25f4097f15165265f49523b2201841bd2fe395536b902dd06f38560d"}]},{"bom-ref":"87ee637428944335","type":"file","name":"/usr/share/zoneinfo/right/Africa/Addis_Ababa","hashes":[{"alg":"SHA-1","content":"433dd542c9d85957fe937d157b08fcd38f59ba88"},{"alg":"SHA-256","content":"79221d6518663607828744e1f1d59a26951e69408561cae89cd1b2a814fdaa90"}]},{"bom-ref":"1e0d3b41f8288ecd","type":"file","name":"/usr/share/zoneinfo/right/Africa/Algiers","hashes":[{"alg":"SHA-1","content":"7041e274735f4c115f8c4e2e811b3d591495940a"},{"alg":"SHA-256","content":"c7ec09561ab27a19d3c137ca54d9b26a1f64cd8d6539578795cd719523df2dd0"}]},{"bom-ref":"32c2c25a05352ddc","type":"file","name":"/usr/share/zoneinfo/right/Africa/Asmara","hashes":[{"alg":"SHA-1","content":"f34b6a44aa5f87e3570bc4789cdbb89735324c46"},{"alg":"SHA-256","content":"94abb964d6a2c8e90703ecf6006674e37f4e372ce5efa1dea25122e69c63452e"}]},{"bom-ref":"8150dc5078fb58ce","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bamako","hashes":[{"alg":"SHA-1","content":"e12862eb967e23b98e449ae98978f70380bb8d0e"},{"alg":"SHA-256","content":"b0d78d3cf068d522c8ec3837b145e7a430f47879caa575b024fe1c7eca1ea329"}]},{"bom-ref":"9064edbacd04fd52","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bangui","hashes":[{"alg":"SHA-1","content":"f979f51b995931093d5f98910eed4fcd2ff5ca8f"},{"alg":"SHA-256","content":"fcc904050b2581f63fa4f4d31b429ba27ee390e105958904b1800e3914f76ebf"}]},{"bom-ref":"affaf769d2ad6693","type":"file","name":"/usr/share/zoneinfo/right/Africa/Banjul","hashes":[{"alg":"SHA-1","content":"4a2a4924773254acec9bafa44f427115e8ec2b71"},{"alg":"SHA-256","content":"88ee390e2b12a14f634a604a98a5cf9a95c25986d30b00c5bce0ee4f57516965"}]},{"bom-ref":"869e6e121962f71b","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bissau","hashes":[{"alg":"SHA-1","content":"99039608291ac21a702158d4151dc9f52669a37a"},{"alg":"SHA-256","content":"a5cf42c2c4410eb967e7a148fe6a6c39b5d13dcff990439e421a944dea8ac958"}]},{"bom-ref":"c14c77e923061a3f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Blantyre","hashes":[{"alg":"SHA-1","content":"3ebca1edfcab04da4335916836ea2e31713b60d1"},{"alg":"SHA-256","content":"5d3f27a574c59e6ae7edcbe2fa8571c1f9240464af10e865d23efb6c25b53621"}]},{"bom-ref":"c9299f6fdd08c9fe","type":"file","name":"/usr/share/zoneinfo/right/Africa/Brazzaville","hashes":[{"alg":"SHA-1","content":"031eca81e60c9b198621cfd96b3b3bc984e45eb9"},{"alg":"SHA-256","content":"bc614060d73416d6d09caf7b3740b0eb89088237cbc0e242362d38f339f3566d"}]},{"bom-ref":"97c330d562114c0f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bujumbura","hashes":[{"alg":"SHA-1","content":"6a2fdadfce851e3e8005a0ffcb6748d380a84d61"},{"alg":"SHA-256","content":"5c8a28cbb389b5bfcfc60e1315158723d38021319c0d110b4a49efa34879b06d"}]},{"bom-ref":"5fac3088df746f8f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Cairo","hashes":[{"alg":"SHA-1","content":"16961115ebbd7dfcb4f7dd7d4661753d2ad4a068"},{"alg":"SHA-256","content":"89d831fe4c1856fa521ddf2b974214452773b8a70ab850ac5456d7d60d18d705"}]},{"bom-ref":"40d56a660d7df53f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Casablanca","hashes":[{"alg":"SHA-1","content":"0e78925507f1ad3d2c3940682d3125f9cac406f4"},{"alg":"SHA-256","content":"8a7cfd1f75e891ad40f5e7e7c8ee150bee239d9739c16e2d4679083686ecbc6b"}]},{"bom-ref":"a2c9655ad8fa68f0","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ceuta","hashes":[{"alg":"SHA-1","content":"be4020058bb686d180082b530b8c4ef5d219f8ca"},{"alg":"SHA-256","content":"fc67066886856fe154887cef378e4f54ebe7928725a90691555d25bcbf127d1f"}]},{"bom-ref":"d4f64318c8c31fea","type":"file","name":"/usr/share/zoneinfo/right/Africa/Conakry","hashes":[{"alg":"SHA-1","content":"5cfbd1972312373553ddc14db34df1e880272805"},{"alg":"SHA-256","content":"9e4b06c7193dec770df9db5e9c2237b964fdc8bd37ac6a27f82d31f76dd5c41e"}]},{"bom-ref":"d1784af5d5d37bf0","type":"file","name":"/usr/share/zoneinfo/right/Africa/Dakar","hashes":[{"alg":"SHA-1","content":"46b94fec4b33a9d16f0fdf39f88b0f9fc127f2e4"},{"alg":"SHA-256","content":"c0db080c7a34e2a7f95c27c36bcc7b79dc953d2d58ec9a1e3cc6716fbf67a772"}]},{"bom-ref":"4fcc713d42e04658","type":"file","name":"/usr/share/zoneinfo/right/Africa/Dar_es_Salaam","hashes":[{"alg":"SHA-1","content":"10e629cfe8781112b1a05194d17dd31db31af166"},{"alg":"SHA-256","content":"e41ff03371be68d28c8b6d6f59a4f63097b61c886e30610d33a2e5708ee0318b"}]},{"bom-ref":"b73356bd8ec271be","type":"file","name":"/usr/share/zoneinfo/right/Africa/Djibouti","hashes":[{"alg":"SHA-1","content":"7aff0261b15bf33d298d64f7de6403434a85965b"},{"alg":"SHA-256","content":"3cd0bf0435140ccdeb52e5be5c5316085fc201b1c9cbc2aae49a78e96788d68c"}]},{"bom-ref":"cd97fab766dc2ec5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Douala","hashes":[{"alg":"SHA-1","content":"21d364afbd7fd8e22254674fa1ac88a780234712"},{"alg":"SHA-256","content":"6185664bc6763acd02a418e26d8527f8970c98d15cff8b52d7352e443325952b"}]},{"bom-ref":"caca12e50471e00e","type":"file","name":"/usr/share/zoneinfo/right/Africa/El_Aaiun","hashes":[{"alg":"SHA-1","content":"17cd7754f3b358aee14a475058f2858aa9abed1f"},{"alg":"SHA-256","content":"a60908b0d2c85d6fed920a5bab7a077f027dbd22ad10acf59d0b8ab5c5990fef"}]},{"bom-ref":"79e734f4cb0cae07","type":"file","name":"/usr/share/zoneinfo/right/Africa/Freetown","hashes":[{"alg":"SHA-1","content":"1b105fdfefa3fda801e2714e34f501df8e7c3795"},{"alg":"SHA-256","content":"5363ea27697bbd228a476ecf7ef5413303c957eac6ce5cebd9e307c486355baf"}]},{"bom-ref":"99cfd22d97eeeefc","type":"file","name":"/usr/share/zoneinfo/right/Africa/Gaborone","hashes":[{"alg":"SHA-1","content":"c2376a60d71f3d48f0d25627968a456b9b908610"},{"alg":"SHA-256","content":"98cd6066b0f4985f83db7e6c825dc71c06c109758edf989581c42c97711b5994"}]},{"bom-ref":"253203e88ef3d7bf","type":"file","name":"/usr/share/zoneinfo/right/Africa/Harare","hashes":[{"alg":"SHA-1","content":"8164b53712ac0e6cd749428c1793261afeb67d6d"},{"alg":"SHA-256","content":"6212eeae47088e92c89f6000347e3cf55df5050a91cfb5c0a18af05ef4b65eee"}]},{"bom-ref":"6e32a53757c40f48","type":"file","name":"/usr/share/zoneinfo/right/Africa/Johannesburg","hashes":[{"alg":"SHA-1","content":"6f3163c255bc4bb04cc897ec159b776a78d946de"},{"alg":"SHA-256","content":"131de038c40c06b3ac9bc68d3c5d4b63c57eec9a5960c4089550be4b0049f07c"}]},{"bom-ref":"50752191bbd08ac5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Juba","hashes":[{"alg":"SHA-1","content":"55994c1a837b7648b0b852a858c95a3790c07a0d"},{"alg":"SHA-256","content":"15b229ed8535d2bc4385513174d0d59dc4bee52f594d51a472ec6a927df13d11"}]},{"bom-ref":"bfbab99c2d6abad3","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kampala","hashes":[{"alg":"SHA-1","content":"861033f279bc95196bd148e8a5c51f49a5484c6d"},{"alg":"SHA-256","content":"cda5c7548c8584cd5fea0012c11bb20cea70d432fdf47966cb27615e5d2d42e4"}]},{"bom-ref":"20acdc70adb4cdd7","type":"file","name":"/usr/share/zoneinfo/right/Africa/Khartoum","hashes":[{"alg":"SHA-1","content":"5b19602d1263b6b32fd27ca7314d1584eadf7e39"},{"alg":"SHA-256","content":"cc9aa49ae8849a9f43a85edce4ed8202bdfc8b91d54f8a74ae6f9d5df3600561"}]},{"bom-ref":"36e89a4a186f2a45","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kigali","hashes":[{"alg":"SHA-1","content":"c9e334cd617f84c7ea95205d513945ef1faef50d"},{"alg":"SHA-256","content":"dad5ee37e80d6a5625767c29e52c7bb4af362c5ac05fed892ddfb24ab6aa6a91"}]},{"bom-ref":"b241a5fccd5330e6","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kinshasa","hashes":[{"alg":"SHA-1","content":"6d287259dea1d409a8b9598e7f0992d9e78da7ec"},{"alg":"SHA-256","content":"08103ac769fcc12de12ec0bf8721e6b872b16796dac9949daa8a7113ef15b85b"}]},{"bom-ref":"d1ee9513d09ffde7","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lagos","hashes":[{"alg":"SHA-1","content":"b7857cb173c474a1948e97549ad472414b244421"},{"alg":"SHA-256","content":"9a0e2006226a0f7fa22884375cb788830dd1f8bae9556c45cfeaa4e62a3105c0"}]},{"bom-ref":"66adf8487d89852c","type":"file","name":"/usr/share/zoneinfo/right/Africa/Libreville","hashes":[{"alg":"SHA-1","content":"51a1ff5407d8de953d2d1d98f5ea7bda4a2b1f2c"},{"alg":"SHA-256","content":"4dccfd2b999a5355b9bc9f003232c0a00fcd97a8dec622a3d80c1e9926a89e55"}]},{"bom-ref":"8323fbc960b5bb76","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lome","hashes":[{"alg":"SHA-1","content":"43fb43af6dd6bfc6de8cd3f6dabf8ed8286326fd"},{"alg":"SHA-256","content":"d3bfea7d89d1e7a8d2b646149c37cfcde39869c738d18842903388957db0d1a1"}]},{"bom-ref":"dba9c7b813b5def9","type":"file","name":"/usr/share/zoneinfo/right/Africa/Luanda","hashes":[{"alg":"SHA-1","content":"fa0b2ebdd152d23c97972ec1b6f6635d45781112"},{"alg":"SHA-256","content":"3139b4c754c3138acf5e5a3524135c536a561087bd45deb49a65dfcba28cb2c6"}]},{"bom-ref":"b41c5a5338fecfe0","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lubumbashi","hashes":[{"alg":"SHA-1","content":"c322300f4b3c32a4b7f8cf3e29f6f57e3d5bd3ca"},{"alg":"SHA-256","content":"09184bc5000d46702380249efa5803e48ce33031ad5d04832354bd625faa95a6"}]},{"bom-ref":"4340d1bcd8649a22","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lusaka","hashes":[{"alg":"SHA-1","content":"883da53ade9d603545364462b63b2177fb75801e"},{"alg":"SHA-256","content":"0be62ac1d30c0860b1da16103c5fdd98470c4e992e88327cd84935f320ace6f0"}]},{"bom-ref":"26f765f33a9b3ba9","type":"file","name":"/usr/share/zoneinfo/right/Africa/Malabo","hashes":[{"alg":"SHA-1","content":"b6dbe2737ffa6500ac940c7775720eb7c7a5924e"},{"alg":"SHA-256","content":"ccbc3ef5767e40e729e7c688e8d0ba9242d4108564c916553110dd7b65e550ba"}]},{"bom-ref":"28fe3b87700ef968","type":"file","name":"/usr/share/zoneinfo/right/Africa/Maputo","hashes":[{"alg":"SHA-1","content":"766c4231155014838edb742698ad6d3625624109"},{"alg":"SHA-256","content":"62b4043105f84f3d68c61a569fb5fe4105df838e0c6d26b160df43e2e8081b24"}]},{"bom-ref":"46a8a6eb61e6c3b5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Maseru","hashes":[{"alg":"SHA-1","content":"3ec3c5007eb703d08cbef2ae687b5f75fbb2e738"},{"alg":"SHA-256","content":"337465601f3040171f964a323ec46fe85a30cb8467daf2bdbee1de5fd59b493a"}]},{"bom-ref":"afbd54ee39a7e567","type":"file","name":"/usr/share/zoneinfo/right/Africa/Mbabane","hashes":[{"alg":"SHA-1","content":"de2b8c226101fbf4bb79db0b7226cb3d6a03bcdd"},{"alg":"SHA-256","content":"79ffc9ac498cc8add5728dfa7d649ecd57c070efde86e8121491de055c4c39cb"}]},{"bom-ref":"4eaafd741b902c5d","type":"file","name":"/usr/share/zoneinfo/right/Africa/Mogadishu","hashes":[{"alg":"SHA-1","content":"134368ba7cad013a4bdcd5e8a53e48fa80300d49"},{"alg":"SHA-256","content":"4617ccfab0884304cd8ab2b6581a8739f9266e6c59e6100c29dca1329630aa05"}]},{"bom-ref":"b32f2ad8682bbf82","type":"file","name":"/usr/share/zoneinfo/right/Africa/Monrovia","hashes":[{"alg":"SHA-1","content":"daff6e3b89c38fb3be7c448fcc9350ae69fb7c0a"},{"alg":"SHA-256","content":"bfeb06c24ddb7440f30853139a6a8d9ba45b67f806d463722304a737f2139384"}]},{"bom-ref":"11984ffbabdf6b65","type":"file","name":"/usr/share/zoneinfo/right/Africa/Nairobi","hashes":[{"alg":"SHA-1","content":"ef3db80c948bf3c3dc2106fe160252cd2ef3d6f8"},{"alg":"SHA-256","content":"b28510b60916733bffc90ea86d3d0bddd314520b751819c76f79d179e0a28a14"}]},{"bom-ref":"bedadbee48a588ee","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ndjamena","hashes":[{"alg":"SHA-1","content":"ef6ec5ce2e0531bc90eee6b8c0bc4eea48bde70f"},{"alg":"SHA-256","content":"46fd423314dc553adfd34d8a17cf5fabc5b0cc6c8d291a185b82ef5fcf2b1514"}]},{"bom-ref":"a390295916239dd1","type":"file","name":"/usr/share/zoneinfo/right/Africa/Niamey","hashes":[{"alg":"SHA-1","content":"645a80715a9dbe3eabb1eac6b781376b6766545a"},{"alg":"SHA-256","content":"6c2487828ca591b32bbd3b87baaefcde48d6e499c94c482ae3591bc236ef7d5d"}]},{"bom-ref":"ba1eafda38ffdafd","type":"file","name":"/usr/share/zoneinfo/right/Africa/Nouakchott","hashes":[{"alg":"SHA-1","content":"f96a0d2049d4f92660678a6e6c962e5726907ba2"},{"alg":"SHA-256","content":"5f2a40280ffec38e26ba3329dc140676db083da2f5ef60a37216fca2df239733"}]},{"bom-ref":"3456ca2d600efb20","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ouagadougou","hashes":[{"alg":"SHA-1","content":"ae1d1fa2d9d5185e1a4b9b377b60d51dc5b294fe"},{"alg":"SHA-256","content":"73519ec37189f0055642067f6aa29a08fc7793e925f789f442e61109cdb7fbde"}]},{"bom-ref":"566775468c41f238","type":"file","name":"/usr/share/zoneinfo/right/Africa/Porto-Novo","hashes":[{"alg":"SHA-1","content":"0354b086344f2b8fd91d7b08f0b81edb653575e8"},{"alg":"SHA-256","content":"65c149fe645533aeaa299ce8be1d68c0e902bdd1d47638c705a1d336f943578b"}]},{"bom-ref":"f02a3333c6b682a2","type":"file","name":"/usr/share/zoneinfo/right/Africa/Sao_Tome","hashes":[{"alg":"SHA-1","content":"bd37a60669b8c45233f85bc811bdd28bf90bd49c"},{"alg":"SHA-256","content":"5fd82fe2509f5d8364118a8bb1348aa97abd061d5d65ee5096551096a841b640"}]},{"bom-ref":"6b6ede54b9914199","type":"file","name":"/usr/share/zoneinfo/right/Africa/Tripoli","hashes":[{"alg":"SHA-1","content":"8090d4c550301289f515cea449844695f12dbb21"},{"alg":"SHA-256","content":"30419d45da3bc2ee0aa4bdf34a50a24d3b83a6dce9d311a71dca694ea080c875"}]},{"bom-ref":"39e15b0720a09226","type":"file","name":"/usr/share/zoneinfo/right/Africa/Tunis","hashes":[{"alg":"SHA-1","content":"abff5f7bf3ddfaa0a3ebfbbc39a63e2c5b7ded4a"},{"alg":"SHA-256","content":"0b3523531a582c58545c1cc4031bfffba50e10cb7457ba51e5a3fda741d3d210"}]},{"bom-ref":"99b19972b933a2ac","type":"file","name":"/usr/share/zoneinfo/right/Africa/Windhoek","hashes":[{"alg":"SHA-1","content":"50cdbccbc718e300c353345cb481748778117311"},{"alg":"SHA-256","content":"989716ba6212c957e69f6359a8c5d3cf17094c72082c386cfdf0aa80abc3d9ed"}]},{"bom-ref":"f08cc428750ddbbc","type":"file","name":"/usr/share/zoneinfo/right/America/Adak","hashes":[{"alg":"SHA-1","content":"7959f06282d7867112ab81af7154b617ac5aff38"},{"alg":"SHA-256","content":"3d2c9d6661832c37c32186cbec42339fb18ab91b45c84e52050a8396b19c48f5"}]},{"bom-ref":"9c49f59129c1959e","type":"file","name":"/usr/share/zoneinfo/right/America/Anchorage","hashes":[{"alg":"SHA-1","content":"96bf1858e3bbff87aa33402d761cfb3eab761974"},{"alg":"SHA-256","content":"a2c9b5aa5c94ea728291248034451b3662251dd9d5243e1d8862f8b444d736ce"}]},{"bom-ref":"f412fc536b41ecab","type":"file","name":"/usr/share/zoneinfo/right/America/Anguilla","hashes":[{"alg":"SHA-1","content":"d720495032afef43dbb6da60ba52a346a60f8071"},{"alg":"SHA-256","content":"b5ac5f3a9cdeb603296a6a2d541bcb0e4d61338da602dc5748b06bffc10448c1"}]},{"bom-ref":"c730a406f4569108","type":"file","name":"/usr/share/zoneinfo/right/America/Antigua","hashes":[{"alg":"SHA-1","content":"b67f86abd852b80a1ba62fa5f6aed6e2ad77e634"},{"alg":"SHA-256","content":"ec4d8f060b065d9663e4a6350bdedff256a6d5c76ebf54ae267eab02082d3423"}]},{"bom-ref":"9d5e2cf074fdb47b","type":"file","name":"/usr/share/zoneinfo/right/America/Araguaina","hashes":[{"alg":"SHA-1","content":"51a0b84715b984282aabac5dc21998d12d1dbe49"},{"alg":"SHA-256","content":"fb6a86af8f371e9216682727ee8641d105f4676d6abadb4eb369612f1224e683"}]},{"bom-ref":"0cdc9595cffd7a8c","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires","hashes":[{"alg":"SHA-1","content":"5943da30c3103a9134d88f4b49f8b804db57b06b"},{"alg":"SHA-256","content":"7156104390cc6f9fe2677dc5f91b20d270db4bbd1f1a404a39820a90ea426565"}]},{"bom-ref":"8b254dd65e35f576","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Catamarca","hashes":[{"alg":"SHA-1","content":"3c238a614d169dba89f429eb1d6bdb8459f46eaf"},{"alg":"SHA-256","content":"6c905996cdc4642e1892e22137c00080dfec0eb82ec5b6a0a987c5ef50db56cc"}]},{"bom-ref":"459c57b4090c07e8","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Cordoba","hashes":[{"alg":"SHA-1","content":"829a5eae17cfab8c30609e8a0ab3f3c4536a0c3b"},{"alg":"SHA-256","content":"1b18a48061184b0da06e3640fd9d652785332b61501edc7d26ec4dfdaed72b27"}]},{"bom-ref":"2c6d312c333a2ce8","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Jujuy","hashes":[{"alg":"SHA-1","content":"ea909ad1ac6728092232e1077909794b8266ff62"},{"alg":"SHA-256","content":"8719c9782596146e3ae6c26569bf2d1bde287e3dd1ef018d188a5686bd49c657"}]},{"bom-ref":"0e38593b4a0d06b1","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/La_Rioja","hashes":[{"alg":"SHA-1","content":"e1910e44445e964f290b9c534b97830df0b2105a"},{"alg":"SHA-256","content":"288aa07045d6e9e8287c8f975faf2b56db5a05a2466c25bcf3ab5fae76ff746b"}]},{"bom-ref":"593cc4b6a2b80ad6","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Mendoza","hashes":[{"alg":"SHA-1","content":"d1ac122f7967fc37f35a4a031ab111e5701d73d0"},{"alg":"SHA-256","content":"bd66f5d2934f0c2bad0aed5d7140bdeec82ac91113c017b9ba1649b62ad32717"}]},{"bom-ref":"360dab6427ba97de","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos","hashes":[{"alg":"SHA-1","content":"43b94ef734625563f9e0b3319e01da11bf11cd19"},{"alg":"SHA-256","content":"8dab5dc4a1fc928406bcf8e78107494cbcbf5a20663443e9f1dc8825f062dd5f"}]},{"bom-ref":"1737170fc44d16af","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Salta","hashes":[{"alg":"SHA-1","content":"26efc428eab2a5914275addcd8d1486208b4e6b4"},{"alg":"SHA-256","content":"d2d31d3e12544408a87c155739d93117f9ee131e9abbb32bc2c54e0fcaa2f4b4"}]},{"bom-ref":"80127d36a8d154b0","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/San_Juan","hashes":[{"alg":"SHA-1","content":"b9db413a76ac38629fc9e93c61d95470e718e6d2"},{"alg":"SHA-256","content":"7bd9ddfe1813944eb0aaf0b5006378d97b70ca2f76168d64f2896ed6cde0f68b"}]},{"bom-ref":"4aa90c9eb1bd01b0","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/San_Luis","hashes":[{"alg":"SHA-1","content":"49346f4d5107bb39310ab6bd078f1984a38e15c2"},{"alg":"SHA-256","content":"81fed40e2461f00a553d3253eaab174df4c41d590091b45ed2618bf429554438"}]},{"bom-ref":"7687f1c04b0d1e11","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Tucuman","hashes":[{"alg":"SHA-1","content":"bd7808cf0d961088e94e1a107541f713d39c0328"},{"alg":"SHA-256","content":"e2eef3a90bb26e77290189a7f0a255341d14e976c85f1a9d54fea7dbaacf2804"}]},{"bom-ref":"310209455144b927","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Ushuaia","hashes":[{"alg":"SHA-1","content":"a6d07dac97c439ae7490a368a191114f63aa760e"},{"alg":"SHA-256","content":"739f5b19e092ff86807f68d9a37419a8980e1e40d02a23a701f3a1b438580ae2"}]},{"bom-ref":"4800394f23d9eddc","type":"file","name":"/usr/share/zoneinfo/right/America/Aruba","hashes":[{"alg":"SHA-1","content":"d9658849c5961b6b311d3057c83e208157a213e3"},{"alg":"SHA-256","content":"8a263d80d7385220b81caf28fafea278233276c16fd802c9060d6b10c2e6f038"}]},{"bom-ref":"54f799a032205678","type":"file","name":"/usr/share/zoneinfo/right/America/Asuncion","hashes":[{"alg":"SHA-1","content":"b8924bd2daaf4b348ec4effa84923fb1522af04a"},{"alg":"SHA-256","content":"db2e05b98d8ff1baf027b0aa0aaddb3e2ace809f3b800b75c64615e79c3f551e"}]},{"bom-ref":"3a7b9d19acb16d46","type":"file","name":"/usr/share/zoneinfo/right/America/Atikokan","hashes":[{"alg":"SHA-1","content":"d417c94fe0c2a528abe2eb807f013c7c0648a2bf"},{"alg":"SHA-256","content":"70e21ea54f2299a6ebdb845946f2b7a12d852deccd3a0f36c4a1c74fed5eee16"}]},{"bom-ref":"4e9d1daafa2a7071","type":"file","name":"/usr/share/zoneinfo/right/America/Bahia","hashes":[{"alg":"SHA-1","content":"aa3de2b5a708659a7daaf8017ecb0eb6d7db9b0c"},{"alg":"SHA-256","content":"9320d1569e6ba22f4b3c42284d1ed3790c640aeaac9b0244d736d6db7ca52eb6"}]},{"bom-ref":"4dd44cdec2e51a78","type":"file","name":"/usr/share/zoneinfo/right/America/Bahia_Banderas","hashes":[{"alg":"SHA-1","content":"987f31b7c6445e5e44f12e428ac8f26d5db51371"},{"alg":"SHA-256","content":"b7e9a4d0d692f239df6016177d6abf64a9631161774b2a53e0e0e1c85c2cc05c"}]},{"bom-ref":"2c909aa58f1a5239","type":"file","name":"/usr/share/zoneinfo/right/America/Barbados","hashes":[{"alg":"SHA-1","content":"e9235c96aad0224bd213e7b9df15214a7436baaf"},{"alg":"SHA-256","content":"7a202b9e618f9aa703dcde41a80e335c903509e96389d363c3100afbe083fb00"}]},{"bom-ref":"802bc601148f518d","type":"file","name":"/usr/share/zoneinfo/right/America/Belem","hashes":[{"alg":"SHA-1","content":"ecd0b254644f26eebbe13977a7e0e4b3276d3f5e"},{"alg":"SHA-256","content":"cd9eb30cc76f3f55bf967cdcadc7708a567ab8def99c275ca25e62d3b969a9bc"}]},{"bom-ref":"f888696623d7b9b3","type":"file","name":"/usr/share/zoneinfo/right/America/Belize","hashes":[{"alg":"SHA-1","content":"47a1f8cd78b79a2dc3053bb17e879793391e56b8"},{"alg":"SHA-256","content":"321ee3bcc7f9e0b7b4bc6ac8cfd90e7a1b82d52dd925cdd2247edee94913421b"}]},{"bom-ref":"f341964f65e46878","type":"file","name":"/usr/share/zoneinfo/right/America/Blanc-Sablon","hashes":[{"alg":"SHA-1","content":"fef7fed74a7d4db46fcced0de854d92e33210bf3"},{"alg":"SHA-256","content":"68bd607c85f76f8382ea1dc800739523271a1bc798794e39d0449bbbf6cbe260"}]},{"bom-ref":"6dffe452dc3ea6cc","type":"file","name":"/usr/share/zoneinfo/right/America/Boa_Vista","hashes":[{"alg":"SHA-1","content":"23dc6fe72b50cdf578befd3c38f3cc99da94b30b"},{"alg":"SHA-256","content":"b2c3c223fef2b34a132362de820937e29b466b8a7ccaf37658a122e7aa5c1291"}]},{"bom-ref":"8d0bbf2da62e56fe","type":"file","name":"/usr/share/zoneinfo/right/America/Bogota","hashes":[{"alg":"SHA-1","content":"abc8d9dc3fb912da970e408f3bb162701e034b06"},{"alg":"SHA-256","content":"6e0fc2bc48eb6d7068c972bbdb7d09127a345e13e9b636f85f37cf452187acba"}]},{"bom-ref":"814f7fe6403c96ee","type":"file","name":"/usr/share/zoneinfo/right/America/Boise","hashes":[{"alg":"SHA-1","content":"3e9e9705bdd9426ddba765d3238c00e8c9b4ea90"},{"alg":"SHA-256","content":"9f07a1bffe602a7986727c2b7613e00b3ca5cb7c00adfde3b221cbbdc2517cc9"}]},{"bom-ref":"fab4f006131064d5","type":"file","name":"/usr/share/zoneinfo/right/America/Cambridge_Bay","hashes":[{"alg":"SHA-1","content":"aed371febe45627c8cc6aae72214b085b71d19b6"},{"alg":"SHA-256","content":"07a94b3c551802b424e2e0650bcd67d923734c3650546308608a96fc0fa2ba98"}]},{"bom-ref":"42dd94983067673a","type":"file","name":"/usr/share/zoneinfo/right/America/Campo_Grande","hashes":[{"alg":"SHA-1","content":"e0055d3ef17c4654280973aec10d1f5841d25dc8"},{"alg":"SHA-256","content":"7d2b1fc96f0165733ced4a7ea2c7efb5c55b46f3142d1beb95e511f531d42cc4"}]},{"bom-ref":"d8eda5e3669ecef7","type":"file","name":"/usr/share/zoneinfo/right/America/Cancun","hashes":[{"alg":"SHA-1","content":"ef666c6a784d39dc88a785ce68875ab985fb7787"},{"alg":"SHA-256","content":"eaa1fc39e962d042eabc2face28ddc691acc8ab20ae8f92b33ea0088b9ecab0d"}]},{"bom-ref":"abbc976522594d59","type":"file","name":"/usr/share/zoneinfo/right/America/Caracas","hashes":[{"alg":"SHA-1","content":"a9c54e7c7b708ffb00ee0587011b3afda2e57d7e"},{"alg":"SHA-256","content":"26099eb3b9690522602f5aa9e5ac12ca3848fd48733ddc2ce41f1c7fb9894e78"}]},{"bom-ref":"2e5a92591ca51c97","type":"file","name":"/usr/share/zoneinfo/right/America/Cayenne","hashes":[{"alg":"SHA-1","content":"f2cf43f4db3d1ad4bd857ec85d98d193b22b1427"},{"alg":"SHA-256","content":"b285665aeb28a9bb7cf48814bdfd2b83be428e834f96d45a7f53460cc514cd16"}]},{"bom-ref":"2200bc80ebcaee28","type":"file","name":"/usr/share/zoneinfo/right/America/Cayman","hashes":[{"alg":"SHA-1","content":"237be17edfa3066241f86cec8f1f09c1b07132ea"},{"alg":"SHA-256","content":"4e8b16f22dd794a164f494298e342d545cb8adc32a3ec3a8e932fa68e20300df"}]},{"bom-ref":"3d58f6e0dd5449fe","type":"file","name":"/usr/share/zoneinfo/right/America/Chicago","hashes":[{"alg":"SHA-1","content":"25b563c1339c6a6a18c059f5727929dffd999c5c"},{"alg":"SHA-256","content":"cb676a13de0913798398166961c63541c78bf0b446ac2c740f5b862abc3df17b"}]},{"bom-ref":"102421517eeaf70f","type":"file","name":"/usr/share/zoneinfo/right/America/Chihuahua","hashes":[{"alg":"SHA-1","content":"028cc217225a07d4bdd0eaee30ebf09d5912bc46"},{"alg":"SHA-256","content":"4e8f067a972a0b4278feb901a72c67a692b63ae8a47ec752dad6f614570dd825"}]},{"bom-ref":"387b8bd9e291a41b","type":"file","name":"/usr/share/zoneinfo/right/America/Ciudad_Juarez","hashes":[{"alg":"SHA-1","content":"46540d515a81ffae707a4008d81a589c2061b5c1"},{"alg":"SHA-256","content":"b5da80ba08bc2758884a19f9dc99690db20e6a0887b919a20dbdfae72a0bb523"}]},{"bom-ref":"cc9ac8e43534599d","type":"file","name":"/usr/share/zoneinfo/right/America/Costa_Rica","hashes":[{"alg":"SHA-1","content":"e3503f12489eef67dc1fee936fb95f9760a24cf1"},{"alg":"SHA-256","content":"b6a1aba590b48ebe8a70bd05c0d83769c293ee1eb9c82f9c3a16a78d76b8aea3"}]},{"bom-ref":"0140cc30bf0cd851","type":"file","name":"/usr/share/zoneinfo/right/America/Coyhaique","hashes":[{"alg":"SHA-1","content":"27bb70b14e4fc84d4559b71be12bea7c156579f2"},{"alg":"SHA-256","content":"52e47a440c3e7fe8b1978d6ea58011171d71020400a78f972481d23c79d4d65e"}]},{"bom-ref":"cce50bf533ca78ae","type":"file","name":"/usr/share/zoneinfo/right/America/Creston","hashes":[{"alg":"SHA-1","content":"4167ce9985af3beac0c429bdcc67e48058680825"},{"alg":"SHA-256","content":"1fcffd940a27d996177d7c0a0cbb2e5bfb72d4d8bb5d3dd1695406a25bb62a69"}]},{"bom-ref":"b8a85f902b7d939c","type":"file","name":"/usr/share/zoneinfo/right/America/Cuiaba","hashes":[{"alg":"SHA-1","content":"ac9e9d053420a8cd0d7700a3128a7287a9eaaf92"},{"alg":"SHA-256","content":"e03ced0619ee055adc7b2af08dd55ef6767eb020fa85c1ef4baa24c7defbe34f"}]},{"bom-ref":"9c2e54d1ad3d5456","type":"file","name":"/usr/share/zoneinfo/right/America/Curacao","hashes":[{"alg":"SHA-1","content":"68b3ad840ece02fc3f43b363f80c3ff9d2f5b81a"},{"alg":"SHA-256","content":"090b768907e0937458509573da296c336cfadb6be84f4e3d92fd2e3e754fd24d"}]},{"bom-ref":"a1924f298f51eb04","type":"file","name":"/usr/share/zoneinfo/right/America/Danmarkshavn","hashes":[{"alg":"SHA-1","content":"7bd507e7c0bba043cb8af9c5d49f3e7b865b092f"},{"alg":"SHA-256","content":"6d6368e23925f048f6181bddfc247ba4bbf9c6f5e248edfa80a48e14decb3bd1"}]},{"bom-ref":"c5a46c61862c979c","type":"file","name":"/usr/share/zoneinfo/right/America/Dawson","hashes":[{"alg":"SHA-1","content":"75a1914d0f35ffe3cceebf43df1c1659273a50a5"},{"alg":"SHA-256","content":"51222a73543e2736f72d6661ac65b9c52327d0d71bcef850ed96c3d86049ed50"}]},{"bom-ref":"8bef5d4762821b52","type":"file","name":"/usr/share/zoneinfo/right/America/Dawson_Creek","hashes":[{"alg":"SHA-1","content":"bce500db63730f09d248a07edbf42ce0b4cf951a"},{"alg":"SHA-256","content":"51af59f32c7aaf265b8d94a3bea7cf50278eb4ec053b89d0b95e2b55f689fae2"}]},{"bom-ref":"f376553b283602a4","type":"file","name":"/usr/share/zoneinfo/right/America/Denver","hashes":[{"alg":"SHA-1","content":"e9b3d52b9f0d9007332a9cf38ab33c76984ecfaf"},{"alg":"SHA-256","content":"6bb62df3b85caae7f8f4939d4920bb5f47ce9f33c67460fd351fe70c9a0c757f"}]},{"bom-ref":"533aea0bb46b809a","type":"file","name":"/usr/share/zoneinfo/right/America/Detroit","hashes":[{"alg":"SHA-1","content":"ea891775e348eb18f9a829294d87917fa10686f4"},{"alg":"SHA-256","content":"56d0f978af5a7d16294c831947ca1df07412530a50eead2b7e0cd69084c2bc18"}]},{"bom-ref":"1b3bb54fadd1e4a4","type":"file","name":"/usr/share/zoneinfo/right/America/Dominica","hashes":[{"alg":"SHA-1","content":"0668c5e41185fc26b65909626b34d603410aae92"},{"alg":"SHA-256","content":"8e11f8708e3615836565f49c75565c89fbfde76e6b9df256c582fc414357c755"}]},{"bom-ref":"5b3d4090b3397639","type":"file","name":"/usr/share/zoneinfo/right/America/Edmonton","hashes":[{"alg":"SHA-1","content":"89194e1dad8cbcd38918b4706740750e24cf5d5f"},{"alg":"SHA-256","content":"528d394ca8c879522b8bd4a919a2cabf2af567947973149ba8717d8077ead319"}]},{"bom-ref":"7cb0a11a27c4dc66","type":"file","name":"/usr/share/zoneinfo/right/America/Eirunepe","hashes":[{"alg":"SHA-1","content":"71fd8e89283fd5912ee621045767e9d39ca29d08"},{"alg":"SHA-256","content":"e148b383177420331e258f94fbc265cc75c4ab1dccd320dd2d5e354529777d7a"}]},{"bom-ref":"1b3505dddb4d8acf","type":"file","name":"/usr/share/zoneinfo/right/America/El_Salvador","hashes":[{"alg":"SHA-1","content":"d0c66fb8cbc8039f9d3d3f1937cd8db77afaad27"},{"alg":"SHA-256","content":"d2c33b09f9f4289d027ec4bb4694490521cdae7f112820197955fa5c37ec5d7b"}]},{"bom-ref":"c34068ff7be742f9","type":"file","name":"/usr/share/zoneinfo/right/America/Fort_Nelson","hashes":[{"alg":"SHA-1","content":"9645d88a4cdcfceddfc000468910dff868fbff7b"},{"alg":"SHA-256","content":"18872ba877025b25436b2316c089fd6b79e45eb9a356cf84908bc267097a8a08"}]},{"bom-ref":"4dad03579c22622e","type":"file","name":"/usr/share/zoneinfo/right/America/Fortaleza","hashes":[{"alg":"SHA-1","content":"e448744a3162fdd6d18775abdfe6deb1af30e9dc"},{"alg":"SHA-256","content":"8d17987950aee741ca6d2667ae925adece79dd4786665a39e8b3ec8ce6ecc41e"}]},{"bom-ref":"d3859f791b1ee401","type":"file","name":"/usr/share/zoneinfo/right/America/Glace_Bay","hashes":[{"alg":"SHA-1","content":"9fa9ece5a6e257003f5d88f7c48151e433209916"},{"alg":"SHA-256","content":"c33810a988030e8cc29edcb24cc1f8df92fd7c787731dcf79c7640eb0597aaf1"}]},{"bom-ref":"28388ea98ab733c7","type":"file","name":"/usr/share/zoneinfo/right/America/Goose_Bay","hashes":[{"alg":"SHA-1","content":"c4117688acc9366559e0e1ee6af12fdb6ebfb136"},{"alg":"SHA-256","content":"1d7eb04ad85106ea2e0a2d6e1dea1486a794987777d77302064722ea6cacda5c"}]},{"bom-ref":"4bfa5e95265e8ef3","type":"file","name":"/usr/share/zoneinfo/right/America/Grand_Turk","hashes":[{"alg":"SHA-1","content":"db82b7464a67fe4828f5415e161c945df8aaf70b"},{"alg":"SHA-256","content":"b2361dddcae8a330c6b854995f9887f9fcde49c86b3db1bd4490a007d07db8a2"}]},{"bom-ref":"4b30f3e47b084bd9","type":"file","name":"/usr/share/zoneinfo/right/America/Grenada","hashes":[{"alg":"SHA-1","content":"3626512ff0678dc725d293f54862664027ccc648"},{"alg":"SHA-256","content":"bb3d3f180d82fb6a748a07f36f99aa4b6942adff7338a0b424091d863c5a048e"}]},{"bom-ref":"feb3512eb882d59d","type":"file","name":"/usr/share/zoneinfo/right/America/Guadeloupe","hashes":[{"alg":"SHA-1","content":"a27c32ce6b382c3f2b4ef56357dd3d0d6a620512"},{"alg":"SHA-256","content":"f72701f94cf2298149c4d30ec583b8ca10b88aab1724247c0f94cf9776627762"}]},{"bom-ref":"854ff14aeb034af5","type":"file","name":"/usr/share/zoneinfo/right/America/Guatemala","hashes":[{"alg":"SHA-1","content":"2f224b13635123144f1e8b82fc03a3de8b8ba36b"},{"alg":"SHA-256","content":"d5fcd5f1726e7117953d77b0479022d8172a021773b0a512a645ed29aff31f41"}]},{"bom-ref":"70058788cb6704d2","type":"file","name":"/usr/share/zoneinfo/right/America/Guayaquil","hashes":[{"alg":"SHA-1","content":"b294a8623b9f564316349f7034307c8ef2469eb3"},{"alg":"SHA-256","content":"7b3e3d25be505d81523d249b90326023ccb9c710de06f7d2267f4958cfb65d3a"}]},{"bom-ref":"f4d6646a5a9a64a7","type":"file","name":"/usr/share/zoneinfo/right/America/Guyana","hashes":[{"alg":"SHA-1","content":"ab168e3b6d7f190cdae123f2cb9a592614df3b1e"},{"alg":"SHA-256","content":"273535ad4113cc3f17edece259307eef85b51112fc18896f3e6fd2252f30997c"}]},{"bom-ref":"9b38d74dc4cc19b0","type":"file","name":"/usr/share/zoneinfo/right/America/Halifax","hashes":[{"alg":"SHA-1","content":"8dd46c826cf287c8c5593f37eb4a826a72eed1f0"},{"alg":"SHA-256","content":"de39a9ae64f17eb6622ee807dceedb6a93a0edaebbc3cd6852eeccc91578a738"}]},{"bom-ref":"90b3292967aef278","type":"file","name":"/usr/share/zoneinfo/right/America/Havana","hashes":[{"alg":"SHA-1","content":"86656a7726c2a53c656670ec6ea7584b07972c6c"},{"alg":"SHA-256","content":"e6de756b4817594fecb58a44da08c85730b875bb19aa4121f31d11f83333c0d1"}]},{"bom-ref":"acdcceddb28f6970","type":"file","name":"/usr/share/zoneinfo/right/America/Hermosillo","hashes":[{"alg":"SHA-1","content":"c22a31daa2c57b38ee64cfd1e7f93221fb0e4007"},{"alg":"SHA-256","content":"27c1fad481859362a1c4aa4c82e3bdddffa0da3a8aacdf0451271581b62a49fa"}]},{"bom-ref":"83db9334e84dacdb","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Indianapolis","hashes":[{"alg":"SHA-1","content":"e629bb367ab8dae1f3506bf90ae59f82a1fcfe55"},{"alg":"SHA-256","content":"0728a06fd707e7d40167e344a4e7bc5adab474bfe44da200b51d7d565f67af2a"}]},{"bom-ref":"e1232bc3571153c0","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Knox","hashes":[{"alg":"SHA-1","content":"e78896109ab407dd8af4840bafd4dfef572beda9"},{"alg":"SHA-256","content":"2f4d84220956642eb7a0121764c78ff6286c34f6f23b704da33d4a435772c826"}]},{"bom-ref":"b2e78064f19a2b58","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Marengo","hashes":[{"alg":"SHA-1","content":"625f688e0feef910a7bbb2142a5dee98095cc4b0"},{"alg":"SHA-256","content":"f5d11df6a52cd62a80ae0487887f0b3e55ee092ae498ebd9b737ab6f008e25f5"}]},{"bom-ref":"8fb4559998df3b8e","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Petersburg","hashes":[{"alg":"SHA-1","content":"072eaabf958da859c3ff032bba05d5bbd175ea05"},{"alg":"SHA-256","content":"f89839c604ca596e42af7e2749738ba75b3130516ce4c1fd057e6c2a1bc12e54"}]},{"bom-ref":"304a7beae70c420c","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Tell_City","hashes":[{"alg":"SHA-1","content":"529f52777f64f3609fa4fc16d0786b7240fb01ef"},{"alg":"SHA-256","content":"befc5e3e1b19ec1f798da2e793a4631302b31df1abc2ccd7c3de466fb846809a"}]},{"bom-ref":"f714911f79afee1f","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Vevay","hashes":[{"alg":"SHA-1","content":"82d704c9174df368c95ed5f31eadad9bbbbff4c5"},{"alg":"SHA-256","content":"68590cd2700ae5e91207c6bc14abcad687916e60fca9c5fc675a1dcdb97128d8"}]},{"bom-ref":"02fd2f6437426d08","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Vincennes","hashes":[{"alg":"SHA-1","content":"aee75cf4ff020de657311e8bd8301238af70056a"},{"alg":"SHA-256","content":"68699e6cc42e94d9360562609cdc3da2f256924b23f6948c081f6a6d35651462"}]},{"bom-ref":"26b3d64a2fd260f9","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Winamac","hashes":[{"alg":"SHA-1","content":"b3989983dab92f3dc4dbc56b5aceb0b9b67bc145"},{"alg":"SHA-256","content":"f91a8308794d082956f6cb363cf2fc926d741a1ea16626ba21acd777d55e90a7"}]},{"bom-ref":"492131b85d04a158","type":"file","name":"/usr/share/zoneinfo/right/America/Inuvik","hashes":[{"alg":"SHA-1","content":"e28e5add4b4e10289645665f6f262a89a8d167a5"},{"alg":"SHA-256","content":"e36bbc719b4bf4df464d8085d78fae75b997a2326189df0c6549c04084b415da"}]},{"bom-ref":"c5518098ac582922","type":"file","name":"/usr/share/zoneinfo/right/America/Iqaluit","hashes":[{"alg":"SHA-1","content":"72089431c8b9738578d88707fc3688a25d9d92db"},{"alg":"SHA-256","content":"e8c8b85321580cb7c7708be7eb0b56676cbdda7f0210ad46d14f26016c8f89e1"}]},{"bom-ref":"3090367ce2b5ac2e","type":"file","name":"/usr/share/zoneinfo/right/America/Jamaica","hashes":[{"alg":"SHA-1","content":"8ef55573884869765392f759bcaca7f2752afbed"},{"alg":"SHA-256","content":"5c27200228a5cfb748442dfa419f4fc152d2675df1ddf600f0780fae98570db6"}]},{"bom-ref":"5bcbc83a1174a5f9","type":"file","name":"/usr/share/zoneinfo/right/America/Juneau","hashes":[{"alg":"SHA-1","content":"4390e773c1309de42d31c4652371e9f8f565133e"},{"alg":"SHA-256","content":"12a3f6d211359589acf2139df5e6f0c72d1115857a6bc8041b3162c9cd0ac970"}]},{"bom-ref":"345f2968308c9584","type":"file","name":"/usr/share/zoneinfo/right/America/Kentucky/Louisville","hashes":[{"alg":"SHA-1","content":"d1b34a8bdf8002ab392831636534017b9266a1aa"},{"alg":"SHA-256","content":"b1bb2f0cae80face39cd7d8a51b77c1746227c3c49c26736581a660050926878"}]},{"bom-ref":"b2bbcc5d32f1c793","type":"file","name":"/usr/share/zoneinfo/right/America/Kentucky/Monticello","hashes":[{"alg":"SHA-1","content":"017cf20a5f7c487240ba5dc7d1c17188e5a156b1"},{"alg":"SHA-256","content":"22aaffefc9fa82381deb0cd3be4036a128e0161dda31a536f42d7fbaba036ccc"}]},{"bom-ref":"0d7b63d45f985ce5","type":"file","name":"/usr/share/zoneinfo/right/America/La_Paz","hashes":[{"alg":"SHA-1","content":"74f9a8798713f391e03249a01d0cdd50fe53b84f"},{"alg":"SHA-256","content":"ffd9ce8d023730753815b307eca992efdbf539dcb6c399bba04180d8c9fcb181"}]},{"bom-ref":"51d88d73a571acd9","type":"file","name":"/usr/share/zoneinfo/right/America/Lima","hashes":[{"alg":"SHA-1","content":"16be0a6d0ef1c578b425481fc71d34a172c85360"},{"alg":"SHA-256","content":"1861db8901b2848ddf2192b33816066dc9f4d665936738e8a3e17de4028d92f9"}]},{"bom-ref":"92b6105849acecdc","type":"file","name":"/usr/share/zoneinfo/right/America/Los_Angeles","hashes":[{"alg":"SHA-1","content":"33e8408d26300a31266672277ba851267b317103"},{"alg":"SHA-256","content":"3ee419ea268819dd3bcbe5fc1df3fe1c85149a8f1415bdbd6eca5e7687a09b01"}]},{"bom-ref":"9edbca02af14f05c","type":"file","name":"/usr/share/zoneinfo/right/America/Maceio","hashes":[{"alg":"SHA-1","content":"0d71cec8cb96945a6a5be56591c3e977e15ae37d"},{"alg":"SHA-256","content":"15a2d29a8e035e60996cd260f78d04023693e767d41e8edc0486ea706925ef64"}]},{"bom-ref":"8738de53c915cf54","type":"file","name":"/usr/share/zoneinfo/right/America/Managua","hashes":[{"alg":"SHA-1","content":"c73cc5cc9dc7f88e733340b9bb85b47f226a22b8"},{"alg":"SHA-256","content":"eee02d468b80b6a090b82476f7cd0980a5fc6dd5adba53f55fb9dc4bdca69485"}]},{"bom-ref":"81ea9044b83dab81","type":"file","name":"/usr/share/zoneinfo/right/America/Manaus","hashes":[{"alg":"SHA-1","content":"075a0966babfa20ce27dcf70494294ead256a90b"},{"alg":"SHA-256","content":"901b776a58617a7934ce463ef4ebdca94d62ed5f9af665be0ca399effe9c6db6"}]},{"bom-ref":"97948050386e06ba","type":"file","name":"/usr/share/zoneinfo/right/America/Martinique","hashes":[{"alg":"SHA-1","content":"5cb380d381da69a4f179987ef937bbbcc2e54bd9"},{"alg":"SHA-256","content":"ef349cc80f28c23271bc1b0026fcdb6db24ebddbfd205659eac71580b4da3cd1"}]},{"bom-ref":"f7733049a1b2d7ab","type":"file","name":"/usr/share/zoneinfo/right/America/Matamoros","hashes":[{"alg":"SHA-1","content":"e118c28ef71eae9504bd7e86f58c5381ef9e1bd4"},{"alg":"SHA-256","content":"068315d3b65911121f5397e919a13b57f9ffc4ae3c55704a5fb9ccd47815aeb0"}]},{"bom-ref":"2e73b1d1d70ab5fd","type":"file","name":"/usr/share/zoneinfo/right/America/Mazatlan","hashes":[{"alg":"SHA-1","content":"73c10d7c8d6572016ddc195f118bd004527a2ba3"},{"alg":"SHA-256","content":"b6ee357f543aa0be20cc72dd2ca975398edd5b08e2c10f4b73e5aff74e8dc3a0"}]},{"bom-ref":"ab75cda26309a366","type":"file","name":"/usr/share/zoneinfo/right/America/Menominee","hashes":[{"alg":"SHA-1","content":"4f699eb581d4be3ed49b49c6fd2471985c004a30"},{"alg":"SHA-256","content":"ca420638f45add468b6359c31efa9812607b185dd9677c1411a97bafa7f1933c"}]},{"bom-ref":"c0aece25667ae9ea","type":"file","name":"/usr/share/zoneinfo/right/America/Merida","hashes":[{"alg":"SHA-1","content":"d8931372383edb505b6cbd589be56c9f4cf3ed5f"},{"alg":"SHA-256","content":"3d1001283834b0c4f23b30d3766db13a0e4ded4a95c4e9b2b0cafcdefca88b39"}]},{"bom-ref":"e073a6c1dffb5050","type":"file","name":"/usr/share/zoneinfo/right/America/Metlakatla","hashes":[{"alg":"SHA-1","content":"27bbee0f9d372e8d0de9dd3373284023a5e8a883"},{"alg":"SHA-256","content":"c0251ec735ecaa9b217e2388c72f722ce4931f9ed51709275bdc73073ba2e337"}]},{"bom-ref":"01a43fff10184476","type":"file","name":"/usr/share/zoneinfo/right/America/Mexico_City","hashes":[{"alg":"SHA-1","content":"126158761acb0179c56b5e727c2f9b353bc321e5"},{"alg":"SHA-256","content":"6a7a79f032aaa5c1ffe51c09e8323ce040d39408c9e3ddfc634dc3d35314d7d7"}]},{"bom-ref":"b47a9e01d39fa883","type":"file","name":"/usr/share/zoneinfo/right/America/Miquelon","hashes":[{"alg":"SHA-1","content":"8b5fb6b507044f991b2b899b2b20ee54d589d8e3"},{"alg":"SHA-256","content":"657bc1af8e6673dd35dd167c35fd141b28ed0434514908727ba2c69045c5d187"}]},{"bom-ref":"e385e63a58a5e00a","type":"file","name":"/usr/share/zoneinfo/right/America/Moncton","hashes":[{"alg":"SHA-1","content":"d2ec1868c932a9b4c64446752b8234bc804e8b3d"},{"alg":"SHA-256","content":"590199c42efd6e08eb5777b6fb81a9f95102dea331acec44c11e27a320a3d47b"}]},{"bom-ref":"44a835f659de7963","type":"file","name":"/usr/share/zoneinfo/right/America/Monterrey","hashes":[{"alg":"SHA-1","content":"1866dc9e393a676dcac613423481352cfd1c85a7"},{"alg":"SHA-256","content":"15c9b0e2bd94d6f925b787675c6f884ee03202103dd1a57cbd75e03f68ee7f7e"}]},{"bom-ref":"df3f6c66641e5191","type":"file","name":"/usr/share/zoneinfo/right/America/Montevideo","hashes":[{"alg":"SHA-1","content":"26e7917fc6fb0d8842e6751c04e4ede715befa96"},{"alg":"SHA-256","content":"692671c697b408e542286f7fd3a68467ada7fd6c8c8d0e7cd93ebfaf959e76ce"}]},{"bom-ref":"8deebf1f3e51cc7d","type":"file","name":"/usr/share/zoneinfo/right/America/Montserrat","hashes":[{"alg":"SHA-1","content":"e18ef29be1e720312ffc83e480ab9eff6f088e5c"},{"alg":"SHA-256","content":"4ac8aa212a97a52aa8d2dd98af9ed7d54abfd7912f94a21f94bafe35fc5befbe"}]},{"bom-ref":"d8f9c6c8ab6f81ff","type":"file","name":"/usr/share/zoneinfo/right/America/Nassau","hashes":[{"alg":"SHA-1","content":"a2a064778e9c9d0c4fda63fd24003b810720eaf1"},{"alg":"SHA-256","content":"5dceff86a36849de4ad6175d26e7949f6a5075020e323b757523a92014dc67cb"}]},{"bom-ref":"55e475884178f164","type":"file","name":"/usr/share/zoneinfo/right/America/New_York","hashes":[{"alg":"SHA-1","content":"d3ecaed6b01d1214c8619db74c432c230b1413c6"},{"alg":"SHA-256","content":"cc93eddc0de3d5187746755fa687d2776e6531231264af2aa6045442bf094b78"}]},{"bom-ref":"734109c0b60ee88b","type":"file","name":"/usr/share/zoneinfo/right/America/Nome","hashes":[{"alg":"SHA-1","content":"4a9fa895aad2cfe20929513c7a1b800a4197d566"},{"alg":"SHA-256","content":"b09762feb4bb5c9cc09d7b04bad7d688739c8ca49180f1280b0d210160ced6e5"}]},{"bom-ref":"a7ef213198c61cc1","type":"file","name":"/usr/share/zoneinfo/right/America/Noronha","hashes":[{"alg":"SHA-1","content":"c36fbeec4916edacf870e802b6664743297c1aa8"},{"alg":"SHA-256","content":"bab92cbb9b0e01f69965b0e47893151da104b34a83ee1418035610ef0ec4bd32"}]},{"bom-ref":"c526fee8f4c0b3d7","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/Beulah","hashes":[{"alg":"SHA-1","content":"9da237f153eb1b9803939dfedad973f312c6b39a"},{"alg":"SHA-256","content":"4f825bd608a1441c3522bb185c713b1455e02bf61a3574e43b53960a8ed2aa31"}]},{"bom-ref":"12a245b4e46ba9d6","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/Center","hashes":[{"alg":"SHA-1","content":"b8e5f10f7c792f97e7bc1de37dc764b21f819993"},{"alg":"SHA-256","content":"3634d2124049c6e9191bfc58a4a0538d6a5382c3e781f3ad0176567544bd0dc7"}]},{"bom-ref":"08dd806950adc8fc","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/New_Salem","hashes":[{"alg":"SHA-1","content":"9ce631e65ed4b0c91d3c21c113e7cb546af9992e"},{"alg":"SHA-256","content":"3c6a8b81828d9ae08c8382aaed2e57008e6a99033f1d59fdf1ad579be6731bed"}]},{"bom-ref":"026b9f4bffa3ba68","type":"file","name":"/usr/share/zoneinfo/right/America/Nuuk","hashes":[{"alg":"SHA-1","content":"84cb9431ff113a3285c68a9a576d68783b032153"},{"alg":"SHA-256","content":"56d0e59588ea31c9d609e9d7c7be827dcbea5902c356c9edcf4a016f878d8430"}]},{"bom-ref":"961a1beb7a13a55e","type":"file","name":"/usr/share/zoneinfo/right/America/Ojinaga","hashes":[{"alg":"SHA-1","content":"94627e2120c7dd056a7733ddd1c0636a859e8faf"},{"alg":"SHA-256","content":"7128bb5658154111929942a6e0c6fd3f2b3ee7b92006b9a4138c91d2974ef502"}]},{"bom-ref":"36e8db3e8360530b","type":"file","name":"/usr/share/zoneinfo/right/America/Panama","hashes":[{"alg":"SHA-1","content":"782d51c57e432256b93de7f42539f896f558f537"},{"alg":"SHA-256","content":"fa378809b2f3712237aa833a3eb7d8aca8ae8afc839f49f554e2993c8f7f5942"}]},{"bom-ref":"8f998d501b987879","type":"file","name":"/usr/share/zoneinfo/right/America/Paramaribo","hashes":[{"alg":"SHA-1","content":"cfcac368fa25a0f46f925002f6f0430f2ae4bf34"},{"alg":"SHA-256","content":"d659078687d18ad6f297070a2a7994d4b30dd6fcae2009f33c7bc5881835be0a"}]},{"bom-ref":"9fb6c76d0afcec15","type":"file","name":"/usr/share/zoneinfo/right/America/Phoenix","hashes":[{"alg":"SHA-1","content":"8d4cc30f5f46b56e77bdcbbb0945725a3b7ff24b"},{"alg":"SHA-256","content":"c0ac0affea3d281bf822b7ed38a31eade6b282e4d94846563acfa1772c5a2869"}]},{"bom-ref":"cd12cd6b570d8683","type":"file","name":"/usr/share/zoneinfo/right/America/Port-au-Prince","hashes":[{"alg":"SHA-1","content":"5f39cc0cf6b1359eed8942341ca1fcfbe85e99cf"},{"alg":"SHA-256","content":"21ba6444634e6cdafa9a685e3e6ecaef3120e9094a4225fec50e656f6377e746"}]},{"bom-ref":"c4da8a1aeff1d1a6","type":"file","name":"/usr/share/zoneinfo/right/America/Port_of_Spain","hashes":[{"alg":"SHA-1","content":"c21679f1987bc4060ddd4a04eadcabb6ef182b7c"},{"alg":"SHA-256","content":"4eb727c08e51e2f97b3d4bc5aa9789a0f79049c7c125c1d610afca947c656d17"}]},{"bom-ref":"aa6246ea6d68fe15","type":"file","name":"/usr/share/zoneinfo/right/America/Porto_Velho","hashes":[{"alg":"SHA-1","content":"3d6c28f52ff3c8012c4a7f6de248363345be0bcb"},{"alg":"SHA-256","content":"6e1c2d9ba7bd02bfa3e664e681b3f2db8e6d5eb0b9a09fd9ef753326fc61992f"}]},{"bom-ref":"02a59ab5bad3f823","type":"file","name":"/usr/share/zoneinfo/right/America/Puerto_Rico","hashes":[{"alg":"SHA-1","content":"bd03349ab645bd77e72b151de02a04080fac3c03"},{"alg":"SHA-256","content":"cd1b4743077fc93db54825488796a092a1cc18bc11bcbfaefea6db74ef7c14e0"}]},{"bom-ref":"ac414923898acd16","type":"file","name":"/usr/share/zoneinfo/right/America/Punta_Arenas","hashes":[{"alg":"SHA-1","content":"7ee54e949863515475fcea0d561662c1faa87ba6"},{"alg":"SHA-256","content":"b5af315385dbf4e82e3a679785e3baa5d1a735d03339fb2fcf69ba89b8db991d"}]},{"bom-ref":"b620ebebcbdb016c","type":"file","name":"/usr/share/zoneinfo/right/America/Rankin_Inlet","hashes":[{"alg":"SHA-1","content":"469919471363ed4ddb1bb774b25e6838139f77a8"},{"alg":"SHA-256","content":"372ba51bc077ecef86bc9e235a072ca16557d9dd4242b750b9c04f5a03d6db5b"}]},{"bom-ref":"fe3c993c4e502c6c","type":"file","name":"/usr/share/zoneinfo/right/America/Recife","hashes":[{"alg":"SHA-1","content":"91b8ece72d7ec5579172234b94a72156c48e0445"},{"alg":"SHA-256","content":"d1185de9f96a03a71f70d1c9bcb1b6c094a3d049b3a59f19b0f90653d61cd80d"}]},{"bom-ref":"d8b0e116a8777b29","type":"file","name":"/usr/share/zoneinfo/right/America/Regina","hashes":[{"alg":"SHA-1","content":"c511c890e941ce27a729a201492fb660bdf0804e"},{"alg":"SHA-256","content":"57b583fd418323f1eab8b0abef568c10801640da511ffc9204d12c852e58f06a"}]},{"bom-ref":"d57a9f8341d38a31","type":"file","name":"/usr/share/zoneinfo/right/America/Resolute","hashes":[{"alg":"SHA-1","content":"8b7aafe5554dae839825ee6107a4452be9123666"},{"alg":"SHA-256","content":"8d3afb7e461188da345e89520355e654d5436e5308981398290d948b3be9470a"}]},{"bom-ref":"f0e29fa116e4617c","type":"file","name":"/usr/share/zoneinfo/right/America/Rio_Branco","hashes":[{"alg":"SHA-1","content":"be1e6bd05cbbbf75d5a17d1fccbaf05c8f8ccd4d"},{"alg":"SHA-256","content":"ddac0ed7f1f06a2e5dfa05528891eef31ec31cfd48f98ddf897c864bf1515e0d"}]},{"bom-ref":"f727b8f4d560404e","type":"file","name":"/usr/share/zoneinfo/right/America/Santarem","hashes":[{"alg":"SHA-1","content":"6d1e86f8baf86795820d327c7dbee29cb00f5334"},{"alg":"SHA-256","content":"79bb5e385dff3558613092fc71057c5b73db8ae67f8f78a21fce1f236ef00d39"}]},{"bom-ref":"35d9052bb24b0fb4","type":"file","name":"/usr/share/zoneinfo/right/America/Santiago","hashes":[{"alg":"SHA-1","content":"59f704a20ae0c04e38b83839710cf3514e2c7890"},{"alg":"SHA-256","content":"22a61d25e4fb2d5fe8d9ebfb832b3dcdc524c55a553b41378157cd9ab3049b2c"}]},{"bom-ref":"1cccb2af64d43b0e","type":"file","name":"/usr/share/zoneinfo/right/America/Santo_Domingo","hashes":[{"alg":"SHA-1","content":"79e359f0a9009cb6abb17a812230c59abcfb2e65"},{"alg":"SHA-256","content":"429f5d9896a49e971afb74e66f233ab60fdfdaa403a48ec4bb03a91ac317d1d1"}]},{"bom-ref":"a57c043826f862dc","type":"file","name":"/usr/share/zoneinfo/right/America/Sao_Paulo","hashes":[{"alg":"SHA-1","content":"6f97ef0f5e9dc4497e6104ae6c87b7784365d2b2"},{"alg":"SHA-256","content":"9b9a459e539bcf04e265957b4a4503600e509fbec64af6c04d9fa8e2b676d3f8"}]},{"bom-ref":"5107c4c02a10a84c","type":"file","name":"/usr/share/zoneinfo/right/America/Scoresbysund","hashes":[{"alg":"SHA-1","content":"e841385de1598a3de48382f5510dd38ffb4313fc"},{"alg":"SHA-256","content":"e6501916bcb4bc43d41aa72cc2ffca371a59df5d539f5eccd51e12dd29177f64"}]},{"bom-ref":"34bc5a13b775b2e1","type":"file","name":"/usr/share/zoneinfo/right/America/Sitka","hashes":[{"alg":"SHA-1","content":"e41ff76b320d3eabaec1e1ad7a21fceded7a66cb"},{"alg":"SHA-256","content":"c3b1f02dd475a57ef6fa45abbcf70afc712e2acafae8c17cb00eb4703abd1a0d"}]},{"bom-ref":"f85b41e3513d0573","type":"file","name":"/usr/share/zoneinfo/right/America/St_Johns","hashes":[{"alg":"SHA-1","content":"cc78bb96030bc9a298145646d85f78f875546539"},{"alg":"SHA-256","content":"731e50a764c27110bbaf54acf0e2b5ed1da912e94ed8be3e8d47fe7196ae0043"}]},{"bom-ref":"716f00c6004de667","type":"file","name":"/usr/share/zoneinfo/right/America/St_Kitts","hashes":[{"alg":"SHA-1","content":"0e4a379de27398409e884c63ed5f8d27e43ec589"},{"alg":"SHA-256","content":"09404cc5874bd0b8115b13528528e3c0bee7176c5d600e8a263697a3408415d3"}]},{"bom-ref":"e1362670272b2be2","type":"file","name":"/usr/share/zoneinfo/right/America/St_Lucia","hashes":[{"alg":"SHA-1","content":"b706cd171b8e9357a6ab921f7d38dcaf91e39431"},{"alg":"SHA-256","content":"b9d515434e4f43e8089c2b668dde12570060f37e820d71de7b1ca3ca35de8887"}]},{"bom-ref":"3c4b92bee150dd59","type":"file","name":"/usr/share/zoneinfo/right/America/St_Thomas","hashes":[{"alg":"SHA-1","content":"629143b476dd347f33e082acab099b8b38f0d56e"},{"alg":"SHA-256","content":"137658149721fdc7e1e7c7132b00cf2aa49ae0a3bb0f81bcd8ad4781d07d1af0"}]},{"bom-ref":"b5b8c7204c397ac0","type":"file","name":"/usr/share/zoneinfo/right/America/St_Vincent","hashes":[{"alg":"SHA-1","content":"331005ca35e2c55601f75ebf87ceea699ff29c16"},{"alg":"SHA-256","content":"42cec16f5ae71dcd315753c2aafc77bacd879bc0459ea67e51ecf20fbfbbb338"}]},{"bom-ref":"8a3282f2dc1ef31b","type":"file","name":"/usr/share/zoneinfo/right/America/Swift_Current","hashes":[{"alg":"SHA-1","content":"38cc138ae28293bb39a1face6144783d50a49368"},{"alg":"SHA-256","content":"28e170880ebf4e2965b2c618ebeeb2e7fcd059fbcc6dd28143741e7a7fe0f934"}]},{"bom-ref":"ac6147d3213088c9","type":"file","name":"/usr/share/zoneinfo/right/America/Tegucigalpa","hashes":[{"alg":"SHA-1","content":"fe31f4aee0e908cc5313dfe34c2f82a25176fadd"},{"alg":"SHA-256","content":"3b50268117f38474fd1e417f4bc5cedbc4ec9f368947cd9392db834303110bc2"}]},{"bom-ref":"dce0b10752d26a8e","type":"file","name":"/usr/share/zoneinfo/right/America/Thule","hashes":[{"alg":"SHA-1","content":"3af53d8c208f2a9a812d4ea50fc0d33a1ad23a8f"},{"alg":"SHA-256","content":"f9a9092aae0ccad8ee2ae2bfd337f760ce8c9b3fb537ded08841da1dc053aab4"}]},{"bom-ref":"e06ed45ec27b47d4","type":"file","name":"/usr/share/zoneinfo/right/America/Tijuana","hashes":[{"alg":"SHA-1","content":"a291359b5bfb5f51d90a728596fd581eba4c331d"},{"alg":"SHA-256","content":"e2eda698df19852a70c90098c52da7447925cf85446d2bac2c1b88e3f1db492d"}]},{"bom-ref":"afaaaa408e3ff619","type":"file","name":"/usr/share/zoneinfo/right/America/Toronto","hashes":[{"alg":"SHA-1","content":"92cb94c57a368d64cfd0f66fed49aec1abdb2168"},{"alg":"SHA-256","content":"cca92ae0b4534afe8ebe322f9aa1e22b1b7fe8949fd44253e67ed9706f6e36ed"}]},{"bom-ref":"756f13952c0b3f2b","type":"file","name":"/usr/share/zoneinfo/right/America/Tortola","hashes":[{"alg":"SHA-1","content":"cf54c008d238992b90e205738d6394a9db3f0659"},{"alg":"SHA-256","content":"defa24a866c8f826dbba0a518fcd87a3bf70ec24baad0c79603f213f5cdf6bed"}]},{"bom-ref":"febd6317bbd1b4d2","type":"file","name":"/usr/share/zoneinfo/right/America/Vancouver","hashes":[{"alg":"SHA-1","content":"b967af5518485398dc55800dc3bb6d897b7e1883"},{"alg":"SHA-256","content":"fbff14bd1c85cddf6923631bde21050d5d6ab0c6c29424ee0338091528da9900"}]},{"bom-ref":"87446184192ed0f5","type":"file","name":"/usr/share/zoneinfo/right/America/Whitehorse","hashes":[{"alg":"SHA-1","content":"1a5e8856140d63dd8a8b4f23fdd5a29e255cea0b"},{"alg":"SHA-256","content":"0f166f15ce852d5c35bb51a616884a3e50c231c2829966311cca768c9fa23dd4"}]},{"bom-ref":"e1369f96c28cd48b","type":"file","name":"/usr/share/zoneinfo/right/America/Winnipeg","hashes":[{"alg":"SHA-1","content":"05af13ca54e01d841f8fd94c57fc4330af953abd"},{"alg":"SHA-256","content":"3f656ccf5e335a50b4c6cd4f7f581649f7bd1f4d0abd18e2019a587ac16b7de4"}]},{"bom-ref":"3e8165bec3e68f82","type":"file","name":"/usr/share/zoneinfo/right/America/Yakutat","hashes":[{"alg":"SHA-1","content":"7d0052a7645fd1ae4c9b9baaf522c17bd09237d4"},{"alg":"SHA-256","content":"97ce35e6c0b358ba35c0025641ac7e723c887931406084522ced316e6eeeb538"}]},{"bom-ref":"20fbbfa564dd31c5","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Casey","hashes":[{"alg":"SHA-1","content":"5bc34d0e78af23aa7f63142c5a93c814999da047"},{"alg":"SHA-256","content":"8232e26826159180ef3515cecd7465040d8f78b229da4cdbd1fdf014047dcb77"}]},{"bom-ref":"259767cf4ba91c0b","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Davis","hashes":[{"alg":"SHA-1","content":"29d30e48b5c0c6ddaa048f0d5bcab99450783e97"},{"alg":"SHA-256","content":"66eabab53c43bee423bd22c3e8f7fad12248c1753befde0e6f5ecb7388b6847a"}]},{"bom-ref":"8a81280ed4f8a4b0","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/DumontDUrville","hashes":[{"alg":"SHA-1","content":"ea370341a2f862b65193c8836cee41ea642d1ad2"},{"alg":"SHA-256","content":"16112852db52f0a777e216242ab2666a360d6da8cfaa29171e4914fa8aca15c1"}]},{"bom-ref":"f8783d0c9a941115","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Macquarie","hashes":[{"alg":"SHA-1","content":"b51fd204c752ea6eb13d1a3e7ab82e8eff108625"},{"alg":"SHA-256","content":"4431e3a6ff8cc0b6772a73e817070239344345384cd8c680ddd27f4b9e2225de"}]},{"bom-ref":"9e26dc6237db7812","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Mawson","hashes":[{"alg":"SHA-1","content":"50115e22f9705c116da3e059d9737a8887c584d0"},{"alg":"SHA-256","content":"0938f63ba7ed2425244056bde76ffc9cb97d14cd20460e34871a66be43644e9e"}]},{"bom-ref":"c2da98357733bc17","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/McMurdo","hashes":[{"alg":"SHA-1","content":"da510376e63e7e7afe07becbcd4e3ddb93079c00"},{"alg":"SHA-256","content":"d8371211d3511de00c3b0aa61248ecba669e962fcfa7ba363c9b9d17b63cc875"}]},{"bom-ref":"bd7301e02471f25f","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Palmer","hashes":[{"alg":"SHA-1","content":"4c14c43476b9c1cdc10839144eb34efbfdd7b4de"},{"alg":"SHA-256","content":"47e20bcfd0160a1a4554551aefc34a60d7d28614dddded02a65fe6b7f356e531"}]},{"bom-ref":"80ad7caab82aabde","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Rothera","hashes":[{"alg":"SHA-1","content":"36d933761eae1daaee4598be666fc64d651c41b1"},{"alg":"SHA-256","content":"62237ed3654b6e82ec6381241568046d8d4e72a01269a61686cc40d378e5c47d"}]},{"bom-ref":"a8b7442a78ad19fb","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Syowa","hashes":[{"alg":"SHA-1","content":"b82c41c5c6de57c756b653c12913b1e89e970fe9"},{"alg":"SHA-256","content":"db0e79dc4673b9fdf9bf1ff84046a6e81b0222f45ba5e57236204306f0aed6c2"}]},{"bom-ref":"6d167235f3e6eaed","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Troll","hashes":[{"alg":"SHA-1","content":"21a4b91631974fbec1c45c420feeea98415e6cdf"},{"alg":"SHA-256","content":"f158963469c16c869679bbe850a0f13f3d6cd04d8e7b66c609cca8553118da47"}]},{"bom-ref":"a5ea137822f8f425","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Vostok","hashes":[{"alg":"SHA-1","content":"cdc83ccdadf487847cc6f14ead06bb69ffaff304"},{"alg":"SHA-256","content":"38f6bb4b427f5ed0599efb8d423a7bb7aa3f89113d7515735cb6a83570da26b1"}]},{"bom-ref":"10341497520a049d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aden","hashes":[{"alg":"SHA-1","content":"b8d0366bfc2e1c8aafde803870b7f93c52b253b7"},{"alg":"SHA-256","content":"387e2b6ede4c0f3737bb0e916e9ce9a3ca3648cfe5c1925b251a92f359d9592a"}]},{"bom-ref":"fcc1f222959a9013","type":"file","name":"/usr/share/zoneinfo/right/Asia/Almaty","hashes":[{"alg":"SHA-1","content":"bceb9356d04e0eba475a94ffd801048567886f0f"},{"alg":"SHA-256","content":"ef2a3b9a06f0d6cb2e7f0266fa65e59b3b115f65520ba8ee82119f72fc6c295a"}]},{"bom-ref":"35d5faac734e1e06","type":"file","name":"/usr/share/zoneinfo/right/Asia/Amman","hashes":[{"alg":"SHA-1","content":"b2bab979a5afc561231eb6679844b9ca5d330905"},{"alg":"SHA-256","content":"2ccf65fb5a323fa1812af24f736dc4c5cbc897db46ead17114f7014a2f6193e8"}]},{"bom-ref":"71f2320dce359e85","type":"file","name":"/usr/share/zoneinfo/right/Asia/Anadyr","hashes":[{"alg":"SHA-1","content":"567717b33126a401216514418f3f0eb73ba673a1"},{"alg":"SHA-256","content":"ed67cbd9260d4d55793dbb0722c3af1e51c2b9dc0808af7fc364c9f2fa191b22"}]},{"bom-ref":"3652b6a07a9f2b75","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aqtau","hashes":[{"alg":"SHA-1","content":"010bc9543446a211f8842e0664150eb2c9264fc9"},{"alg":"SHA-256","content":"0251204261bfa04f6bbf6b3cfba6078cbef56748fe69cccf4d548879993e73c2"}]},{"bom-ref":"695af02c15c657c5","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aqtobe","hashes":[{"alg":"SHA-1","content":"9ab4e617321843502f89b74e8cb2e8e32ce20a4a"},{"alg":"SHA-256","content":"2ae2b05947513145a299577fec11031db3c77492b67a6b2af23e105a45114763"}]},{"bom-ref":"246dcfcae5df9985","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ashgabat","hashes":[{"alg":"SHA-1","content":"55693ece69cfcc290ef1f93aeed441b75f138678"},{"alg":"SHA-256","content":"3b6ed48b294e473000d47fb1f51370468c328a6f8b9eaff39c2decf66721b7fd"}]},{"bom-ref":"28045bc1a5ffd1cf","type":"file","name":"/usr/share/zoneinfo/right/Asia/Atyrau","hashes":[{"alg":"SHA-1","content":"bd0f62957859353b223aae517f9b56def54f7541"},{"alg":"SHA-256","content":"6a8e040436221334d37d866678b9127d584b7a8cf228f50df0d6e782569f31c0"}]},{"bom-ref":"243cfb07297c2665","type":"file","name":"/usr/share/zoneinfo/right/Asia/Baghdad","hashes":[{"alg":"SHA-1","content":"5c8fb0eb2915f94f8b2e6ca1f32fcad8a527f780"},{"alg":"SHA-256","content":"ef52187864fe667b0ab96cb5a39cd688274c562544613f14276ea3f204245814"}]},{"bom-ref":"272b2b27e170dbfc","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bahrain","hashes":[{"alg":"SHA-1","content":"8f4b7bb04e4497c523a6b187755797c9e63ee012"},{"alg":"SHA-256","content":"5f23d2e3dd9abc596a77dcffb28bc7f9d30d6b188b4f8f71c987f110963c3699"}]},{"bom-ref":"c7df68f5b82bb519","type":"file","name":"/usr/share/zoneinfo/right/Asia/Baku","hashes":[{"alg":"SHA-1","content":"c671bf97fa3779b75701e7340b454b03856b50ca"},{"alg":"SHA-256","content":"13bd38a9c0ce6bced61470a9e1607102a92507b2f76acea80915cf78c2865703"}]},{"bom-ref":"fa0d478957d79bde","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bangkok","hashes":[{"alg":"SHA-1","content":"c2eb5f4d98754a726a9b126bb61aca6a4c0ee6ba"},{"alg":"SHA-256","content":"56d61c94060b0499266c2a030c27f25a6c391821bef831399cfa6eb199071f04"}]},{"bom-ref":"167777dcb845428c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Barnaul","hashes":[{"alg":"SHA-1","content":"57700f76a313f0a24cab435260068705c6b9efa8"},{"alg":"SHA-256","content":"68e5104678b502953b5cedf567ec1b4759fb1bcb64048746f036a8aae3b77024"}]},{"bom-ref":"6dac7f574585e5d3","type":"file","name":"/usr/share/zoneinfo/right/Asia/Beirut","hashes":[{"alg":"SHA-1","content":"9d1ba9541248f2986818873912ece6ec707abc83"},{"alg":"SHA-256","content":"125f9b422a41b2d9912d7c174668a59669e0e3819185120c425a02938f4a3d2e"}]},{"bom-ref":"a80318b0639317b7","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bishkek","hashes":[{"alg":"SHA-1","content":"f1916cc813c8a6a5bda998db477ae70cccc6b3a9"},{"alg":"SHA-256","content":"e4aab79412683540fc27cc280c5dee87dc7947190fb9f2515142f6452a1bc7fe"}]},{"bom-ref":"eb6f5708a1db6c11","type":"file","name":"/usr/share/zoneinfo/right/Asia/Brunei","hashes":[{"alg":"SHA-1","content":"61587dec2b519fee7fd7820aaa7d784ec0f16f9a"},{"alg":"SHA-256","content":"9adc933a0a54a5627fd65e9d3639e00a4c598a82e618e32fade0ba9e8877819b"}]},{"bom-ref":"0ce284c069b8a1d0","type":"file","name":"/usr/share/zoneinfo/right/Asia/Chita","hashes":[{"alg":"SHA-1","content":"584a9096f924b205b177f13ad2df5365ddd894e2"},{"alg":"SHA-256","content":"bbc04092231773f59fe0428b0aea5ba1853a12cbde571449b7d25bcf4ec8221c"}]},{"bom-ref":"a1f16b4ed5d00455","type":"file","name":"/usr/share/zoneinfo/right/Asia/Colombo","hashes":[{"alg":"SHA-1","content":"08ddfe25d9897f95d5eedcf2b68ab6ff25eb143d"},{"alg":"SHA-256","content":"a27175207e37cb41c70cdc3076dddab4467804a048c6062e9789c27392e4d678"}]},{"bom-ref":"f25d9c37cf138617","type":"file","name":"/usr/share/zoneinfo/right/Asia/Damascus","hashes":[{"alg":"SHA-1","content":"6008efdf5ae78779a4d1556440864f3ebce4078e"},{"alg":"SHA-256","content":"9baebd5afe21b9bac0e005aabb21139f6d634ceef1ef13ba6a643632cd4b9299"}]},{"bom-ref":"ad12acd4c448cb4c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dhaka","hashes":[{"alg":"SHA-1","content":"c4ccd917bb75528c8e060925789206721c3d97dc"},{"alg":"SHA-256","content":"b0dcb8055d121ee75ea824dafec593e1d7b13825ec4872bae67f1b3fa6eb326f"}]},{"bom-ref":"84a8349cd238364e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dili","hashes":[{"alg":"SHA-1","content":"4c7aeeac5c2169470ac11b6097cdf609f8b283fc"},{"alg":"SHA-256","content":"0aa64656ab81b69a6d5fc6586f8c2fd5134d5720741ed59da84805d100c09834"}]},{"bom-ref":"e70db9a71744e4e4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dubai","hashes":[{"alg":"SHA-1","content":"6bc2555fe459f583957571ed46eca5431100b8ce"},{"alg":"SHA-256","content":"269b7f669a494678f61c699926a83e19cbd74834c3a7c7f8e9f9a3b114abc677"}]},{"bom-ref":"7d55d4d48d5036cd","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dushanbe","hashes":[{"alg":"SHA-1","content":"14a6fc4de9b8a42ee4298a8f96276d09e0850535"},{"alg":"SHA-256","content":"e4b1972f16c3269ce8d710551157f946b20c7bee6fddfa4f3a4ba3eade18ae5c"}]},{"bom-ref":"b1fbf5df56167cd4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Famagusta","hashes":[{"alg":"SHA-1","content":"7e286319a36290c2cc960c3da675f9e024a941e7"},{"alg":"SHA-256","content":"38ca1fb07fc1517f4c0d5c582e0e54032256c600045d550cf8a0bf64a634fa30"}]},{"bom-ref":"9c9ef96ccdf7169a","type":"file","name":"/usr/share/zoneinfo/right/Asia/Gaza","hashes":[{"alg":"SHA-1","content":"f418d021e7342829f46fce72e952690bd6ebae3c"},{"alg":"SHA-256","content":"d01c6873112e968daaabb1e2da0504b954c331fdc1e4c0eb6e088433e31d8123"}]},{"bom-ref":"2b7797ee336e700d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hebron","hashes":[{"alg":"SHA-1","content":"234913018018aee552b674e5a47c9144c9efa39b"},{"alg":"SHA-256","content":"a6e931090ce0e778bb6fd4a8c8bf2ba57b482bc5b07ad58c1d21b070d269c2af"}]},{"bom-ref":"5305b81e9a766094","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh","hashes":[{"alg":"SHA-1","content":"8778e7bf0bc4842e2da303c5d856f6eb7d8ca0b6"},{"alg":"SHA-256","content":"54d8375da1153ca9c0fed172ccddd0416c985bffdb302c4645aa0f1ca40a1633"}]},{"bom-ref":"3a574ba90421783e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hong_Kong","hashes":[{"alg":"SHA-1","content":"c55448a120b8d938d9054eb16817f8f877d43a9c"},{"alg":"SHA-256","content":"e0f5651fd37c1eebde4899f819ef194ceb75d777c478e6f06ae80f38f1162cf2"}]},{"bom-ref":"504d5a0aca6c7859","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hovd","hashes":[{"alg":"SHA-1","content":"5a64d2ddd36ea8e6d2a67f053ef83a0325b23a89"},{"alg":"SHA-256","content":"959cf0c3d233d94d7310ff0eb989eb11913ed413a62b6b14eaf9d8d125c45482"}]},{"bom-ref":"3c23076727372046","type":"file","name":"/usr/share/zoneinfo/right/Asia/Irkutsk","hashes":[{"alg":"SHA-1","content":"eb6bb4e36c36e65cdc6a97ccd0b117500a86d3b9"},{"alg":"SHA-256","content":"4f6245423c1e7e3056f305ee8e3e005870c8edae97436824f8a63dad09a97110"}]},{"bom-ref":"3909830e45b343af","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jakarta","hashes":[{"alg":"SHA-1","content":"baa18c6a2f6c1268fad2a349ddccd896f3c2296e"},{"alg":"SHA-256","content":"a9db9b10ee7cb1b58d0a818a9ed337306bf3b36e72d51e321ee93120d5de6326"}]},{"bom-ref":"841dbb7ad1e1d652","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jayapura","hashes":[{"alg":"SHA-1","content":"35b496344ac8ced0239cd53a438fba1176a21b85"},{"alg":"SHA-256","content":"4a415c45d2a8c3b2a5b98fa3488c638c0bea23068444a5ee63569946fa1602ba"}]},{"bom-ref":"f29b4c3959bd7e61","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jerusalem","hashes":[{"alg":"SHA-1","content":"216c6059004086324edfd7e6fde867d15c16b1a8"},{"alg":"SHA-256","content":"561ca94f385a9a3ae2d2f126583f058c5a41b79ddb631ddfdb1dad89cc474785"}]},{"bom-ref":"2f71f73a108e3892","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kabul","hashes":[{"alg":"SHA-1","content":"cb8f62ca55e5397843f5ae3b003e3938f313f931"},{"alg":"SHA-256","content":"acb4de2e759e7ff52d1753d5769143d8773b4bfe02864e1920b6190b2bd711b3"}]},{"bom-ref":"321d34e41d6b5a63","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kamchatka","hashes":[{"alg":"SHA-1","content":"a3d0759d6fc7bc6e19036f8d7176933eb6e70674"},{"alg":"SHA-256","content":"eda5c938579a6c9d09b444c531131a3d1e285638ffa5dd01716c342c4b4ca32c"}]},{"bom-ref":"4061b5222a899c28","type":"file","name":"/usr/share/zoneinfo/right/Asia/Karachi","hashes":[{"alg":"SHA-1","content":"feb5dbd19a652c8b5272d5921257733543ec5318"},{"alg":"SHA-256","content":"b3e77e3d55fb25c1539b7402b1cffe69923c61dfc3e4e066e3c8b18036a03e67"}]},{"bom-ref":"811fddb8f6716538","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kathmandu","hashes":[{"alg":"SHA-1","content":"3eb74cd5c2b9bce5301ba10a6ce721d800d086b6"},{"alg":"SHA-256","content":"d84ff25d5e426a387be7cb43c6dec373eb0a5786ca8ed012f22265a58409ae12"}]},{"bom-ref":"cdaae8cf963e49fc","type":"file","name":"/usr/share/zoneinfo/right/Asia/Khandyga","hashes":[{"alg":"SHA-1","content":"514f047337042d73191912b086e8e71726ce61af"},{"alg":"SHA-256","content":"a3a00192c23dca487195fb1052614f9f45e8eb28613ad3f60bd2c05ee025ea3e"}]},{"bom-ref":"079017bea4e3e00c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kolkata","hashes":[{"alg":"SHA-1","content":"e75967f7b588713b168ddaad5ebfc3d625f6f873"},{"alg":"SHA-256","content":"5aedca0a7ca2f6b922dbe72b1d0337c7fad0a1ac0d1324ae00c9c7ae1b0a1da0"}]},{"bom-ref":"4ff510877a3fa52d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Krasnoyarsk","hashes":[{"alg":"SHA-1","content":"842e9568d7a093c3a984b3f7dc384c5a3de18261"},{"alg":"SHA-256","content":"d5aad53883e8f4102ac36004fb18fe8190420efef321493fec4d841149a7f048"}]},{"bom-ref":"9fac05751db4b1c1","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuala_Lumpur","hashes":[{"alg":"SHA-1","content":"5d8ee344f31974dba34796953baa704c67817c7b"},{"alg":"SHA-256","content":"10b524a13bf7f9ce8841fde6b18056af3fdeb04d82082185fd1370fbf6bf6bd2"}]},{"bom-ref":"25b80a06661bed11","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuching","hashes":[{"alg":"SHA-1","content":"8a0ad20b2293c0d559e1a0f52b168a8a2d671b19"},{"alg":"SHA-256","content":"cb7e07c9961c574660b9bdbb278dd4382ccb75e4cc90b508dd3158d43e159aee"}]},{"bom-ref":"1a82ba711a7e36e6","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuwait","hashes":[{"alg":"SHA-1","content":"aefb2417794eedff161ea1476e57b6f8431a8240"},{"alg":"SHA-256","content":"f72786cc7c95aaa4306f643f3853121438c22011a5cc4b01a3b5bb1527abbcf1"}]},{"bom-ref":"5c8d0ca56c4fa238","type":"file","name":"/usr/share/zoneinfo/right/Asia/Macau","hashes":[{"alg":"SHA-1","content":"df513329c7ecb3b537ccdcc126e7cd64dc58b400"},{"alg":"SHA-256","content":"42a94a491cb736e8e6aeee8029db913da52b61ad4ef3a8e40c0eaf99021407f8"}]},{"bom-ref":"d79e7685d869f608","type":"file","name":"/usr/share/zoneinfo/right/Asia/Magadan","hashes":[{"alg":"SHA-1","content":"75fdd76f325a3c1ce5facddbb454d07e52927cad"},{"alg":"SHA-256","content":"e8965008f29d641aa562f8d94abf0ee0b46bb44290cc7c037cfa390c7df0d744"}]},{"bom-ref":"908bcf6694b7bc3f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Makassar","hashes":[{"alg":"SHA-1","content":"098f08541ee2e73595df1f14be8785ebf0986b98"},{"alg":"SHA-256","content":"58844e488337822b18329633dd95dbbc5d353693b6515b62e065f77485a348ef"}]},{"bom-ref":"f643127cc48678c4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Manila","hashes":[{"alg":"SHA-1","content":"15ebac15a3307ee571c1e4004f9479d190cc1f49"},{"alg":"SHA-256","content":"0269207102f8a206b65e6fe7572a278f0d25968c8e3fa4f06a23c5cba26244e7"}]},{"bom-ref":"882af3b1814361df","type":"file","name":"/usr/share/zoneinfo/right/Asia/Muscat","hashes":[{"alg":"SHA-1","content":"4fdcc901ec39133a1ce22b1effab215300092044"},{"alg":"SHA-256","content":"cc2062a102fc2a6231bef3cd29e50eec9590fa31167ab08bfc44c976ebe9e4a4"}]},{"bom-ref":"cd200f1b3857a1ff","type":"file","name":"/usr/share/zoneinfo/right/Asia/Nicosia","hashes":[{"alg":"SHA-1","content":"b71f2ee7d21ff3e46cdfd5accd493ad35d6ac4c8"},{"alg":"SHA-256","content":"c7fdd02af527adf3d224dc926aa2a8257c417faa1796df72ed4cdb228e4b24f9"}]},{"bom-ref":"a932f1a69c47b65e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Novokuznetsk","hashes":[{"alg":"SHA-1","content":"9f0496c56ad807207f7449ba69c9a38985dd6ef0"},{"alg":"SHA-256","content":"f9ed2e9dbff7d79f00ed674fcef766464b758f709c229b88b64e3b8ff076ae42"}]},{"bom-ref":"8a25a843c0b3f566","type":"file","name":"/usr/share/zoneinfo/right/Asia/Novosibirsk","hashes":[{"alg":"SHA-1","content":"37fe8215163483b917d065eced0ce6b87c55c55b"},{"alg":"SHA-256","content":"74b0bae4d7a2811dc74ab5d61998868fd52aa9cdc56cc0c0b368603852ba1b5f"}]},{"bom-ref":"dfdcba3082235bd2","type":"file","name":"/usr/share/zoneinfo/right/Asia/Omsk","hashes":[{"alg":"SHA-1","content":"209abc5eb8f122d79130c83d98d1675cc197758b"},{"alg":"SHA-256","content":"2f95cff408878618a426e828d5892da9727957d0b9d3989bc70d0669e8d46b1a"}]},{"bom-ref":"7fcf665df02580e5","type":"file","name":"/usr/share/zoneinfo/right/Asia/Oral","hashes":[{"alg":"SHA-1","content":"cf3b3c9e6c844f65d8245c4f3bb6a680dfe83f99"},{"alg":"SHA-256","content":"8c308a10c4a4fcd85cb0abec2c008ac0e609ddcfd90fc6e7e89811ea3f5cfddb"}]},{"bom-ref":"fdc9021a978e08a3","type":"file","name":"/usr/share/zoneinfo/right/Asia/Phnom_Penh","hashes":[{"alg":"SHA-1","content":"d62255260bd08f5bf4fba1ae97a3f07a0aab27be"},{"alg":"SHA-256","content":"d50c4a2d02ad517081483a1cfc8295272551d09a470d56d55ff3ae0348e801ce"}]},{"bom-ref":"da2d9d3f502a3e94","type":"file","name":"/usr/share/zoneinfo/right/Asia/Pontianak","hashes":[{"alg":"SHA-1","content":"c23f44397252cf87b02bc2e7ebb92903ea0c8e8c"},{"alg":"SHA-256","content":"6316bc23dead48291325536f1a40a794754b4eb9d4a2442308c4871ed3ee75ec"}]},{"bom-ref":"cd4d7ccb5acbfc38","type":"file","name":"/usr/share/zoneinfo/right/Asia/Pyongyang","hashes":[{"alg":"SHA-1","content":"cf0a88a405627cf7ef739d4bc613edcf6269d3ca"},{"alg":"SHA-256","content":"4320cf5540d07f0c2089329cfed82c8f76cc78ede2e2a977c82dd049167da57c"}]},{"bom-ref":"96e48c07df228565","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qatar","hashes":[{"alg":"SHA-1","content":"a21776a94e1d302f522de0b0d7ab56d9987795f2"},{"alg":"SHA-256","content":"c4645ba9ae9716364ecad110eeba04436793aa779dd0b37387f06ddb2259d9d5"}]},{"bom-ref":"7060512bcdd5df1d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qostanay","hashes":[{"alg":"SHA-1","content":"b20cca844d01b17c4f3a221b9287972f68dd4845"},{"alg":"SHA-256","content":"ec32e8f7b2e1c0b21f6b77427fef4d009c08c4308075624e00b9f0bc4c89fc2e"}]},{"bom-ref":"2dbaceac49233a86","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qyzylorda","hashes":[{"alg":"SHA-1","content":"efc1ee38e98becc8eb3b8f2239756840a78a8f63"},{"alg":"SHA-256","content":"350b9834da1121bb9fa76b02b29fceb110ce232ce158f96a154725c76c90dc50"}]},{"bom-ref":"07efcef8d1f08fce","type":"file","name":"/usr/share/zoneinfo/right/Asia/Riyadh","hashes":[{"alg":"SHA-1","content":"10091d38d70eae4ff4112b0cae7a60a6f503cd91"},{"alg":"SHA-256","content":"78486e0bf1ff2cd8061ddd75d7a7e3042d51d88b76a9423fbd208ff09eb081cd"}]},{"bom-ref":"12b723b9f677b685","type":"file","name":"/usr/share/zoneinfo/right/Asia/Sakhalin","hashes":[{"alg":"SHA-1","content":"552bda9da45ff42987dcacef148f7eb8546ff707"},{"alg":"SHA-256","content":"b035c80258615cf436436ad5e7a27d53a9c6ad94c971a76c5990c271629bf33c"}]},{"bom-ref":"c25279645bc60a85","type":"file","name":"/usr/share/zoneinfo/right/Asia/Samarkand","hashes":[{"alg":"SHA-1","content":"f80410e5b87c80358e45c1fa2644a769e2d6242c"},{"alg":"SHA-256","content":"32d905f89ae3e49bc688d95bc069d06a8e5725a21a724d38b5fcf63213bc085f"}]},{"bom-ref":"77600805d5be4848","type":"file","name":"/usr/share/zoneinfo/right/Asia/Seoul","hashes":[{"alg":"SHA-1","content":"60b719fec58da6413919188f5f42cde268ffb99d"},{"alg":"SHA-256","content":"00b0e44de6984da2f3230e52edd7d63a09b8dfed5b52656f3f23b731757c93ac"}]},{"bom-ref":"0e8966fa60e73ffb","type":"file","name":"/usr/share/zoneinfo/right/Asia/Shanghai","hashes":[{"alg":"SHA-1","content":"ee7b22e861e66eec0410a6f49a5436538ad3c290"},{"alg":"SHA-256","content":"147c25611ea693672d48452b7c9bdb17a5dcf88f32d682f8401115fee482b7c3"}]},{"bom-ref":"22ee118c698c96c4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Singapore","hashes":[{"alg":"SHA-1","content":"f2eb6565876a8ff7ea7856e58b85fe40edb34830"},{"alg":"SHA-256","content":"f3e4a4a48a066284b83e08d6cf9b35e7b1a5ec8f475c4b573849ef11f0487f23"}]},{"bom-ref":"bcef5b888db287f2","type":"file","name":"/usr/share/zoneinfo/right/Asia/Srednekolymsk","hashes":[{"alg":"SHA-1","content":"945c2888d1bd68b20d28d11bd12e130a03cf457f"},{"alg":"SHA-256","content":"e39be48b16030bd1ffd7f2739ad429edaabec5e5f26f4d94e25f1b71addb5915"}]},{"bom-ref":"c19847daf7bbd5a9","type":"file","name":"/usr/share/zoneinfo/right/Asia/Taipei","hashes":[{"alg":"SHA-1","content":"369e573419de86bf7feb7a9b4120a32e93295f02"},{"alg":"SHA-256","content":"2f7d96b08f42e610575770add87d902142a56054760d143f1a9219f7efc95da0"}]},{"bom-ref":"f140553b24314c06","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tashkent","hashes":[{"alg":"SHA-1","content":"3c603997eb81b5fad13aa3a80d6fa623b169f40a"},{"alg":"SHA-256","content":"81a146a24fe5a9be316376c88d173d199071d8ca56fa1e670766921262653131"}]},{"bom-ref":"c03090dab696ad24","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tbilisi","hashes":[{"alg":"SHA-1","content":"e80e6272d8f24ac4636a20500b926413dc227b7e"},{"alg":"SHA-256","content":"fe786fa5d7ad3261005e6a7129fae7aa50b10da2e7efcd3d12db965b2887bdd7"}]},{"bom-ref":"48818fcc35bd4005","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tehran","hashes":[{"alg":"SHA-1","content":"3ef4ed94ecf7f2de0fa072e7248bbb8760744137"},{"alg":"SHA-256","content":"db2bfc2e8770a0c997642c0cfd56f6966adcff22a73e23907a2ee0383f98b0ea"}]},{"bom-ref":"3e5974d4d37f5376","type":"file","name":"/usr/share/zoneinfo/right/Asia/Thimphu","hashes":[{"alg":"SHA-1","content":"cf30d448bfefecdfc5ba952dcfe279a32329be44"},{"alg":"SHA-256","content":"ef5c17835489e6293e403342bca593692c0715e61ffc258ac63b4b9b6be24ff7"}]},{"bom-ref":"1ddd8713cc1c04d7","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tokyo","hashes":[{"alg":"SHA-1","content":"f8057935f395a3261a28e9fe9c1ecb131fd1efa9"},{"alg":"SHA-256","content":"4a6189fc055f0b721b0169c1420b7a6559587ace60c98844567d92609d6e7143"}]},{"bom-ref":"b184a8f21d54cb63","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tomsk","hashes":[{"alg":"SHA-1","content":"e55be83c891bb5e38f678c05a4eafde69da17267"},{"alg":"SHA-256","content":"712462f1ea6a43b1a695c5a3e282c2ed73e79e046875b1015be77718b2e464d7"}]},{"bom-ref":"51ce82a5a355ef69","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ulaanbaatar","hashes":[{"alg":"SHA-1","content":"63e0d1cf887c60fd6867672a9a105ed73061f661"},{"alg":"SHA-256","content":"c7c8a2d4d188afb55f5ea4e130e7f40c531dbded7357b2a1522274091d2d45cd"}]},{"bom-ref":"391e2ad8bf08498e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Urumqi","hashes":[{"alg":"SHA-1","content":"6b922b8ab6cdec3d7ceaa36c6877093d525522af"},{"alg":"SHA-256","content":"d0ee4ad382e2cd21d717dd01741904ca11d92b49f146d2e3e121081c1214310a"}]},{"bom-ref":"5a2b9614d9327b13","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ust-Nera","hashes":[{"alg":"SHA-1","content":"0cb4e2af8318d3f35d15b64b0303f428edbdda64"},{"alg":"SHA-256","content":"342bbbaa257b9c72f77c7154787b8b3711261088e4e4445b9017c7cd17942156"}]},{"bom-ref":"5a442790a1b5a7cf","type":"file","name":"/usr/share/zoneinfo/right/Asia/Vientiane","hashes":[{"alg":"SHA-1","content":"f0ee17ffd2b0d656035064e033f32e2809d317b9"},{"alg":"SHA-256","content":"7dde1ef9d279df409a492ddb9a2060b588369434b76810e216784ca5d4ad8bb8"}]},{"bom-ref":"77fddb33e55d715e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Vladivostok","hashes":[{"alg":"SHA-1","content":"3a84100c476fae5250ab7d77d75a62edda0ab929"},{"alg":"SHA-256","content":"c67478d9de6b2afadb23f1adaa6c11d79031f2a0bdc6b34ae53fd44e9c2a6e32"}]},{"bom-ref":"68110912f0fb183c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yakutsk","hashes":[{"alg":"SHA-1","content":"23dd762a22f73a88d23c55dcf0a3cd2fed34c0be"},{"alg":"SHA-256","content":"43f7af466eeadc5ed49a92a1a1d89938087c0f14df688236b20940674e9a1dee"}]},{"bom-ref":"3d3bd62ed4d4a2cc","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yangon","hashes":[{"alg":"SHA-1","content":"8723489ddade2bbc38c91c9de1a8e4f6cb124a73"},{"alg":"SHA-256","content":"7c4532fa68cc0d4088aef81c46f6513a3b491a2403c61cd067fab272b65afef6"}]},{"bom-ref":"53cbe8deb9476c7d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yekaterinburg","hashes":[{"alg":"SHA-1","content":"a567617cd2d270b8671794a6059cf391a9ff4a83"},{"alg":"SHA-256","content":"3124517166dc4f6621355fac1a7416b330a8f8abe7a4c26d9aa6135c7482f097"}]},{"bom-ref":"724038a157e76fa5","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yerevan","hashes":[{"alg":"SHA-1","content":"9d852c7dcd75a3a31a667cd351560ec8a8ceec11"},{"alg":"SHA-256","content":"4e324f98813737c6c4a0dc73a5bc6cbdaede59527bf540a42419b0f72e69bb3b"}]},{"bom-ref":"f91ee936e176242e","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Azores","hashes":[{"alg":"SHA-1","content":"910a7d17708a90204a325b4ef43421f1ff346988"},{"alg":"SHA-256","content":"aca432a49083e15fdf83346a91ae4111d72e5cd15d1aaf114dd34d4b38f645de"}]},{"bom-ref":"f0c513d2d982e2b6","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Bermuda","hashes":[{"alg":"SHA-1","content":"45e7e25d86771deeef6a75840c4ba7907901ceb1"},{"alg":"SHA-256","content":"928e47d23cb79cfd26a3f70d53e6d48d21fcccd56120e884aa98fae1e4acfcbb"}]},{"bom-ref":"90ec85d4ff28eed8","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Canary","hashes":[{"alg":"SHA-1","content":"b692b463d7f957b385aefd95f68420c8d76a0c17"},{"alg":"SHA-256","content":"26c11434d2d6cf360e17185d019cbc2d452e624eb1187ce369a986b89546c496"}]},{"bom-ref":"fbde77c62e659a4b","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Cape_Verde","hashes":[{"alg":"SHA-1","content":"7cf6de08c34153d6007baaee55e3a6cb66ef380c"},{"alg":"SHA-256","content":"419bb9a29e239d8cef3aae841798ccc151552d41fab0d1573fcfded6451b65fe"}]},{"bom-ref":"c8c035bc8a75e84d","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Faroe","hashes":[{"alg":"SHA-1","content":"9777d335a31ff3823ee141098680952dc39332e7"},{"alg":"SHA-256","content":"2b5f628c0a8adc4a3bcfe61b1b86540744d3bb74117cdf9b57206d323d51138e"}]},{"bom-ref":"7e0a7472c7056b1e","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Madeira","hashes":[{"alg":"SHA-1","content":"f30d9dc0bd9c2f87fecb0c379b4c5046a160b4e2"},{"alg":"SHA-256","content":"1315be50e321dc6825ae7982d281fe47c6feb23b044752390b57f49229105d87"}]},{"bom-ref":"c72431a41f236fcd","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Reykjavik","hashes":[{"alg":"SHA-1","content":"2af99bf994923320deaf223b453320ab44687610"},{"alg":"SHA-256","content":"49a02d3fa5ef55a1f0f9a044e4e7de92a31aebeab2ea8a2cbdd7b2c7e26b87fb"}]},{"bom-ref":"e9c77e27790ea2d1","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/South_Georgia","hashes":[{"alg":"SHA-1","content":"9cf8b31671833e1515b0558ac0aa7404af06fcd6"},{"alg":"SHA-256","content":"c53121badf3ae6e22e0ed111bec4ccbee15f1880d1cb45d0f35d3666589ab07a"}]},{"bom-ref":"d98e1593394fe74b","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/St_Helena","hashes":[{"alg":"SHA-1","content":"d44a69000fff12778a8636b720ce7c8e229193ab"},{"alg":"SHA-256","content":"18811a731720d65332366fb456dc600d4dc9b33b0e67b55981e539efafb38fec"}]},{"bom-ref":"b2120856a007fdf9","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Stanley","hashes":[{"alg":"SHA-1","content":"25e11b8c53a9d24d56aeefb9e6bf498ecbb1d43f"},{"alg":"SHA-256","content":"3da3cebf24e22f0aa70dc5140fa21199ab9f95d596315f96598ff0ba63b09d41"}]},{"bom-ref":"10bf96265f6ce04e","type":"file","name":"/usr/share/zoneinfo/right/Australia/Adelaide","hashes":[{"alg":"SHA-1","content":"e01bc1ea9c0297d7470ef584ca99193b3b607b5b"},{"alg":"SHA-256","content":"cbd56ea16699dea527824a625260c35d417ae7ff8184b576767c2625964dbe40"}]},{"bom-ref":"80a43b75be6dac64","type":"file","name":"/usr/share/zoneinfo/right/Australia/Brisbane","hashes":[{"alg":"SHA-1","content":"e48222d0ba91c780e5286a32deb36e6d460e849a"},{"alg":"SHA-256","content":"3d4f4023387481cba61d3ee9dbc30f3fdcc47ec7390fc677ea7deabffb269787"}]},{"bom-ref":"4911d5cdffd282d6","type":"file","name":"/usr/share/zoneinfo/right/Australia/Broken_Hill","hashes":[{"alg":"SHA-1","content":"4c444b212afe3ad85aa669fec03cb1ad47dcc58b"},{"alg":"SHA-256","content":"843d5b181791c8e642b846af59ecddd3d0d3f663fc45b2daa1400242ccb41eeb"}]},{"bom-ref":"0f4dcf2dde0e3640","type":"file","name":"/usr/share/zoneinfo/right/Australia/Darwin","hashes":[{"alg":"SHA-1","content":"45a662e8a3562cdb9a22413acf920f0f025749fe"},{"alg":"SHA-256","content":"b38437f776ad53a7bb0c7a1e4f461ca0c7f909e03c6127760cb3d9ddacf805d9"}]},{"bom-ref":"c2d44ad327a52e77","type":"file","name":"/usr/share/zoneinfo/right/Australia/Eucla","hashes":[{"alg":"SHA-1","content":"af003ab634a220b91ceae8183fbd6a4c9cddbdeb"},{"alg":"SHA-256","content":"8ead2180040081eb141df03466b0765dc47b2c02264422160c49ff9e3b2623bc"}]},{"bom-ref":"0cb34881be10c495","type":"file","name":"/usr/share/zoneinfo/right/Australia/Hobart","hashes":[{"alg":"SHA-1","content":"b73d32935c2ceb76025405bd5291eb41052cbc7a"},{"alg":"SHA-256","content":"dbe33eddef2867ab93587e8e0393b3ecf2b0e4140301aa6a6d7a1629b26bfa74"}]},{"bom-ref":"99f820ae8556130f","type":"file","name":"/usr/share/zoneinfo/right/Australia/Lindeman","hashes":[{"alg":"SHA-1","content":"3ff73c1b2441a2ffe3fcc94d10d3d1793ee3ee68"},{"alg":"SHA-256","content":"44d0132eb3f1fca853573a8cd2a685ddeb98567265ae32d857190de93fb2753b"}]},{"bom-ref":"4d0091f4f7944fb7","type":"file","name":"/usr/share/zoneinfo/right/Australia/Lord_Howe","hashes":[{"alg":"SHA-1","content":"e9f9b1cf7e969aa70eb5376a1959fb3793da8a2a"},{"alg":"SHA-256","content":"ad7498e17538fa2dd87e8aeb55d4cdae6d3554b0114c58a67d82360c33063457"}]},{"bom-ref":"d09cceea30c1b976","type":"file","name":"/usr/share/zoneinfo/right/Australia/Melbourne","hashes":[{"alg":"SHA-1","content":"8405b418a3b78601cae6c6fc4e172126549e1639"},{"alg":"SHA-256","content":"ab3590bcdb1b4e0d8b858d98f7cb07f3349bc72fa6976e1f89ffb52217b6eb61"}]},{"bom-ref":"8abe03c4fab0dd1e","type":"file","name":"/usr/share/zoneinfo/right/Australia/Perth","hashes":[{"alg":"SHA-1","content":"fa4fc189d8f15deb0bdb1ee15258df9e7afc0235"},{"alg":"SHA-256","content":"af5807c8d6ef1711d674d1f8b73876983d80a4f001a720b95e9e0d6823db6a45"}]},{"bom-ref":"954d5fa1269df2b9","type":"file","name":"/usr/share/zoneinfo/right/Australia/Sydney","hashes":[{"alg":"SHA-1","content":"3edb56daf915d4c4c4df3400498faaacd41dbda0"},{"alg":"SHA-256","content":"8f313288c38ffbf9b3d6335c5ea33ae8a2ca66d7381274f7a819cc97bf64f582"}]},{"bom-ref":"6163fcb97e58d539","type":"file","name":"/usr/share/zoneinfo/right/CET","hashes":[{"alg":"SHA-1","content":"5129a3782fee58d043d4af56f8b068c4e85efaf2"},{"alg":"SHA-256","content":"b9cadafd0fbef6e3707510ab5533690fd407a4cf3119bef19cbfeb0a8d86b379"}]},{"bom-ref":"3850b838f84da87b","type":"file","name":"/usr/share/zoneinfo/right/CST6CDT","hashes":[{"alg":"SHA-1","content":"023f67b70ecbd82f26bf1226cc2f77d79f37ad14"},{"alg":"SHA-256","content":"fd8766a36398bf4d34e01598f80502f7b0e8a42092cf9fe53662481e473795f7"}]},{"bom-ref":"65ea3909ff2f6d89","type":"file","name":"/usr/share/zoneinfo/right/EET","hashes":[{"alg":"SHA-1","content":"2c81584304b190ad8c5a72ad1c7c42b97c4b2e86"},{"alg":"SHA-256","content":"cd9510c46c93a82275234420ff0f2bc0564a79392e3785b1093a4c090bbbec68"}]},{"bom-ref":"2897d9d277de14eb","type":"file","name":"/usr/share/zoneinfo/right/EST","hashes":[{"alg":"SHA-1","content":"0d22d2ebd28cc6bec74d6855457fd5f018d385bf"},{"alg":"SHA-256","content":"88ae9fb1b14fea969b4be3483ba796f024d887676f0d1c752a83e5f51ddc898c"}]},{"bom-ref":"33f6c1d2c4877bdf","type":"file","name":"/usr/share/zoneinfo/right/EST5EDT","hashes":[{"alg":"SHA-1","content":"af703cbb06dee603675591df1da7935e9c4d3ada"},{"alg":"SHA-256","content":"d7599b36d9dc694d22da8d4f6e3c3d2e9aad4ea771ac34a6de11e77e754f1aa3"}]},{"bom-ref":"c53fa08ec3cc547b","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT","hashes":[{"alg":"SHA-1","content":"4a34e9552e5ee45e445ffc91685751516ac360a4"},{"alg":"SHA-256","content":"3804d727e70dcb1c5abef681c418735d27abebb676f5f800f53811e34724d1f5"}]},{"bom-ref":"a4d242987e72050b","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+1","hashes":[{"alg":"SHA-1","content":"4f33f1059df0d9da65f6567f5d4e2eee268e1b5d"},{"alg":"SHA-256","content":"9807d08f1eaab8e1c05bde989c86e675659afdf16272fc4f35082fa29e4d8848"}]},{"bom-ref":"80ed0f9d31324427","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+10","hashes":[{"alg":"SHA-1","content":"215df374dad5942e1e14bb69f8a88fdd1649e604"},{"alg":"SHA-256","content":"9e8d66b98c84088924313759b06332f73902194664d0e1f4383bc58054e2ccde"}]},{"bom-ref":"e1881495a993b113","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+11","hashes":[{"alg":"SHA-1","content":"9de57eb4052575240518f7a53644901536554daf"},{"alg":"SHA-256","content":"1427cf1e8ebbe985e83018a4d4fc07fa18bb7188ab135b852c38c8582ba22358"}]},{"bom-ref":"bd8a1b9a98ea7e55","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+12","hashes":[{"alg":"SHA-1","content":"a9067e21247d554f2e43980e33a26048889f9348"},{"alg":"SHA-256","content":"1cb0d227ecf8cd94b61de79f18e3ca071a5850cd02d43f24c1804345131d5cc8"}]},{"bom-ref":"fbc4bfaea748ae41","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+2","hashes":[{"alg":"SHA-1","content":"2be6cd87a47510f1240d393fb84a8402e3d34d8b"},{"alg":"SHA-256","content":"064ec7ed36edc90d2e9f4cb624c62537c4dbedbe4fdda328b3fea0997b621c95"}]},{"bom-ref":"1f7f690b91f9481a","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+3","hashes":[{"alg":"SHA-1","content":"6f60a0dfaadd184ba435dc146f94ba6918e32dcf"},{"alg":"SHA-256","content":"ca6f605553f3288630d31c2f2422b2c777ab342d2b5ca5ae35a1a1686cd1b2cd"}]},{"bom-ref":"8444d6eadc1b15e7","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+4","hashes":[{"alg":"SHA-1","content":"bf4f4aa2bece20a997627b6013ec1ee4b92a640f"},{"alg":"SHA-256","content":"858a1dc720f8fc464bf4b02e124f5beccc8af7956cbf920808570d8315889852"}]},{"bom-ref":"56466c6989fee17b","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+5","hashes":[{"alg":"SHA-1","content":"06f4752add301cf3696d287966265190bcb6a80d"},{"alg":"SHA-256","content":"6568675cca222254c6b0d85bd6a129e55839b3387fc11fa293c02947c71ed43f"}]},{"bom-ref":"a907f52e515f73ee","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+6","hashes":[{"alg":"SHA-1","content":"a579d75959e5ebfeceadeb35c155c1e02a9b4c8c"},{"alg":"SHA-256","content":"055138518b039befae0afadd3021f8d9acd752a3b75e02e14d61eac77cc70c4c"}]},{"bom-ref":"ca9cdb6f0bddd968","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+7","hashes":[{"alg":"SHA-1","content":"6473f1ec7188501f7226e258803ab97670c409af"},{"alg":"SHA-256","content":"f9e993977ffa8a30b982bde16594fbb140889de9d7cfcf4a8acdef7f4e3d292c"}]},{"bom-ref":"345a6850e942880e","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+8","hashes":[{"alg":"SHA-1","content":"f9f3d8d22d29337f962c21cbf76d71c351a47fa4"},{"alg":"SHA-256","content":"4ac3ed85edc42c9d2cbae63a424caf391d91d8c16cb47d2c95c78967bec650a0"}]},{"bom-ref":"9d7b3cf8414cf92d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+9","hashes":[{"alg":"SHA-1","content":"bb49bd7a9044ee856166162edc83177f5d6408ce"},{"alg":"SHA-256","content":"9f22a09a37b69ae6f1089f94582bebaf14e22d3a976b65ac68a716607fe0503f"}]},{"bom-ref":"f9a517c3c1d4885f","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-1","hashes":[{"alg":"SHA-1","content":"170451e34dd69f4e89cc61d73276987a2be900df"},{"alg":"SHA-256","content":"a3f3ff9d3b8aa33a421a7d1a7b2175b91e206b26ac8ca1ac482dd23b5b3baf62"}]},{"bom-ref":"4ae5f892dd30b96d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-10","hashes":[{"alg":"SHA-1","content":"187e93f28839514301e7c464879b86081af0edb4"},{"alg":"SHA-256","content":"515daa6d5cfae809fceb66c6e4e9a0ce5e9b2388e8409f230e296b1f9adb5d2d"}]},{"bom-ref":"a5f016bc527e003c","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-11","hashes":[{"alg":"SHA-1","content":"193a32e9d780507d11a91fdb56e455172bece2e0"},{"alg":"SHA-256","content":"e43ad155b68c2b0f51abbd4f359613ed29993b5e19d87e5c1b2c2f7d16831741"}]},{"bom-ref":"de6622dd32a0c47d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-12","hashes":[{"alg":"SHA-1","content":"4cc65799b457a9c0e3bd41ea419e6f377326e7d4"},{"alg":"SHA-256","content":"23783d0cfd426d2f5a785d8b445089c09790089117592973f40dc94d5dd807b7"}]},{"bom-ref":"737bd7c36152aa5f","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-13","hashes":[{"alg":"SHA-1","content":"c5ba2aa972b7205c5623407e3878f301805d629c"},{"alg":"SHA-256","content":"37432010d9d43b9be4529e96db967ce3c0253add9e683ec8c87dfe25581351f2"}]},{"bom-ref":"d8947aab9c4454ad","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-14","hashes":[{"alg":"SHA-1","content":"ada6ba394c4149f94529b064363b60f671aea9e5"},{"alg":"SHA-256","content":"7cfe25f42836c0837bd6c2db51f4f0b17feaaa74fe705625187564b60ffb8b6f"}]},{"bom-ref":"e56f485348ccbdfa","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-2","hashes":[{"alg":"SHA-1","content":"7c11bdbe7581c8fefcd0630f39be4eade1038a1a"},{"alg":"SHA-256","content":"ba1b7515c09b32f4a7d17b8b17e864aeffc0d04070a7a31625d00cc5eb558eef"}]},{"bom-ref":"ccc2f98831d65736","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-3","hashes":[{"alg":"SHA-1","content":"860b57120c333836dc83e90a6222ff147db62aa5"},{"alg":"SHA-256","content":"7e6c3f695beb7f8390c31fc02c5cbb87d76905de7b09665279b4b645fb32333c"}]},{"bom-ref":"0d5c959ef6eb3483","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-4","hashes":[{"alg":"SHA-1","content":"5f85bd9a351cc9c7bd6ea56a36a4ac2c1c25815c"},{"alg":"SHA-256","content":"d28da5a3b197493417466b6629855dc7dbeee3e527fdafb3b2649f693b651b13"}]},{"bom-ref":"bb31e4d61a1852bb","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-5","hashes":[{"alg":"SHA-1","content":"2dbd1e01dbb9860724f53d3227cece34c3d11f0e"},{"alg":"SHA-256","content":"715da670ed52202917bcda9bf60965ee92284c42e4ef160dee83f6fc03e991eb"}]},{"bom-ref":"08dad68ad0fba2a0","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-6","hashes":[{"alg":"SHA-1","content":"3172733e83156ca8854418139fccb26c12e29640"},{"alg":"SHA-256","content":"c90012a89dbb5257bc781f68c7702c3312e0cbc2b11d225e3309545359458a62"}]},{"bom-ref":"e70bceb8115fe99a","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-7","hashes":[{"alg":"SHA-1","content":"2563a610f2480c0f58e9a60895484eaeeaa3172e"},{"alg":"SHA-256","content":"c33d01ace2b6e161850cc1cf0e695b0899d6acd20c8a8e2de7a1e39ee5a3d723"}]},{"bom-ref":"53f71d02c3c8c4ca","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-8","hashes":[{"alg":"SHA-1","content":"4b3142ec3e858f873076ef87fe7217a3ec481221"},{"alg":"SHA-256","content":"9ea2fff88e752833ba5fa0516731ec9b4ae20d81fe39f1b8f443264a9545dd4c"}]},{"bom-ref":"4dbc8ee4a295c2e4","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-9","hashes":[{"alg":"SHA-1","content":"b01ab67156077268b3536ccdc2b07032d7923b6c"},{"alg":"SHA-256","content":"df80256e3dbaf7703b48fab95b314d1612f9907a8460cecffed84a40b48fe275"}]},{"bom-ref":"d09ab47f07d58e51","type":"file","name":"/usr/share/zoneinfo/right/Etc/UTC","hashes":[{"alg":"SHA-1","content":"111d2c61fb6bd6c10f42aa22d0004e70ca818858"},{"alg":"SHA-256","content":"f8bcb8fc856b653c65ebd02e409502fcdc31acf111990bb5051daddcc9221ca7"}]},{"bom-ref":"45a699d3eca7a12b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Amsterdam","hashes":[{"alg":"SHA-1","content":"b12776c72937509298ac771c9df476aca0ed1d7b"},{"alg":"SHA-256","content":"dd46a1d2fa6b797feca56be959154b76e6c7f2a3c59d3f580159f99e6152092b"}]},{"bom-ref":"9a122121da594ee0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Andorra","hashes":[{"alg":"SHA-1","content":"2bf800aefd16ab3f73f4636668ff67beea4ee383"},{"alg":"SHA-256","content":"6922f62ce642699a113b6de3bc749036328772e8f799ea68235e6ceb83fdcfd5"}]},{"bom-ref":"9ac6d69d780668a2","type":"file","name":"/usr/share/zoneinfo/right/Europe/Astrakhan","hashes":[{"alg":"SHA-1","content":"e5c843523d009641618742f84e6e4d9361c8f828"},{"alg":"SHA-256","content":"cfbb6e3d456dea0a9cd8149b35a4ba20b28cf8f61f6f2d41db20c9750094ecc0"}]},{"bom-ref":"2d03892900a53cbc","type":"file","name":"/usr/share/zoneinfo/right/Europe/Athens","hashes":[{"alg":"SHA-1","content":"973dd2a8ea7b6cb729f861f939088a9d7ddc6b60"},{"alg":"SHA-256","content":"0b21aab978ce80d4e8f6305dfd1cb7a3bded1cef5511c1c6ac3e4c79e0e7942e"}]},{"bom-ref":"ed5f2a612538ffe9","type":"file","name":"/usr/share/zoneinfo/right/Europe/Belgrade","hashes":[{"alg":"SHA-1","content":"23afa3da9ab83fcd71ca99a697549ad31c37d021"},{"alg":"SHA-256","content":"dc2cc1a99358d686b03b0f16843eae9f97c4a7e69446f952eab54158a899fc46"}]},{"bom-ref":"2d260805cf2aed5b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Berlin","hashes":[{"alg":"SHA-1","content":"761bc63c469bbbb12665a9196525ff17a5e97c43"},{"alg":"SHA-256","content":"40abb3fb1825c7909ca9f4140133a794d25ce30f2d09c50146b53bbc45677ce3"}]},{"bom-ref":"edc57f353314e5c9","type":"file","name":"/usr/share/zoneinfo/right/Europe/Brussels","hashes":[{"alg":"SHA-1","content":"9317364d8157eef934bd80e6f2f4b246aca625e6"},{"alg":"SHA-256","content":"a989163f00fcf4cd9cbc121a51084fc00f163617fe8a9d2d3180e9a082ade4ee"}]},{"bom-ref":"56efc5bb63a33bad","type":"file","name":"/usr/share/zoneinfo/right/Europe/Bucharest","hashes":[{"alg":"SHA-1","content":"c0c85adef393ffa1f0ac36d7ea9a4ddd2dd8cbf8"},{"alg":"SHA-256","content":"45adf23c78a4e981c7103bd7021c5cdd9a59a5eceb3c4550c1e2bc22da4238eb"}]},{"bom-ref":"aac67a36012ba0db","type":"file","name":"/usr/share/zoneinfo/right/Europe/Budapest","hashes":[{"alg":"SHA-1","content":"5fcd187893f877966293823b2a6ce90b98d1700d"},{"alg":"SHA-256","content":"43b843c734dceea52f591d8dde6429cfc2079961f63c72cb6689e0d945271c10"}]},{"bom-ref":"4d953bea1b529cb0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Chisinau","hashes":[{"alg":"SHA-1","content":"2607cf44a12091bb88e8e9b99ebe852d0bc4cfcf"},{"alg":"SHA-256","content":"7a68b7675fb2d25d20d140044c13b79e108b9baae837ee4bac5e2e5186f449e2"}]},{"bom-ref":"5a1ea27558b890ac","type":"file","name":"/usr/share/zoneinfo/right/Europe/Copenhagen","hashes":[{"alg":"SHA-1","content":"1fda5129e91dfb0dc450d39131c1dbe97e8e8075"},{"alg":"SHA-256","content":"e5a59ef5829313b22afebbc2b057fef2a4185960224575f47ea7934d3689e601"}]},{"bom-ref":"04e21cc6b4b3c683","type":"file","name":"/usr/share/zoneinfo/right/Europe/Dublin","hashes":[{"alg":"SHA-1","content":"e78a22f74d85e7b32ad7ba608db4c6c6a993602b"},{"alg":"SHA-256","content":"ab46325d579dcae515baee81d73b01508f4880a0b7599676b4bde4928d9fb993"}]},{"bom-ref":"cb8f8f0aa46b0bf8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Gibraltar","hashes":[{"alg":"SHA-1","content":"f8c61fc6052d74c7f95b7240458d78cce23cd171"},{"alg":"SHA-256","content":"251bd094e4cf334ba25b36bbf51947d2a2d44d4416f23ca9595b5e13de05458e"}]},{"bom-ref":"f2425f2206602fa6","type":"file","name":"/usr/share/zoneinfo/right/Europe/Guernsey","hashes":[{"alg":"SHA-1","content":"c93e3bdba107a2057778727ddf61002bdcec0bcf"},{"alg":"SHA-256","content":"cd5225640b2bc6a4086f8a926a8e441a34e4d836cd94c8f8026de8948a9fe119"}]},{"bom-ref":"d54d24ce13d78fe5","type":"file","name":"/usr/share/zoneinfo/right/Europe/Helsinki","hashes":[{"alg":"SHA-1","content":"d1c968c3b71016918710dbe5a4fd18721a833e0e"},{"alg":"SHA-256","content":"bd7f3f21517c31c66156d5269f79cda648865dbcd1abd982984837c1444750eb"}]},{"bom-ref":"9dd75ca5f6545667","type":"file","name":"/usr/share/zoneinfo/right/Europe/Isle_of_Man","hashes":[{"alg":"SHA-1","content":"80970e4edeaa5642b3254f82df0c287fef888ef0"},{"alg":"SHA-256","content":"6aebb11706db6559a1835dcf30c8ff4a07b0509050dd3f51ba1f67e3dda4af4d"}]},{"bom-ref":"0fc19bac6850c743","type":"file","name":"/usr/share/zoneinfo/right/Europe/Istanbul","hashes":[{"alg":"SHA-1","content":"dc604dd8d3b9d671ecce89eb3a204edee1f59ec2"},{"alg":"SHA-256","content":"95aaca00415efde931399abe8bb938232ea511ae5a07d3b7020311f0d15ca978"}]},{"bom-ref":"8e5acc280745a1a0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Jersey","hashes":[{"alg":"SHA-1","content":"462580d6c9187b20efa2b08dba20b9a895dc8e32"},{"alg":"SHA-256","content":"f541db8be15d0df9724c856be89e689d1af207ab6fe704732ec6b7b747f49dc4"}]},{"bom-ref":"5ea9af0acc598734","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kaliningrad","hashes":[{"alg":"SHA-1","content":"c18bb63d538cf84e00e9118efe24071cad5568fa"},{"alg":"SHA-256","content":"dcc68ae7cb182f4ed535e6eeb0403e6a22976409e85497e754872c8a212ca11e"}]},{"bom-ref":"ef69a6e460a37ab8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kirov","hashes":[{"alg":"SHA-1","content":"b80a1d03a6ac7a6c157af580c6b54ee51190317c"},{"alg":"SHA-256","content":"53de74114fbee3d569213704c6f9d4358a6f0e8aef641dd5838c0de1dfc97b8c"}]},{"bom-ref":"aaec45caa2602cc6","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kyiv","hashes":[{"alg":"SHA-1","content":"99f6ff708276dc72bd3a6118d38b41d19a960c3b"},{"alg":"SHA-256","content":"78e185706f0749f67739a0ee28f216e81404766bfb85585a3cdb955b45c808cd"}]},{"bom-ref":"ab6f7bb4a3749c6a","type":"file","name":"/usr/share/zoneinfo/right/Europe/Lisbon","hashes":[{"alg":"SHA-1","content":"2b63f69859e1840fd9919b164b8b798460332162"},{"alg":"SHA-256","content":"5e5a46aecd0c4fe0334e62d3aa1ca7e1c5831101b9bb270ef487c1b484b84466"}]},{"bom-ref":"c69e777fa5d9860a","type":"file","name":"/usr/share/zoneinfo/right/Europe/Ljubljana","hashes":[{"alg":"SHA-1","content":"7c3cde533225f9719da4e9c2dfdd9d2f0d38f316"},{"alg":"SHA-256","content":"3d8993d2ddff775ec371d0873368307ddffc2e8b472cade67259a2bfc31b81e8"}]},{"bom-ref":"aeff7f8f339dbd4e","type":"file","name":"/usr/share/zoneinfo/right/Europe/London","hashes":[{"alg":"SHA-1","content":"9ef892f2fcef5c652119b1684380cac130b7130a"},{"alg":"SHA-256","content":"c4c819712c38e314f56d369e04cc6ddc0a97ab5fbbd07fa006592d61979da468"}]},{"bom-ref":"c2c6c2225ab114cd","type":"file","name":"/usr/share/zoneinfo/right/Europe/Luxembourg","hashes":[{"alg":"SHA-1","content":"7f940420f77e355a54a85b4527d77efebae92f4d"},{"alg":"SHA-256","content":"a9ff95c1ba57ce45f20af03f5656c6d2538bb197a171cddecaebd035d41de7a8"}]},{"bom-ref":"638a432842a4991b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Madrid","hashes":[{"alg":"SHA-1","content":"f24de556add4f728b9a433fda3817f7768bbaa59"},{"alg":"SHA-256","content":"c86db6fcb5e60a044dffa0e7cdadb37c0746a7a957157e3b277c79a5ab2fc9b0"}]},{"bom-ref":"e2fd5089fe24becd","type":"file","name":"/usr/share/zoneinfo/right/Europe/Malta","hashes":[{"alg":"SHA-1","content":"d597a28ee86202cf50b7e66eaae3d50f18f101ff"},{"alg":"SHA-256","content":"45b9814004993b970b673a8ac89e007096ba9e9b708aa04ed3f1e662e1d34194"}]},{"bom-ref":"8ef605528433c68d","type":"file","name":"/usr/share/zoneinfo/right/Europe/Minsk","hashes":[{"alg":"SHA-1","content":"7fb003d715b69bac349814a21a29a7da69ac4dd7"},{"alg":"SHA-256","content":"e80288238e2ec4bb81adcd3bd52f2644763a2851d2af57af67136e89288063bd"}]},{"bom-ref":"221a60fa4150f030","type":"file","name":"/usr/share/zoneinfo/right/Europe/Monaco","hashes":[{"alg":"SHA-1","content":"011af5c8991d1acb51dbd594d5caf32fe6731100"},{"alg":"SHA-256","content":"c001557e6223d4c4d511fa837d975a3e4f52b0b0cef262df223bddc505f66cd8"}]},{"bom-ref":"c18310e63785da5d","type":"file","name":"/usr/share/zoneinfo/right/Europe/Moscow","hashes":[{"alg":"SHA-1","content":"eed24277002fbb4d2936644cb37e1283c1f4c53a"},{"alg":"SHA-256","content":"6d808ea66278cecb36050121bf906562716676d41598d73a6c566011b793558a"}]},{"bom-ref":"a6157170e7613459","type":"file","name":"/usr/share/zoneinfo/right/Europe/Oslo","hashes":[{"alg":"SHA-1","content":"a0367ae9b3dcd67a29338471f7fe74f3e70dc1ef"},{"alg":"SHA-256","content":"3bfeb5315e57194ab1719b639c7946de3904425bb6a0f6737e0945361099b8d5"}]},{"bom-ref":"698c3c15f958788f","type":"file","name":"/usr/share/zoneinfo/right/Europe/Paris","hashes":[{"alg":"SHA-1","content":"4d3ddbda7392542884911c2c6986c17873ca7555"},{"alg":"SHA-256","content":"ee3c7e59a59600c759b983042896041a1048b6bb70caa3e107b9a689eaea88fe"}]},{"bom-ref":"84350ef05354dcf5","type":"file","name":"/usr/share/zoneinfo/right/Europe/Prague","hashes":[{"alg":"SHA-1","content":"3000c257145fc4134e01ac977260578ba5a54ea0"},{"alg":"SHA-256","content":"818e0c14a66416e82f7e0430c58b8b285181ba3cc10cdb4d4ab08add5d335ad1"}]},{"bom-ref":"ced49dec81730ff5","type":"file","name":"/usr/share/zoneinfo/right/Europe/Riga","hashes":[{"alg":"SHA-1","content":"a89e091fa80df5190eb832a6cd5615ce6713845b"},{"alg":"SHA-256","content":"5701be5e1a36479c3fa94ce393acdf7465251244cd4e29a3d0ea13b5284dfa47"}]},{"bom-ref":"ae884eade1d2ebe0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Rome","hashes":[{"alg":"SHA-1","content":"e3b0c181c716489a66433cb632b3c4c7ee3ec363"},{"alg":"SHA-256","content":"8f9cd8e08aae8728b51c5a19d2dbdbd20d40660ccfb4ccc6ef687f08b40ace45"}]},{"bom-ref":"4a920e8648b66da0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Samara","hashes":[{"alg":"SHA-1","content":"be624b43697bb976bb7425a2a6e83f630ab3a9cb"},{"alg":"SHA-256","content":"408254df84dbde480cc617a61ee4a49c8c3555528f910660447d3fa841405a5d"}]},{"bom-ref":"3b4872c7c286ae53","type":"file","name":"/usr/share/zoneinfo/right/Europe/Sarajevo","hashes":[{"alg":"SHA-1","content":"67fbf73973eb5edaba76fb0c6f71bd9cb9c39cf7"},{"alg":"SHA-256","content":"e43bd814d6f271280b7da4fef6e739a97708b0496a51e21c7e13e6ddf0850dc9"}]},{"bom-ref":"a2169bd17e757024","type":"file","name":"/usr/share/zoneinfo/right/Europe/Saratov","hashes":[{"alg":"SHA-1","content":"c78b6942bed0edd115553e26d8dd361a294893ad"},{"alg":"SHA-256","content":"004d69abc47f50556aa49c855a4d3bff4ca9bcc763785a415ed3fdb47340f5cb"}]},{"bom-ref":"89f419d01e72080b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Simferopol","hashes":[{"alg":"SHA-1","content":"cfcf37ebdcb0b02d15a583777c023df42143dfd6"},{"alg":"SHA-256","content":"ce35821aba81db349aea89e60cd4f6a73a8899b8c7aedd74d23bd12a39a45144"}]},{"bom-ref":"f6ccacc2129b341d","type":"file","name":"/usr/share/zoneinfo/right/Europe/Skopje","hashes":[{"alg":"SHA-1","content":"d7da4910f22419e98ef51977fb542dc3a30bcf5b"},{"alg":"SHA-256","content":"e1f0f5e4b1bc61d9efc73bf7d58fdd09b653d38571cc57ee545e2462a1f5e863"}]},{"bom-ref":"e0b82f47094f4609","type":"file","name":"/usr/share/zoneinfo/right/Europe/Sofia","hashes":[{"alg":"SHA-1","content":"e8fb7645d19ff487a761c4c96305fa42c8cd0849"},{"alg":"SHA-256","content":"ef4953a85254fce2f17d2baf8303a32356b11dc2097ebb8a20388bbc83bfd440"}]},{"bom-ref":"04d4071e02149fe1","type":"file","name":"/usr/share/zoneinfo/right/Europe/Stockholm","hashes":[{"alg":"SHA-1","content":"bc7ad8e839fa2b9dd48dbe3218ed9f4d35768b2c"},{"alg":"SHA-256","content":"d7f4029b0d32a89e5356292d4ea4ef01992f4aebc22e463a2df805e0fff24108"}]},{"bom-ref":"750656e50e54cd99","type":"file","name":"/usr/share/zoneinfo/right/Europe/Tallinn","hashes":[{"alg":"SHA-1","content":"b63fb5f52f249f9381783de3a109e91cfb332204"},{"alg":"SHA-256","content":"931d08a0be0d09216a54fa54ecaa515212889d74ebb80b75f17b275d858834ee"}]},{"bom-ref":"a03c507546c04e73","type":"file","name":"/usr/share/zoneinfo/right/Europe/Tirane","hashes":[{"alg":"SHA-1","content":"821f6dd8a2d8533e67e829ce9dd043528bb40fdd"},{"alg":"SHA-256","content":"9a01249a9286c257bff42860226baa6ad371bfedffd76bbb95f9d89da5d7eeb1"}]},{"bom-ref":"acb597882adc17c0","type":"file","name":"/usr/share/zoneinfo/right/Europe/Ulyanovsk","hashes":[{"alg":"SHA-1","content":"a082267af1651ef41ab6e738948d9a7195d82c96"},{"alg":"SHA-256","content":"81822b7d32eb7b8f9a6f3248ed8838e7f8d8849cc313c6c821215e893b56dc35"}]},{"bom-ref":"50fdaa5b50304eb6","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vaduz","hashes":[{"alg":"SHA-1","content":"7cd4130ff973645786261e4b61e99238890bfadd"},{"alg":"SHA-256","content":"e3b7925d020addf5f49d85031649d7158fd1a37bc60c85a78ea2fb765600f7dc"}]},{"bom-ref":"9d624679cb94e41f","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vienna","hashes":[{"alg":"SHA-1","content":"94feeead789a6023bdf340b0ef821735cc6a7075"},{"alg":"SHA-256","content":"ef4bc5d620dbbd1189dfac665b1a6090afb1c1bf284973b18147a8cdac6e3fae"}]},{"bom-ref":"6a2d83dae948d05e","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vilnius","hashes":[{"alg":"SHA-1","content":"c0ab7615a6b83cfe5b0055a1efa766db0577e6cc"},{"alg":"SHA-256","content":"ca2b908cd261512a46a76dac3ae92ea58c6dfcb499620f9a15aa2a1a6b2d66f0"}]},{"bom-ref":"241f83c697eceae2","type":"file","name":"/usr/share/zoneinfo/right/Europe/Volgograd","hashes":[{"alg":"SHA-1","content":"02150dfbe35c2046d25db3864dfc0a46a6c67aba"},{"alg":"SHA-256","content":"a98ac89b2baf6966ec26790e6c11a905d54c4d44ec25c74bb083bf3efa038a12"}]},{"bom-ref":"6e595138e6cf19f8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Warsaw","hashes":[{"alg":"SHA-1","content":"4460b58788cc0c25c1a60f8cb61ef512e7d3618c"},{"alg":"SHA-256","content":"9743d8ea1f1aa81575eabcde189b173376fd53aa5a06f926df93428168985786"}]},{"bom-ref":"d41388b5ab4ce613","type":"file","name":"/usr/share/zoneinfo/right/Europe/Zagreb","hashes":[{"alg":"SHA-1","content":"a4faa58e89aea5fe36f24704a2b50076dc88a02d"},{"alg":"SHA-256","content":"cc2f586370d24874c9fe15d9b08f02648c7f99fb87b2867bc79d79aa82a63b56"}]},{"bom-ref":"793fa280265383ab","type":"file","name":"/usr/share/zoneinfo/right/Europe/Zurich","hashes":[{"alg":"SHA-1","content":"e18d7d019897bd4a87365e431fa8c8b68079b955"},{"alg":"SHA-256","content":"5e143a3a7a6bf0a88afd13bf12ff3a8c13cb4b5d16daf14c973b58158215b427"}]},{"bom-ref":"adaf8f38c7cb55ed","type":"file","name":"/usr/share/zoneinfo/right/Factory","hashes":[{"alg":"SHA-1","content":"ae1fd694819cb33e03d7df4fb0f53eb2e211a4c8"},{"alg":"SHA-256","content":"c5a60d0e60d9e85bdcf201ce7e639159204ba43461c82c2d1d86daa507669678"}]},{"bom-ref":"8222e4287d64c596","type":"file","name":"/usr/share/zoneinfo/right/HST","hashes":[{"alg":"SHA-1","content":"45d6c6d33b27acd60f4ae9c330a8173d7027082e"},{"alg":"SHA-256","content":"d67616843525bf3cd785f98c8588623d630862719e95f3add9e58628293c7b59"}]},{"bom-ref":"ff4d1976a5c3498d","type":"file","name":"/usr/share/zoneinfo/right/Indian/Antananarivo","hashes":[{"alg":"SHA-1","content":"ebfda91e89c13299022048ecda555058e72c3ab0"},{"alg":"SHA-256","content":"d5d3dd30489e5af75f9c76e9f6b96065a6972eb85ef0833ba3e9187b4cc5ae29"}]},{"bom-ref":"aa90d33439171b04","type":"file","name":"/usr/share/zoneinfo/right/Indian/Chagos","hashes":[{"alg":"SHA-1","content":"a274ac978025083cf4b7fc1c1cf517ac929bea25"},{"alg":"SHA-256","content":"88788f8b833631a71d0a37d9c2f7272df485f778864c7d439b4ba5a8aa66cc2d"}]},{"bom-ref":"d27bbbe248b372e2","type":"file","name":"/usr/share/zoneinfo/right/Indian/Christmas","hashes":[{"alg":"SHA-1","content":"4b18c76eedd9d3336cdd2a1276a9f41e7face8dc"},{"alg":"SHA-256","content":"ddb1a671461ca91a62e345fd4570e3c1da087acb5002ad985c0a002260787833"}]},{"bom-ref":"9b37dae84483c6bf","type":"file","name":"/usr/share/zoneinfo/right/Indian/Cocos","hashes":[{"alg":"SHA-1","content":"88562d0010a6b965f990a5eda3e233a28ac7191e"},{"alg":"SHA-256","content":"42474a54201bca0bd61191b39cb15b4859175ea5aecbd5f76e6434b1ff65f390"}]},{"bom-ref":"cf3e33c4a3cd2b3d","type":"file","name":"/usr/share/zoneinfo/right/Indian/Comoro","hashes":[{"alg":"SHA-1","content":"0e66dcb0a3ca3b794f2be6e071c93c5ad6574aa3"},{"alg":"SHA-256","content":"1adee86d82ba02784ee8b378b77fbee94fc941f16d86e7ba7072c621639b88f5"}]},{"bom-ref":"b9d03c5e9e0a00bd","type":"file","name":"/usr/share/zoneinfo/right/Indian/Kerguelen","hashes":[{"alg":"SHA-1","content":"c6182642a7d3e22a1fbde11455467a8bf03a58b0"},{"alg":"SHA-256","content":"2547a218929296f45b32a47eef64b9b540735bded5a67746e392dd92ffa125b5"}]},{"bom-ref":"77c4ebd463ff2c32","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mahe","hashes":[{"alg":"SHA-1","content":"56728ac1e2dbc6aad591d9ebc462e6b763a78fd1"},{"alg":"SHA-256","content":"22c4c17e1ae15fc96dd6d012116190e92514db138cd154c79e866bbf635e5d5c"}]},{"bom-ref":"285a5dac3f4cffe9","type":"file","name":"/usr/share/zoneinfo/right/Indian/Maldives","hashes":[{"alg":"SHA-1","content":"3ab7f0efc43eb6939ba9ac79cd3a2074a1a2a3e0"},{"alg":"SHA-256","content":"dafb88831b66da36b408b1738574f12dd40c0c996696a9a662498bc3d19d1a19"}]},{"bom-ref":"10b7b3a65d38b6c2","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mauritius","hashes":[{"alg":"SHA-1","content":"6fe02970510f80573eea3b57c15a19ec49913320"},{"alg":"SHA-256","content":"2a69ba50160fe0d62035cdd0cd4df637c93b16b1da5ffa270addd9d6fa11aa25"}]},{"bom-ref":"da86e1d74f930f89","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mayotte","hashes":[{"alg":"SHA-1","content":"667de1920a73b2496733621f80910d870579b584"},{"alg":"SHA-256","content":"71ded0bd32cc5cc1ff5aece6ebb1ca437140d1505e7fa3b362dcbf3f0cde3c8b"}]},{"bom-ref":"8076f8b33b981530","type":"file","name":"/usr/share/zoneinfo/right/Indian/Reunion","hashes":[{"alg":"SHA-1","content":"1f1da793e3e967d36d8f482407b21f5ab7898bf9"},{"alg":"SHA-256","content":"178a204c4b08c0db255c850a1473eb3ad1a5a0a7822196c3f7a95c969ec38208"}]},{"bom-ref":"0bfaa0316d64dd16","type":"file","name":"/usr/share/zoneinfo/right/MET","hashes":[{"alg":"SHA-1","content":"13091aff8fcc0153a7c191740d9520f53e9b4922"},{"alg":"SHA-256","content":"a7e7f2fbe2c2e594cfcff60d3177211d23e6a03aa03c344333a02dce269201c0"}]},{"bom-ref":"447156b08d371d34","type":"file","name":"/usr/share/zoneinfo/right/MST","hashes":[{"alg":"SHA-1","content":"5deecbf4212db38fedc61f522c1a120ecfbd229e"},{"alg":"SHA-256","content":"ea2f04b3f75fa06387a5a9461796d5e847227bf792804d1f50dddc6ccec56edf"}]},{"bom-ref":"ce485f0fc41f9bc9","type":"file","name":"/usr/share/zoneinfo/right/MST7MDT","hashes":[{"alg":"SHA-1","content":"f5406831a0a2e8f4fd568959015d5e8aec9fa5ff"},{"alg":"SHA-256","content":"035f30d24a6c3755350014a5bad3f06ad33e1bf703cd7386419a01faf0f19183"}]},{"bom-ref":"be4fb9d7cb29402a","type":"file","name":"/usr/share/zoneinfo/right/PST8PDT","hashes":[{"alg":"SHA-1","content":"14eddbafbbc85e0e88c88243e262a9950d19c2bc"},{"alg":"SHA-256","content":"e4b9c6a901bc7037e6fbb13bb03d5615c8bd76ef0be647cdb20e35ab8dbd8c31"}]},{"bom-ref":"d5482ad0cd56118b","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Apia","hashes":[{"alg":"SHA-1","content":"08c227af3ec3fcb62730d404dfa080804691d552"},{"alg":"SHA-256","content":"6886f17a103a5126d36ac17c7656e90305eab7dec3ea038fb93a1b14c766b3bc"}]},{"bom-ref":"9b10c278307d6519","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Auckland","hashes":[{"alg":"SHA-1","content":"681bc4befd767ef414b2b0949aa50f7ae189d3c9"},{"alg":"SHA-256","content":"9e0c91665246813e17b8446fb0f80fe381e3fa296dc8a92619dcfd7e3422396f"}]},{"bom-ref":"5c42bc18267ce8de","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Bougainville","hashes":[{"alg":"SHA-1","content":"96ee6dad071a8b867d8fa3339438be3ac2a4695c"},{"alg":"SHA-256","content":"90550df0b8f3eb4c53d9f5ec0885228068d43a55b2baa6f19912b0ea7a3001f1"}]},{"bom-ref":"41a3c996cf97585e","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Chatham","hashes":[{"alg":"SHA-1","content":"f21f7502e6c86d325c0f81d9856b3aa91ec7aea3"},{"alg":"SHA-256","content":"72a545fe3074fc25ee66b34ca23490aadbca56449dc0efde5a1c30dfa7d53e86"}]},{"bom-ref":"25aa8bbfe7d13f22","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Chuuk","hashes":[{"alg":"SHA-1","content":"f718513d97e3b6b746096aa876ba74ddf92296f9"},{"alg":"SHA-256","content":"a91f38d2ae9baf7a351624086f5d6f0588966bcc66a2d3104f39a683a7d54c5c"}]},{"bom-ref":"775c530034cd9997","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Easter","hashes":[{"alg":"SHA-1","content":"10bc9042032c27c554921bcd27da98c1187acdcf"},{"alg":"SHA-256","content":"b0ca70985b2a902e35f52429598522289af80b641c930c38462cb05d2a9fb7d9"}]},{"bom-ref":"e25515ae114f8c26","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Efate","hashes":[{"alg":"SHA-1","content":"ef207768e95bb9d114772967b0e4e9e0689adc3b"},{"alg":"SHA-256","content":"ad98b05486f8c7b89620ace8a08fa5293e86fec6eb9e905298e104aabce1c9c9"}]},{"bom-ref":"6effb98f50a42833","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Fakaofo","hashes":[{"alg":"SHA-1","content":"9a6607dc1d46584117fd02c88a8bf1efe6f04fc3"},{"alg":"SHA-256","content":"afffc30fb8a1d7770477e3cebe15f67007a1f98f3177a579513b12eb36f89534"}]},{"bom-ref":"aae35cc2f09d4abf","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Fiji","hashes":[{"alg":"SHA-1","content":"ac5e3afcbf7bc317c6f3965bbf78d0f9582d5986"},{"alg":"SHA-256","content":"4732bee58c307094d120592a8ea27cc50becf9afc2f54c647d2d257de2d66ac9"}]},{"bom-ref":"c45b78996fb4eed1","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Funafuti","hashes":[{"alg":"SHA-1","content":"94ac7f4d14a32c82608caf8c611c1de2875c8ab6"},{"alg":"SHA-256","content":"aaa56749766c567635f327f48ebe7cbdababeea9594698ad467bc522e619bc4e"}]},{"bom-ref":"49ce27c0b72faa35","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Galapagos","hashes":[{"alg":"SHA-1","content":"abd559a1b4c27eca1d0aa3c903ae12a00e088b7f"},{"alg":"SHA-256","content":"3532d0b6443a54be319c42a161ae503ec13ec3a8d9f997d26405121dde3663e1"}]},{"bom-ref":"5fe24f9b91bcedb4","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Gambier","hashes":[{"alg":"SHA-1","content":"bea089dfdbced5ac8b5b9cc1bfc4da5d34a87e20"},{"alg":"SHA-256","content":"828a8a34266f99c137c07cb37419ae0114280fb6c2c751b87b6442695f216d9f"}]},{"bom-ref":"f31920c83df607ba","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Guadalcanal","hashes":[{"alg":"SHA-1","content":"0c586a1749cf1d13b0acef78f5406572f8662403"},{"alg":"SHA-256","content":"5d5452f9d41d1fc12d02684b4f84e7274c4f718a49ea886eab5c46026ad4368b"}]},{"bom-ref":"c9f8077b9b54da60","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Guam","hashes":[{"alg":"SHA-1","content":"f26c8f1216a5b4e6e644f49fde8d820227ce2f49"},{"alg":"SHA-256","content":"8b7f914697c526446db9dba1382965a661cf536f545d3dee4a7d85f115a60a2d"}]},{"bom-ref":"6c631eac3f25621e","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Honolulu","hashes":[{"alg":"SHA-1","content":"d7c9d9c801b66a06d8e7ffa9913b9da56b996977"},{"alg":"SHA-256","content":"be759789a581dbcc47a5c8ccb3bb6cb0da765338c63911a2d1d547f9c1e5cc28"}]},{"bom-ref":"d503da061a4e485e","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kanton","hashes":[{"alg":"SHA-1","content":"41ec94c2d1f1bc4ab5abc14aaea3e2585ed0018a"},{"alg":"SHA-256","content":"36202cde6c08108d3d7eb9c852b61b99ccb19a710658dda72aa5ec6fba06acee"}]},{"bom-ref":"b6a22f0a9bc22492","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kiritimati","hashes":[{"alg":"SHA-1","content":"7a9af8076f640b028b8ebb41c24f1b459bb48e4e"},{"alg":"SHA-256","content":"5e197408cc890e8c06075c7e0d86a2699acd335cebf78bcab3f43143dc2cd71a"}]},{"bom-ref":"4b7efd0c7b73ab3a","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kosrae","hashes":[{"alg":"SHA-1","content":"300a23124e757b6baf2cc7e95467f2e4cc984e52"},{"alg":"SHA-256","content":"16917f8b0a444d20af86d5b4650eb4bdfe05d49c53ec2a2fbe4964211943a4e6"}]},{"bom-ref":"492dc53eb9259394","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kwajalein","hashes":[{"alg":"SHA-1","content":"39735e937313281e68fdeafc33f5f454c95d2457"},{"alg":"SHA-256","content":"2a652f91df4bc90ac346c744faaa2c4a9693eda71a948b6bdbb4d981780c1351"}]},{"bom-ref":"77982a0cea0ccb2b","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Majuro","hashes":[{"alg":"SHA-1","content":"df9ec508e29020b20b0eec5c209de3849efd27e5"},{"alg":"SHA-256","content":"be060e446e8c32508a1754d744a4d0ae8f551d2c20d67f97b620f73cefdf0917"}]},{"bom-ref":"584a9f4882842bf2","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Marquesas","hashes":[{"alg":"SHA-1","content":"a7e26051b64243154cfb79ca8e82baf0fd7b2feb"},{"alg":"SHA-256","content":"7d6a8bcdc34f7f5c4eb2c904471aebaeeae00ad0b68f2fd4d2e2a2fc83529d71"}]},{"bom-ref":"e70c6ebdc2bb3ed6","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Midway","hashes":[{"alg":"SHA-1","content":"19d10d6f7564137156e5a2fb74f77ea3516e9e39"},{"alg":"SHA-256","content":"c9b1d41fc16e6e30936fca0afb71bd4bc89fbd7a3c91fbc19aede9adc3efa9d2"}]},{"bom-ref":"82a5f5903b59843f","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Nauru","hashes":[{"alg":"SHA-1","content":"dd9bc1f0e1f726f50e21cf0cfc95ee79143f8d4c"},{"alg":"SHA-256","content":"8c572fce9db82b14e759c3fdb0d853942a184f5cd21476a43dbaae3dc0c1f6bc"}]},{"bom-ref":"19efe4ad6583c05c","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Niue","hashes":[{"alg":"SHA-1","content":"d4de8798f02dc161a0142add80d3b30de66fbbf5"},{"alg":"SHA-256","content":"24a8b15b1ff42d3db9ca4207d36613ed8fc11ef32c8ba1c6c24bbcee1a994254"}]},{"bom-ref":"22ff28c13fab4bab","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Norfolk","hashes":[{"alg":"SHA-1","content":"551dafc3860647b80307d2fb3d5453c954a32f8a"},{"alg":"SHA-256","content":"c5b22115c6621f25cb23f3f6c1df681ba1bd15d4652f0c6c27486e71ccd8fb7e"}]},{"bom-ref":"e326abf4b6a8ea91","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Noumea","hashes":[{"alg":"SHA-1","content":"9d5e077726d6a6c5448e45b8f0764d2abea2e192"},{"alg":"SHA-256","content":"724f3f9649eaa84a0192a095469799e346a8586e4f72891cd95a1b28c86ecfb2"}]},{"bom-ref":"6625cb621dccbc71","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pago_Pago","hashes":[{"alg":"SHA-1","content":"1145a7205bd00da0251ab901185c392ced1c17b3"},{"alg":"SHA-256","content":"a38895358228908f8980b207ef1b28aa8e6d4dfa674b806d0c82e56bfb48ffd3"}]},{"bom-ref":"47f33f9d3fdf0a5a","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Palau","hashes":[{"alg":"SHA-1","content":"30a0f51b63ae95cfb1135d4faf160f293bd572d8"},{"alg":"SHA-256","content":"56edee9661dfc562358ae311a321b42275363ff70ca83a26395182ff1113c6b6"}]},{"bom-ref":"67ada14ae67ce8ea","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pitcairn","hashes":[{"alg":"SHA-1","content":"c561e3c513bc646ec8f3b9b0153eccdaaeee43bf"},{"alg":"SHA-256","content":"e1b92aafc95a633d6a3d1cc3d6b23552bd1f062118635f1ee3eb73873b0f998f"}]},{"bom-ref":"c70332413fdbf0f1","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pohnpei","hashes":[{"alg":"SHA-1","content":"d0e8b6d1bff2873972ea28b4c75eebc233dc7b44"},{"alg":"SHA-256","content":"dd4f14244d79b7098200e800a58c2653b5889084161052ba10e750e130ca7e22"}]},{"bom-ref":"a8085128b1ddd673","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Port_Moresby","hashes":[{"alg":"SHA-1","content":"6988f0581954b1f2dd00d7be3144494a0fc7782a"},{"alg":"SHA-256","content":"d2f7f2a3cceddccb7b7851c734564760f0d398f568408828f1b0cb0dea8d851f"}]},{"bom-ref":"9fed1bea5b6c8dbe","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Rarotonga","hashes":[{"alg":"SHA-1","content":"357c25faae8a56aa451a55bb61d02cec33f5997d"},{"alg":"SHA-256","content":"c6fb90fe9a82778f216800c202e69ad2029fc971db9754073ff858309a980247"}]},{"bom-ref":"08dc795573c86f7f","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Saipan","hashes":[{"alg":"SHA-1","content":"67a553526fa626f8cc758a92cff001f53fb5e356"},{"alg":"SHA-256","content":"3ac21e05acfd346486299e38ea3db3976587624677347c1eb742c645b567cf9f"}]},{"bom-ref":"fdc06ed9c53ca229","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tahiti","hashes":[{"alg":"SHA-1","content":"a90a32e4a6878352fece1a92175400f7b323b7d6"},{"alg":"SHA-256","content":"3d9afc9d939da9882c6a03015c1ec39205f3c87b31502fbd9e873505218de192"}]},{"bom-ref":"68d4e46c092fddcc","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tarawa","hashes":[{"alg":"SHA-1","content":"c1e26352588f875aaebf07da630a913c307775f4"},{"alg":"SHA-256","content":"852a38e598cf62c8ab96c0a4d057202fa7c479a68db131538ac5478bc41a9b03"}]},{"bom-ref":"d1836890ce603a46","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tongatapu","hashes":[{"alg":"SHA-1","content":"1b53dac52c838f146631f85a2b88002afce8fcae"},{"alg":"SHA-256","content":"29113ab41e101292225a8dc154d0d45e1f0a71b02d8eb9251982336893a16187"}]},{"bom-ref":"0af2b863b5d3df58","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Wake","hashes":[{"alg":"SHA-1","content":"4cbfbdae5a01ab5760f453991347f56798f679e0"},{"alg":"SHA-256","content":"f44b245d08af2452f52cc90913e4c748466eb9a4954b3f8f5445e932c8091f9c"}]},{"bom-ref":"4147092df73743f3","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Wallis","hashes":[{"alg":"SHA-1","content":"75861faba0fb16760d03212d375ebaab2c8edc85"},{"alg":"SHA-256","content":"82af47559c7e4b30803c82cae0fe09b866dd3914905255942662a33856c98a82"}]},{"bom-ref":"0c0b989cb1a4e63e","type":"file","name":"/usr/share/zoneinfo/right/WET","hashes":[{"alg":"SHA-1","content":"d5fd959e8b89dffd423961fa1a0d9b14edca90fc"},{"alg":"SHA-256","content":"b7ec9103803aa12d356db9285c2bae9c2d218b705a65338aac3299b654e86e21"}]},{"bom-ref":"09401e3139478d09","type":"file","name":"/usr/share/zoneinfo/tzdata.zi","hashes":[{"alg":"SHA-1","content":"cbc6c56c806adb2c977fa2d49ef7d6225561d525"},{"alg":"SHA-256","content":"a776cd2d31eb319c34c1d07c69991e7c9020e17b63f4adb72839440bd7c7afa3"}]},{"bom-ref":"867398aef1c9065d","type":"file","name":"/usr/share/zoneinfo/zone.tab","hashes":[{"alg":"SHA-1","content":"4f9c2681dad62e7eb99c7ed3a376a04d2cc581e9"},{"alg":"SHA-256","content":"586b4207e6c76722de82adcda6bf49d761f668517f45a673f64da83b333eecc4"}]},{"bom-ref":"bd601dfa95d1deaa","type":"file","name":"/usr/share/zoneinfo/zone1970.tab","hashes":[{"alg":"SHA-1","content":"19bd3b826c52b8c4f18258847f613fb0104b08dc"},{"alg":"SHA-256","content":"57194e43b001b8f832987b21b82953d997aeeaebeb53a8520140bc12d7d8cfcc"}]},{"bom-ref":"6947fbd8a7d6d212","type":"file","name":"/var/lib/dpkg/status.d/tzdata","hashes":[{"alg":"SHA-1","content":"b7fdbf8ddb850091d03ed3980e21592f48136040"},{"alg":"SHA-256","content":"f7b337cc63ebcac17adac7e5827f2b2da80cc7721984e4b760793f89d4aafe83"}]},{"bom-ref":"66ccd46321bbc65c","type":"file","name":"/var/lib/dpkg/status.d/tzdata.md5sums","hashes":[{"alg":"SHA-1","content":"5a39204a4d45758deda6e6460cc71190e343473c"},{"alg":"SHA-256","content":"4a6954188da21ba1d7894169665f8de2854062b6bc0675e2e110ad25a0f29b5a"}]},{"bom-ref":"6be6ce73a503dfab","type":"file","name":"/usr/share/bug/media-types/presubj","hashes":[{"alg":"SHA-1","content":"5dc79c4a4df9a76a5ef448a4ffc212c1f22f2df5"},{"alg":"SHA-256","content":"40ca64c14041a61aba24773d54467a4f9409d3772118348477b2578025ee99bb"}]},{"bom-ref":"3503e6612c98769b","type":"file","name":"/usr/share/doc/media-types/changelog.gz","hashes":[{"alg":"SHA-1","content":"a6f2451ddaf232829362205ca35b6eff6a400fae"},{"alg":"SHA-256","content":"4f32dff576ce1047b71b407b6868993925609b0bbf92b2a6b9574c89b2b2188c"}]},{"bom-ref":"9474252baf0b74da","type":"file","name":"/usr/share/doc/media-types/copyright","hashes":[{"alg":"SHA-1","content":"122ec71bc0ee27107fe8c40b8f5b4976dcd558d3"},{"alg":"SHA-256","content":"5ded7c53199b6a1d089b0b7e231d77e5c84081c7156b372b3f11ad9c1c2c5cc7"}]},{"bom-ref":"73e2f146a497dee2","type":"file","name":"/var/lib/dpkg/status.d/media-types","hashes":[{"alg":"SHA-1","content":"6d5cbea51846568adce617024928750c2ce73537"},{"alg":"SHA-256","content":"62f0651d9c8af8743038dd1b69a1927bbe3301fae7ea7fe4ae18638c2c328a8a"}]},{"bom-ref":"9564efdfad5b1a62","type":"file","name":"/var/lib/dpkg/status.d/media-types.md5sums","hashes":[{"alg":"SHA-1","content":"43a3acca91bab65ffe195391f8074cb436bcce6c"},{"alg":"SHA-256","content":"cb5891e815e23843440ef27a34260d48f1bbf6e7007be81ccda938fc4e94182d"}]},{"bom-ref":"03d0d276038f09ad","type":"file","name":"/usr/lib/os-release","hashes":[{"alg":"SHA-1","content":"9ecfc0782397e6b985756fb1553ee50b3016b802"},{"alg":"SHA-256","content":"d9e62fb3baebbd71c7397d1d7c00ac60519ca331038e310d05681807090d407b"}]},{"bom-ref":"446d3f86a5dff9d5","type":"file","name":"/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2","hashes":[{"alg":"SHA-1","content":"edcca2aee14c3e505e0f7b56eb35210cc2cceea0"},{"alg":"SHA-256","content":"582f2d3d4edab86d601c54b37f04bd18fa2cda28be30e9f8c87df73c1c581354"}]},{"bom-ref":"98671af5088dc505","type":"file","name":"/lib/x86_64-linux-gnu/libBrokenLocale.so.1","hashes":[{"alg":"SHA-1","content":"0213ee1d0194065a661a31cbb1f18a1771afdb57"},{"alg":"SHA-256","content":"cb615a891baff58778576618a5922ae4c12aaee1b1aa64c5a040896169d43e6e"}]},{"bom-ref":"a1f24b365da1276c","type":"file","name":"/lib/x86_64-linux-gnu/libanl.so.1","hashes":[{"alg":"SHA-1","content":"514b9a2cb2ab1df973790b4e870ae2920b9e9720"},{"alg":"SHA-256","content":"86a3ab1d183cff574b9bb877cb8f616be62f3d6634b95df2c49ad26e2e779878"}]},{"bom-ref":"3137b96c1b2264bd","type":"file","name":"/lib/x86_64-linux-gnu/libc.so.6","hashes":[{"alg":"SHA-1","content":"05f456ef56882dd764b69813e3a0bf5b6a4fdc54"},{"alg":"SHA-256","content":"1d25fd63234b59e4c581564c7a6d8f5c6cf36eee757e3d26f4b0808dd36a4896"}]},{"bom-ref":"20c45010a68c4c33","type":"file","name":"/lib/x86_64-linux-gnu/libc_malloc_debug.so.0","hashes":[{"alg":"SHA-1","content":"189876da83248588e55047ff6a5eb80aa6d3ecc9"},{"alg":"SHA-256","content":"bd20ef95b1d4ca64e86faf7a679e228c49f430600911639ea0f9c26787a0514b"}]},{"bom-ref":"e4510e761b087f5a","type":"file","name":"/lib/x86_64-linux-gnu/libdl.so.2","hashes":[{"alg":"SHA-1","content":"4823bcdaf60db1463ddb81554b9526d296a9579d"},{"alg":"SHA-256","content":"d71263682766154c159a63504fec543e3ea64a932e5f30d5f50758fab0405fa2"}]},{"bom-ref":"afd5ac3971fc7e5f","type":"file","name":"/lib/x86_64-linux-gnu/libm.so.6","hashes":[{"alg":"SHA-1","content":"c5f419636f43aa556f57ae22b161c4a21b6b383a"},{"alg":"SHA-256","content":"067650d84b8f554cedf0b9ff26137bdd10cd03d4bbcdba1029a543c59d1798e5"}]},{"bom-ref":"426dd05658f73d47","type":"file","name":"/lib/x86_64-linux-gnu/libmemusage.so","hashes":[{"alg":"SHA-1","content":"e6667d18dea900d9cb31434c11eb57b2fbd38537"},{"alg":"SHA-256","content":"7794e386b7d9b458b92e4d9b181ac3cb38d125db5ba810911b99f605abe53b08"}]},{"bom-ref":"b115d6df396f7763","type":"file","name":"/lib/x86_64-linux-gnu/libmvec.so.1","hashes":[{"alg":"SHA-1","content":"d35ca8f7d83844394d7fa87d4198f4ba7a11be3a"},{"alg":"SHA-256","content":"2fcb54a261ecdd8282a676ee9cb50743d3ba12e36a7d22624295393f39786987"}]},{"bom-ref":"6eee4f2f61e622e8","type":"file","name":"/lib/x86_64-linux-gnu/libnsl.so.1","hashes":[{"alg":"SHA-1","content":"c12130c184c05e3d99bc5627647271b377299cdd"},{"alg":"SHA-256","content":"fc883b0c07e2816871d54df3ffe644b3d6e615dae208df707f1b49b44170ba06"}]},{"bom-ref":"dcfbc04dc49ddcc2","type":"file","name":"/lib/x86_64-linux-gnu/libnss_compat.so.2","hashes":[{"alg":"SHA-1","content":"d774dc420627a8d1082b56c66e5bf2335047b99d"},{"alg":"SHA-256","content":"4f81d86d325108475d7e3f2c9522cd1d7860ed1f682735f290c5ca3a600705c9"}]},{"bom-ref":"8fa5fc4936770308","type":"file","name":"/lib/x86_64-linux-gnu/libnss_dns.so.2","hashes":[{"alg":"SHA-1","content":"52ad78306bf7656f32172bd230fddf5258022766"},{"alg":"SHA-256","content":"eca6da0aa670a85eeb4a046b719d94d051b4d7082621c38e55ba7ae50796c7ca"}]},{"bom-ref":"c429d41dc99dfb13","type":"file","name":"/lib/x86_64-linux-gnu/libnss_files.so.2","hashes":[{"alg":"SHA-1","content":"e5b6bcb07878a70c5aa784302544b8bbcc1871bd"},{"alg":"SHA-256","content":"55a9ae9a9cbf2dfc9b276976d1d972d8ad55af55bd2f1d5f2864c2d5eac72d2f"}]},{"bom-ref":"f8927678746a2946","type":"file","name":"/lib/x86_64-linux-gnu/libnss_hesiod.so.2","hashes":[{"alg":"SHA-1","content":"aa0bc179ac3aece094af9551b124e28a394d7f0a"},{"alg":"SHA-256","content":"bdfd8d179e617cc43bf2a0303175868f53d711a7d11abcf27ee3395393004453"}]},{"bom-ref":"a2976bfc74c6243d","type":"file","name":"/lib/x86_64-linux-gnu/libpcprofile.so","hashes":[{"alg":"SHA-1","content":"448298b58ff3ba40c1aa85fd6e4264a798427ac9"},{"alg":"SHA-256","content":"bc286924c1055b70433dcfdea5f655276b6eadebad950270d59d0b215a2a38e4"}]},{"bom-ref":"90da090513db57c0","type":"file","name":"/lib/x86_64-linux-gnu/libpthread.so.0","hashes":[{"alg":"SHA-1","content":"b69a25d1417c82520a4df9eb9191c19108f76090"},{"alg":"SHA-256","content":"df8e371a04bcf4ea2d455277ecc9cd47fc9b4c58ed27a7f4e6c8343122a4d270"}]},{"bom-ref":"e89949d8576d6dd1","type":"file","name":"/lib/x86_64-linux-gnu/libresolv.so.2","hashes":[{"alg":"SHA-1","content":"7869396aae018869b54100db16333694b89821c6"},{"alg":"SHA-256","content":"d2df0bd45f72cd9beba6195b0acc43b8d14d44c37d18ffdf4684ee62b0a8eb71"}]},{"bom-ref":"2758bb337f0c3ef3","type":"file","name":"/lib/x86_64-linux-gnu/librt.so.1","hashes":[{"alg":"SHA-1","content":"4ffdb9d4163e7ed2ffc936030b9291327a4b4e59"},{"alg":"SHA-256","content":"6445c275f2477ebf619b1e4ec6fe5a0e460b9745e360ef9b671cb5a2f9f362ae"}]},{"bom-ref":"446c9016537f8611","type":"file","name":"/lib/x86_64-linux-gnu/libthread_db.so.1","hashes":[{"alg":"SHA-1","content":"b067e4cfddb088831bea1376c1b0e2d754fdcdf8"},{"alg":"SHA-256","content":"08a9b5d8332f3b8fee092089c4ecb2360cf3102cf9cce735709cbb011b3164dd"}]},{"bom-ref":"08a9ac7a68d720de","type":"file","name":"/lib/x86_64-linux-gnu/libutil.so.1","hashes":[{"alg":"SHA-1","content":"44c857f8d942dc9e73c8b0f226a6e0c949f3270a"},{"alg":"SHA-256","content":"fe279657c804dcec88728eeb27187f983f6e5dc0c89575c4bd01aa6a8147b3a1"}]},{"bom-ref":"50bfc20a29af75ae","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so","hashes":[{"alg":"SHA-1","content":"526ddf2680463917574d651feb6de98fe47b7675"},{"alg":"SHA-256","content":"d1d4cd0279931acabf064c29cd3e309107a649afb051b0f50290cfd8c6a27481"}]},{"bom-ref":"13affacc9854233b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so","hashes":[{"alg":"SHA-1","content":"4596423d965b30255dd4af3bebad9a217193cd2d"},{"alg":"SHA-256","content":"a660ea6e1cf419ff8c0812a2fa45c0363739366221ec7427674b97f9aa0b54a3"}]},{"bom-ref":"cb245097d67b9843","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so","hashes":[{"alg":"SHA-1","content":"39684d316190fa6021e91936642c2905a2322d65"},{"alg":"SHA-256","content":"cbf1f6f1cad80af6d93e589f24a1de483719a2f0df938bdf6820ccb25fe65cb9"}]},{"bom-ref":"4255cdeaf0ce3237","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/BIG5.so","hashes":[{"alg":"SHA-1","content":"bc57c0b0ebc56b7f720d9f78db67064c6856db72"},{"alg":"SHA-256","content":"6b4936b4a502dc0366514030387262e96612a8a3c575c2f212d4b75d86ca9b8d"}]},{"bom-ref":"8bc27f35340bc33b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so","hashes":[{"alg":"SHA-1","content":"78f58546c39b80b0bf998a879ccff091716c0c8b"},{"alg":"SHA-256","content":"10f2dcdd558fea1ef05407bdf7c7157619084134d7b76e6e4555b36c864f5712"}]},{"bom-ref":"7ac2028e214abf62","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/BRF.so","hashes":[{"alg":"SHA-1","content":"f942c92f97930707fc6e31c6c267f8845360a78a"},{"alg":"SHA-256","content":"0b77ac12f5ba0b071c0e56e855050f2248f936b1d123b217611185f40ec0383c"}]},{"bom-ref":"fdd0d545b8492212","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP10007.so","hashes":[{"alg":"SHA-1","content":"d6d352001b6b34311bd89f1113bc4356991c9108"},{"alg":"SHA-256","content":"9a8010d0bf3effffc100f7d63876e5ef252e859704ca447317d7fd3e52e77328"}]},{"bom-ref":"447edd3573b3992a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1125.so","hashes":[{"alg":"SHA-1","content":"63d3f180d1cb3ef4f63bc33bf8b33a3060f9e759"},{"alg":"SHA-256","content":"3f6cd8f66a23d2d9326643fa73f6395f97fd22b1966d6857284ebabb4d1a6bff"}]},{"bom-ref":"7bca2f5ccecb70ca","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1250.so","hashes":[{"alg":"SHA-1","content":"f44ebeaa9cd69522dacaea50f5f0069c971d9203"},{"alg":"SHA-256","content":"6757706701b2c0106480850bc85a3894d67687b194d38d357c0c2b9a96e9bcd5"}]},{"bom-ref":"89abf0f11cc76d44","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1251.so","hashes":[{"alg":"SHA-1","content":"295fd78effcd09c099e0a69e35978c3389df9a32"},{"alg":"SHA-256","content":"74a2229b0c79d5ddd0ec19cf1bca13724ed511e8eb086e640ab07318ace4ab43"}]},{"bom-ref":"bf7b6ad781794c5d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1252.so","hashes":[{"alg":"SHA-1","content":"aef14d129f1fc33488df9c814a8be63660c0ee2b"},{"alg":"SHA-256","content":"14d341ccabc82eca6c77ba87061944c0680f91a90b4bf3bff61de751b5af8172"}]},{"bom-ref":"9f1b5f0aada4154f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1253.so","hashes":[{"alg":"SHA-1","content":"94102da7a48315283f98f6c5038c27903c4aaaac"},{"alg":"SHA-256","content":"d9ff51eca5bb449295002bd0f04168393212ae023f037fdd2cf066c7d0b39303"}]},{"bom-ref":"cff521c0ef420f5a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1254.so","hashes":[{"alg":"SHA-1","content":"6f17ce42249ce80da2cd3b398c7955eee2389c74"},{"alg":"SHA-256","content":"7c69aa234572d367acabeaf3e22044531cc3bb2059d7ab5f6b6a900edd8d49a2"}]},{"bom-ref":"b748922a3b41e640","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1255.so","hashes":[{"alg":"SHA-1","content":"1556dcb32915339fad2305f5d57daff8bcc469a0"},{"alg":"SHA-256","content":"63aa1ea89740fb995c32fb88fe3141e3d710fbfb2e71337e62f9e2a7b76ab0af"}]},{"bom-ref":"e379e85762a675e8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1256.so","hashes":[{"alg":"SHA-1","content":"b6f0baf72a785472d7bf8168a8efe8849a1b30a7"},{"alg":"SHA-256","content":"10493f78a7ee8c04cc8b7dd7d30c34eebfa4f4da6bd6df283529cec82c77da7d"}]},{"bom-ref":"bb346296d3cbb477","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1257.so","hashes":[{"alg":"SHA-1","content":"92fbd90c6286d94219c2c719f2a184b9baf8d151"},{"alg":"SHA-256","content":"c14bdab65a9ee9d1efcaab9a55fb14a77c156782a37f493e5e5c42949c2169e6"}]},{"bom-ref":"c2fa7d3c699b0c4a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP1258.so","hashes":[{"alg":"SHA-1","content":"a6a7cf4a8e1f0ec25049b74729bdae38030279d0"},{"alg":"SHA-256","content":"f75cc6955607637c042b651142bd756aa83094895004e728d164925749871cf8"}]},{"bom-ref":"26717f9da85c130b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP737.so","hashes":[{"alg":"SHA-1","content":"776af4ff7dfdc73c25e3d1f213d8c58adb2f3983"},{"alg":"SHA-256","content":"4d476da89bd0ff983cadfd59ecf3cc840922145c0a5d71f34be96d0b88f51ca4"}]},{"bom-ref":"163957523c8fe893","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP770.so","hashes":[{"alg":"SHA-1","content":"f22df377f7135f46287a82d004573702a17c76a2"},{"alg":"SHA-256","content":"3bcbbb74ab1f9a3a91d82fd96bfd7fdbc2ff9e274712afbaaece4ae22a5af9ea"}]},{"bom-ref":"b0c6f31e07ffd375","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP771.so","hashes":[{"alg":"SHA-1","content":"8939ba351ea9835c25699be5f63e42e98037338b"},{"alg":"SHA-256","content":"e81d5415be94395383cce5d2086e4e67e3a25c99a91c5ac629510d21cb1e6a29"}]},{"bom-ref":"4da66c03caeaf4fd","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP772.so","hashes":[{"alg":"SHA-1","content":"79575a10a0b64965cd67d80cf26936d488c1c499"},{"alg":"SHA-256","content":"d608299bc05d41d79fd2420f96436d5a7e9548cc8f72d222d5f27c04d750929a"}]},{"bom-ref":"bb2af0f0303383bc","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP773.so","hashes":[{"alg":"SHA-1","content":"704534beaecec92b7f897e5efa3fedd7c10672d0"},{"alg":"SHA-256","content":"214e789602933aa97ea7280fb67206b6aae2ef039ae869178dfa17c34d74dfe9"}]},{"bom-ref":"b5b90ded2653e062","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP774.so","hashes":[{"alg":"SHA-1","content":"ff5b816be948b6736c19b78d4e758ff948f847a9"},{"alg":"SHA-256","content":"a84418701e7371b8b178f506b66d5eb2dd5096a6e879190e639f36fb3daf06ae"}]},{"bom-ref":"04593eeeb3a8d573","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP775.so","hashes":[{"alg":"SHA-1","content":"320d99d516aecfc0bb9b02e6e577d9fc4b1660b5"},{"alg":"SHA-256","content":"d5ff635672cfd3f2adfb943df5d8270e9537982b484f50d88115400d09241d9c"}]},{"bom-ref":"6ceacf8710c20baf","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CP932.so","hashes":[{"alg":"SHA-1","content":"0d1804bd8a40c3344ea4d1dbffcf225cdc04786b"},{"alg":"SHA-256","content":"dba5f6bd2c48fe3bb8a796b1e997a264886f22a9ca6dac7affd27b514e27afaa"}]},{"bom-ref":"91632abec196236f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so","hashes":[{"alg":"SHA-1","content":"e4eea8959ba5818d8879c1dc86fe602594693118"},{"alg":"SHA-256","content":"cb958c64ddccafd2665fb0738d0489b5e79247c0506c6910c5e99098c5d4d5c6"}]},{"bom-ref":"b710802d9e8c495e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/CWI.so","hashes":[{"alg":"SHA-1","content":"5b26ddfdcb6d604bf2b1b4e4ec05e38d7ee10f8e"},{"alg":"SHA-256","content":"c1985694b9a910c64345c60f2765811633b85ac4e288ab10be2b13edc7a308f3"}]},{"bom-ref":"c830131408c102da","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so","hashes":[{"alg":"SHA-1","content":"09e514495bc78c9c1bed181a3dbdefec3c6f497e"},{"alg":"SHA-256","content":"8d38743fdca5f8d7e4af7223a4b5ba1e0f43cdfb700989353f12ae76a5ef03e7"}]},{"bom-ref":"fedac82bc791a0fc","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so","hashes":[{"alg":"SHA-1","content":"c086104f191213dc833ddf2432afa08a144687b2"},{"alg":"SHA-256","content":"8649341dfab36e6985bdff1f8a4c8f54c22981a937565237285bc73b3ce6d91b"}]},{"bom-ref":"1357512cc906e79e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so","hashes":[{"alg":"SHA-1","content":"b1781b44820711ff36fca31b0b697a049ea9fbab"},{"alg":"SHA-256","content":"ecf38486db21bea3e9db4283671f5424dd4733ee0a2ec9fb04f9f809da3ffa00"}]},{"bom-ref":"2a4dfa36c7f45859","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so","hashes":[{"alg":"SHA-1","content":"bded95947a56fae0db365b85ae7efac6bf47ebd6"},{"alg":"SHA-256","content":"3fec42e6af33ef0a8cd050bcde976dfe487716018711db1f9742712d58cbcae0"}]},{"bom-ref":"c14732e6595de70b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so","hashes":[{"alg":"SHA-1","content":"ad4a2a7aa09800994085a7ed0c22a548a8511b99"},{"alg":"SHA-256","content":"014795a0f91447b8fc65942e7457404551f9c2cd9b97f943df372c585d9c308f"}]},{"bom-ref":"e39db73bf1523bdc","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so","hashes":[{"alg":"SHA-1","content":"e44fd4a9468dbdb4c2223c43b90278307e9ac52f"},{"alg":"SHA-256","content":"225578e525ce4668361ade06e4c39aa4cebb8651ab4bf123a4ed018c9e6d2941"}]},{"bom-ref":"1eccef283b5d5206","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so","hashes":[{"alg":"SHA-1","content":"236de8680eaecc0a7ed6ea4d3636d9daa78e75cc"},{"alg":"SHA-256","content":"4787e1dc70869b5e5abfdfe05b5d0e4ca2015403759f51262323daedbc77a654"}]},{"bom-ref":"0add4122d3ecccb0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so","hashes":[{"alg":"SHA-1","content":"4b7f289cf9e6f674ceb48ccf1341c095dfc04683"},{"alg":"SHA-256","content":"a12a56668cb712044223ed9e3a96c82dc1f79ac4e4c4cfa66bc23f47dd16b136"}]},{"bom-ref":"8adf5d514c3171c6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so","hashes":[{"alg":"SHA-1","content":"9f8141267261943782bf41637751de3afbf83dad"},{"alg":"SHA-256","content":"1ef04e517545dc1aeef29ec664295411d8730172a4ea95c33d9ea3d4e27945c5"}]},{"bom-ref":"283cc2b764ce5708","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so","hashes":[{"alg":"SHA-1","content":"96a860da0e13e203ee5546ed70cb4eacf7a397dd"},{"alg":"SHA-256","content":"a90bbd60332cbd174b44e0716eec3ba1e168a159cc91ec2366da8f2ba0413e0c"}]},{"bom-ref":"98e9bd70a5db05bc","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so","hashes":[{"alg":"SHA-1","content":"f45783efbb6954f1ef0ccd388b1e507b3d27325c"},{"alg":"SHA-256","content":"f2c168028d4a271cd29ca6020a0300b173b0a962c34067a9e8a3e259c9e9a183"}]},{"bom-ref":"76f9b3f0cf90d1b4","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so","hashes":[{"alg":"SHA-1","content":"7482ca3d5ae0805ed70b247bce0765b6fbc24d9f"},{"alg":"SHA-256","content":"373d4e0579d4c2b8d788ecde8abe91ab8e675bce3b4deeface670dec3085f126"}]},{"bom-ref":"e251d9357d98bf15","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so","hashes":[{"alg":"SHA-1","content":"e22ec5306b2f0cc8dc2b047f313e941812c33969"},{"alg":"SHA-256","content":"4330b708335bc2de1ab594c494ca903a4dd6f5817763817429367ca9254108a1"}]},{"bom-ref":"e9958186b7c6d3e6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so","hashes":[{"alg":"SHA-1","content":"e1e95fa9cb924ddab4634a32191c87cac993eb56"},{"alg":"SHA-256","content":"8e4cc287f851564265e90c5d9599cb9cc5b95cd58acd491d5ec03e807d31e637"}]},{"bom-ref":"8259c89358df6e3e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so","hashes":[{"alg":"SHA-1","content":"d165b32364d3f35a698bcd8d7eca0256e8bf3bd4"},{"alg":"SHA-256","content":"dd59cc7aa76fc949222e5474b0b0b3c8acb4e1b455301e1417b2df72dd80756b"}]},{"bom-ref":"6d7772d72144073d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so","hashes":[{"alg":"SHA-1","content":"4eb6af0ba368c59d5672656f161ac3085d2b8212"},{"alg":"SHA-256","content":"726f79a2d4a6495ac6b1c3d369ac7e461f42a554b0e50029279b68b680a4d20d"}]},{"bom-ref":"f049fe41fd7815be","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so","hashes":[{"alg":"SHA-1","content":"9c06b0b63f9c17707927dc0c8f9c4c89df979907"},{"alg":"SHA-256","content":"86f88aa7f2f4bb77818556b4bf7f944a898853b11a5606be8d5efc86c43ba636"}]},{"bom-ref":"2dfd8b87de02af82","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so","hashes":[{"alg":"SHA-1","content":"704096d4f0bdb86c37b4cb06a9bb6335cea018ea"},{"alg":"SHA-256","content":"332fc19f2ef82b5b0e452d2ff203161e7b5046f56d55a901c69db35fbd37abcc"}]},{"bom-ref":"e79b0e95b5b02f25","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so","hashes":[{"alg":"SHA-1","content":"7111e42e615d13c44b5110a110691fc424518cd5"},{"alg":"SHA-256","content":"d006a304d93313a50887153696ec897010fa33e531f9a2fc8b92356020d7a124"}]},{"bom-ref":"abda4b0521e55a1d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so","hashes":[{"alg":"SHA-1","content":"2e533c87ce1b734bc9fa8db37838f113148aeac6"},{"alg":"SHA-256","content":"778b48b9fb11c7bfb7a021f9493e1a47a73f71399f98e4f0a8730d132cb7990c"}]},{"bom-ref":"c4f5bfc7d5c3491e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so","hashes":[{"alg":"SHA-1","content":"1cd45925d40b72fe98cb0b2589d8a538e1d2d2cb"},{"alg":"SHA-256","content":"40afcb6eac46b7c26b6ff980346bc78b49115dc4ce5a792336b810ccb7607346"}]},{"bom-ref":"d40644b7a03cce1b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so","hashes":[{"alg":"SHA-1","content":"03cc005654fde88bee124c522cfebb4c544b0c2b"},{"alg":"SHA-256","content":"fbdce14dae9f8a889d7a6c8817219a7db5755bd0fbd42887a6274a0576c9709c"}]},{"bom-ref":"98d6a88444a3fe9c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so","hashes":[{"alg":"SHA-1","content":"c770dd2f5b356fbb1cfc85030e8e2a932f2b2a5f"},{"alg":"SHA-256","content":"794857f6bda3dd5a8061a171780370ca9707b0eb9b611e7f570ffa3c19352e6a"}]},{"bom-ref":"8d8ce3d436a2fb7c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so","hashes":[{"alg":"SHA-1","content":"1cd0b8c6c092d67418ddb06ec3b3ca0996fbffe5"},{"alg":"SHA-256","content":"e83325774defcda526ded25b8e64d1b69ffe3089a3092b63031aacce5de502fd"}]},{"bom-ref":"e244e295f596d794","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GB18030.so","hashes":[{"alg":"SHA-1","content":"22fb147064243bec67461a09ccfb87cbe208d6d2"},{"alg":"SHA-256","content":"1818dc9c2660394950d5f5dab732132489ce646607e43e302a7bbd768abc7e4c"}]},{"bom-ref":"b9c8ee53a9b99dd4","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so","hashes":[{"alg":"SHA-1","content":"8dcddefc8ffd5a823947043f171c72182424d2e7"},{"alg":"SHA-256","content":"d6593d66691ce37a9494e8f5ae150f9ba8569118521d8250220dde5445bfe20e"}]},{"bom-ref":"b47a2210c2f1efae","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so","hashes":[{"alg":"SHA-1","content":"4044e4c387f77c26864f50c87d6ec6bae04931e8"},{"alg":"SHA-256","content":"dab8d0b0d4ac1c95a19bff550543ca598eaa98c642b4403da4d26da2b61393c3"}]},{"bom-ref":"e1595842d5a33a84","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GBK.so","hashes":[{"alg":"SHA-1","content":"56ed26119f4b4dcda2a0e4605faf0371f458b41b"},{"alg":"SHA-256","content":"2cf1c2e3bb88bb1ca84d9a945b0042eaff4e35919a0c9e51ab470840beb949e0"}]},{"bom-ref":"5619288590283837","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so","hashes":[{"alg":"SHA-1","content":"7becf992a13bd4a2448e6296b00b53b4c8bd0fd4"},{"alg":"SHA-256","content":"e58ca9057122eb35d2bbb9cf6865a2db49a480090cb108df0bf211d7f004556b"}]},{"bom-ref":"f25a98236d6d2149","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so","hashes":[{"alg":"SHA-1","content":"41168de3818cf845263a3429699b1e0b1883e733"},{"alg":"SHA-256","content":"c161331b6b663f7b9b4a42e2a57188ddfc8f8f19404e5c1ef0915705c37e777b"}]},{"bom-ref":"298e4772d808a709","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so","hashes":[{"alg":"SHA-1","content":"5a9c410668fd9b6348e974ccd84872410f1284f8"},{"alg":"SHA-256","content":"e4bb65b7a20cb701f976be6c3e5d83965c3df76d58069d45f8d36508297bc489"}]},{"bom-ref":"646af5d5c9321b66","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so","hashes":[{"alg":"SHA-1","content":"ccfa481a187260c8360c234d9d80ad86b14bcaee"},{"alg":"SHA-256","content":"3931d2fc38619c78c229ccc870dfef51f77ce90958342c48aa53f363073cb251"}]},{"bom-ref":"e36125480c33aa51","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so","hashes":[{"alg":"SHA-1","content":"16336659011fd5ba894712c5a370e9cd792dd412"},{"alg":"SHA-256","content":"fd73b78ab5de7bdda7fa2287e9eac0ce857af7755a35c3e0e76c499dc3f2c08f"}]},{"bom-ref":"c0ae6084fe159db6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so","hashes":[{"alg":"SHA-1","content":"a051f53351bc77cec95059f174a04f50292c72ba"},{"alg":"SHA-256","content":"bd48df28cff57274edd14efe95b616bf42696532124caf8162f5f8e635d8c7a8"}]},{"bom-ref":"3fb0b83a706a73f3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so","hashes":[{"alg":"SHA-1","content":"0a5ddc58e8388fed29f8c6f8211cbc68cd9d82a8"},{"alg":"SHA-256","content":"3a522816633da40ae8fc5683a8e27a422e605ecbda7d23e388bec3081713b60b"}]},{"bom-ref":"d079aa396b3cfd85","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so","hashes":[{"alg":"SHA-1","content":"07107963e390ed786bf8713fb20048b020eb8bb8"},{"alg":"SHA-256","content":"76c26d697c78ec3b77378b8be445661eee6f296704caa384ec7b524eb19a79d0"}]},{"bom-ref":"a52711ead2874ee6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so","hashes":[{"alg":"SHA-1","content":"4d70e649eda12902f23cba2e227e5291f619e368"},{"alg":"SHA-256","content":"623a10778229071759e571fd5bd0720378a9cc3236ab100ffad1b4ae97ff963c"}]},{"bom-ref":"14bab966af7b4caa","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so","hashes":[{"alg":"SHA-1","content":"60a81b99b15a3855712f5fef384df6a027e60fd2"},{"alg":"SHA-256","content":"9d844d102803af9d097221731a176d744e3bc1cc31193222983a97a144fc1211"}]},{"bom-ref":"bf5e1e228577464c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so","hashes":[{"alg":"SHA-1","content":"9d6bdab5b86115ec643d6dac59b58f5bf5eb012d"},{"alg":"SHA-256","content":"48a0fa82db75d9d6229e15f51d4c4da07dfc671f4521bfce4a30e0005ed2b0b8"}]},{"bom-ref":"8802c485fb5371ff","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM037.so","hashes":[{"alg":"SHA-1","content":"66762ccde3cbef63877cd28b31ee5c6ca7d373af"},{"alg":"SHA-256","content":"0fd3573e2989eabefca85625c1fbbd068d1b52a161140291a2a09013633899fd"}]},{"bom-ref":"5596aebe028d2480","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM038.so","hashes":[{"alg":"SHA-1","content":"7d35f41b2f689c0726d3806087316c32bb27be89"},{"alg":"SHA-256","content":"06ce3ad8de94e37c67319e6c094699943f717e6d71e4611b3592c28eb6e56f54"}]},{"bom-ref":"8ef453e270fd0ba3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so","hashes":[{"alg":"SHA-1","content":"6d1f1e2892c7f87c0f8fc4de2954adfc86d92d79"},{"alg":"SHA-256","content":"108e5d86ce147f3294249bd0813412a52b4093fd7337eef964fb1a58b7f54dc4"}]},{"bom-ref":"cdaf8e2c12ca4d23","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so","hashes":[{"alg":"SHA-1","content":"80f172af4eaffc92601cefc8379d348a90793f8c"},{"alg":"SHA-256","content":"c652a101734b1e123f59ffec8c6365ff411f1bb3199b0d9dcf912ca1d4cdd912"}]},{"bom-ref":"241c4b959f5cfcce","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so","hashes":[{"alg":"SHA-1","content":"94690ad5774bc91bb7f10132951765205435d754"},{"alg":"SHA-256","content":"5c9d1d9d13225106600b019d4c6ac2fb2e4c860c466e16d20aee4f8682b1c93a"}]},{"bom-ref":"279a508ef19ca8d0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so","hashes":[{"alg":"SHA-1","content":"fd2bbad6238e2d34fb4d4da08e9396e4f71ab8d2"},{"alg":"SHA-256","content":"c1c6343be9df0a48ec1af0bf6848bc802c9ce3e2da82b7fede0bd8a8969f73e4"}]},{"bom-ref":"ef9e7a9cb552a23b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so","hashes":[{"alg":"SHA-1","content":"fcc468171f8098ba7959552c64f950101b84315b"},{"alg":"SHA-256","content":"15660fc8d571509239255ca621673a3d048516bda61f03f3b13590b0f55a15e1"}]},{"bom-ref":"fa331acc5aa38323","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so","hashes":[{"alg":"SHA-1","content":"1effa4db18168bb2226214049291732c3609f9fa"},{"alg":"SHA-256","content":"25bd260e57bf8e5ca1014b2ab08110477e1484b7cddac5acf31b010d7271b874"}]},{"bom-ref":"a17efb9cd3f838e6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so","hashes":[{"alg":"SHA-1","content":"cb49184dafac5dc9ac06362cacf199ab89d75aef"},{"alg":"SHA-256","content":"8b0480ab7bf0f39f7250d95f905fff81a23e9199e9ac93bb6eab7946f2b53989"}]},{"bom-ref":"a628c6b9cf587c68","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so","hashes":[{"alg":"SHA-1","content":"4059c6475639e5b47851075b61194a3bf7deb4b2"},{"alg":"SHA-256","content":"3ff2c629d6a127b21cee5059b0103d72b54e19a563abc7b1191126bec805ac40"}]},{"bom-ref":"37597e058c5bf690","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so","hashes":[{"alg":"SHA-1","content":"1678286cd58cc2293908f833511b037098a384f6"},{"alg":"SHA-256","content":"81b9eed2a3024f2c3308ca68ff0715504d000c91479dfad38e720f7b8006207f"}]},{"bom-ref":"01bd2812420f6317","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so","hashes":[{"alg":"SHA-1","content":"4d5f7ac2b48b3b55da190d8c86bf8593c2f852e9"},{"alg":"SHA-256","content":"78481538e813cf7ad08bc5267aecb09145ac4f215bf242ed574522a39c0c984b"}]},{"bom-ref":"a81b5a7834d03986","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so","hashes":[{"alg":"SHA-1","content":"eed51ea65b72d82e915be5786ecd8cdf4c9a078f"},{"alg":"SHA-256","content":"9199f52a2c5a7a52046be6f51e1fb2ec76fe2238546f138f39b2263968ae4a6a"}]},{"bom-ref":"fe23dfd2c68ba10d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so","hashes":[{"alg":"SHA-1","content":"f31bf8789ea97f810dbab00dcaccab8beb06bbe8"},{"alg":"SHA-256","content":"7e3d44ac88f18273182d41f4c0e14afeb24fdbb81b29fbe3d77eb288568e6d7c"}]},{"bom-ref":"b554f9b66dfbd6a5","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so","hashes":[{"alg":"SHA-1","content":"5e4f8c88ca360eb679bb12aa1325d1ce87e4c2f3"},{"alg":"SHA-256","content":"ec9f0df82f1265f994c8cd54f4d62e2e2550e3daeb186ec5cfcc228bbdd51edb"}]},{"bom-ref":"1c91054760c937ed","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so","hashes":[{"alg":"SHA-1","content":"f86c5ea7c9cc007bd2750f5e24d454d028811ea1"},{"alg":"SHA-256","content":"3e3c5cd9280caab4a36bd8f6b3eb065beb658a34f184ecf442c8e3fecdbd12e7"}]},{"bom-ref":"147c0c8361587399","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so","hashes":[{"alg":"SHA-1","content":"6c8fa40ab383318d3d81e71d435aca6406595178"},{"alg":"SHA-256","content":"c4d98a744a1710ab8704c5870054fe100efacafee64719afbc82d8e7c438d86a"}]},{"bom-ref":"aaa859f77b882291","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so","hashes":[{"alg":"SHA-1","content":"107ec008cc2f1890698e5b331267efe0fa162b13"},{"alg":"SHA-256","content":"08d35fc0f57054c236f9dbd853b5d5830ccc24fe57031980793acd2093c3f560"}]},{"bom-ref":"6304d267fbcddf7e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so","hashes":[{"alg":"SHA-1","content":"7be0935434d52d8f4bb1ff8b0c3efaedc30897fa"},{"alg":"SHA-256","content":"5357421cbb078b7dbb97a167dba3bc5411004afa0c7a097f9831a2db236eee0a"}]},{"bom-ref":"6ff944349f32933d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so","hashes":[{"alg":"SHA-1","content":"257e8835b698155be92a39e7ba03c8b62c73ee6d"},{"alg":"SHA-256","content":"1441c7a361f10648ac2bc31a668553f0b0edc2de95536be3e10b9cc3a87cc057"}]},{"bom-ref":"89a9fcb90e8a41de","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so","hashes":[{"alg":"SHA-1","content":"82e03993510272b9dc033215cd1697ccd4052420"},{"alg":"SHA-256","content":"eb0f9276410edb34cb9195c7c04aecfc46167259ec9367c3909d06c6f31effe9"}]},{"bom-ref":"67c9a6ffba9a4865","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so","hashes":[{"alg":"SHA-1","content":"94345b21da1656a9a59d7fa929b0690683e3689d"},{"alg":"SHA-256","content":"1af844fd04a5e6e49b7f571692e98dbf08bd42352f9c66210eb2031383501a72"}]},{"bom-ref":"b8efa6124b7efdee","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so","hashes":[{"alg":"SHA-1","content":"e36547b0d26c41447e3a9329542bbd0a3f4a20c9"},{"alg":"SHA-256","content":"65ce334719169beab0df8c3cc92f04811422ad649fe097e2c9fe15bc22abb394"}]},{"bom-ref":"8d76e66acb4bb031","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so","hashes":[{"alg":"SHA-1","content":"e2f0cc3eb93f900874d112ec4914a36391c16188"},{"alg":"SHA-256","content":"35cfc2267ed39ba3670d5c05733442d22bd7d944631c2fcceb1f97b4c7e2633d"}]},{"bom-ref":"8dcf478fcc4e6ad7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so","hashes":[{"alg":"SHA-1","content":"6dd3cf98d68fdb6e1b0104f2949bddc6269db74f"},{"alg":"SHA-256","content":"9921b28fde6a7cb5538e9d2db150fc68d6adf42e666b3d7b357fce81532766f3"}]},{"bom-ref":"d7856dddbc1993d8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so","hashes":[{"alg":"SHA-1","content":"f354c2f10c8c95768e33712a0e6765c532ce7bf4"},{"alg":"SHA-256","content":"f9ffbe0eb213b236dfc0d2948b9cb41c8f63a37bb7814ecea50a5f32338cf784"}]},{"bom-ref":"d045a46d598d90a2","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so","hashes":[{"alg":"SHA-1","content":"14e2ca012f05cf7ca9bd7a9e5bfc5dabb85b9b24"},{"alg":"SHA-256","content":"4c3b6ff110a30188a0d35037ead661cfff82b936738aa601932c7da5dbd81e45"}]},{"bom-ref":"ec7b30c1f9ab68ef","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so","hashes":[{"alg":"SHA-1","content":"188bf6aa3d7d44c860cb04611f3262086bc1db7e"},{"alg":"SHA-256","content":"8d233ffa71ea60a14e2410facc25db374a1cc0778473437dad58dd73f223f5bf"}]},{"bom-ref":"f65a151451ef705b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so","hashes":[{"alg":"SHA-1","content":"d9d8055def1c1a27592983c2b4841307d6e97b4e"},{"alg":"SHA-256","content":"ad9cb58f49428a5dac5e0c96470c6f588cd44ee96804bad0458e0bb356d5ce8e"}]},{"bom-ref":"5127ff91ebccd239","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so","hashes":[{"alg":"SHA-1","content":"7e6a28b8acedbe4c68128dc41418879af5109b30"},{"alg":"SHA-256","content":"d4dcb2260d312808d681f8f950bed2508c42f37ceb546496b769bae66e31169f"}]},{"bom-ref":"d4cf44d8905ee697","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so","hashes":[{"alg":"SHA-1","content":"70cbc3dce45b94e58b903283215069509b245cfc"},{"alg":"SHA-256","content":"e28395204e4f0b0c869284f9b3b11bc7e9af5c480d20161ea0b06845c13e55ab"}]},{"bom-ref":"fadd80dd7aa53120","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so","hashes":[{"alg":"SHA-1","content":"db77923ad50c91b8d6b0355ccddbd02be61ea21a"},{"alg":"SHA-256","content":"dbcff4c6495039b373376d282bcee9356a5b85fb5d431bea3abe225c3da26c4b"}]},{"bom-ref":"1cb1d84ac8725ada","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so","hashes":[{"alg":"SHA-1","content":"5cf9cd398a65754ecaf7234f71db7eff42ba91b4"},{"alg":"SHA-256","content":"634bcef8c0098fc0f4970e804e9ca87cabd32b148553c539043a6367e2b4a474"}]},{"bom-ref":"e1b2548833e741ca","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so","hashes":[{"alg":"SHA-1","content":"bb3c7188dcd740a5c9ccaa29e0ff52dc0d2e0745"},{"alg":"SHA-256","content":"f5287806ac0e2e6d1bfff35b3c9ff255d221f437a4b71a9db5ac7138224ac55c"}]},{"bom-ref":"5fcd86a7f37c9bd9","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so","hashes":[{"alg":"SHA-1","content":"5b9282c7efdc223e28bd4588b02d95db81431c48"},{"alg":"SHA-256","content":"e4520d0bb70d3d55c5994f96a6b566d69c4c0750acd1882cd281dfdcbe5d6351"}]},{"bom-ref":"fde5d7c79ea5be0d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so","hashes":[{"alg":"SHA-1","content":"c7b12d674b14a175a3a531afe552b99d62514deb"},{"alg":"SHA-256","content":"c81a14ca040e53c88ff83f74188b8f99e9fa117f55f499c651f91cccc7b91d34"}]},{"bom-ref":"3fe7209da6130187","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so","hashes":[{"alg":"SHA-1","content":"587751e5ca5802f5ee2e3060044d73c7b4a4bb42"},{"alg":"SHA-256","content":"77ca654300a629c4176892cfbdb678a5df63b5c3a0625c0353320790cb36d26d"}]},{"bom-ref":"0dcba06a8727e01e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so","hashes":[{"alg":"SHA-1","content":"270e6564d280ef48da397999b57611386f13989c"},{"alg":"SHA-256","content":"46f94fb815bfc3e5676ae04d5f62cc47865d90223c6c327d07f1563dd38b4664"}]},{"bom-ref":"37b277943b176fd8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so","hashes":[{"alg":"SHA-1","content":"894db86b796d469b5d5680005ddfbdfe7281514d"},{"alg":"SHA-256","content":"6919bf159def4bd4da51bb95b63e0084901f77bb16236e2c9bd938a9cef96d30"}]},{"bom-ref":"612f0fab65402e6e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so","hashes":[{"alg":"SHA-1","content":"4bd91c575feef5669c204c8c0381b1dd3ef15bf7"},{"alg":"SHA-256","content":"d64fa60d8ab3b2686e09f0fc04293fec30fcd33ef4d3d535567df6cd1f7c973e"}]},{"bom-ref":"0773e684900158ff","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so","hashes":[{"alg":"SHA-1","content":"a8c8fee5f673fa2596ae111935aef0396eea08ad"},{"alg":"SHA-256","content":"afe9fce80a88ab68d29a422775625582436f5741a327ae8c16e4d29fe9318b5b"}]},{"bom-ref":"5ab3a7c4491ceab2","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so","hashes":[{"alg":"SHA-1","content":"81e7b63cf20dc4b4d7eda2b24f7e08829cd4fbbb"},{"alg":"SHA-256","content":"dc488133300de78a00afbfcd868adc3c3e136d6bf3ab95acdcd8fdeb9f9dce06"}]},{"bom-ref":"f7be0b683b76c28b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so","hashes":[{"alg":"SHA-1","content":"c56677bf01609faa4f3e8904b60021ab0e71af33"},{"alg":"SHA-256","content":"e54908766e555343e524bce22dfd492ef281227c3c87b58acea3b56e84047ea9"}]},{"bom-ref":"a028f3f41c37d961","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so","hashes":[{"alg":"SHA-1","content":"959b58a3a37921e0613210fed498e00b8c706541"},{"alg":"SHA-256","content":"8daf41a8662aa32445265c9526a3207ae540123a61d8a9064d2ad65485b67c0d"}]},{"bom-ref":"a4d517419b641613","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so","hashes":[{"alg":"SHA-1","content":"79140b0b230411475ab25bdbae3964ca43679134"},{"alg":"SHA-256","content":"c8912a1c1e2b74279a4d9f925019b970e90491b84ef8c439d6f116fe34fd7b5d"}]},{"bom-ref":"9a590624e47a4847","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so","hashes":[{"alg":"SHA-1","content":"e8912fa9b179804d9718716725ec9cdb197a6b10"},{"alg":"SHA-256","content":"3c179ec2ed0a127ab2650826aafd030b4f1d465674be464401c213695d6ebd35"}]},{"bom-ref":"a299ecdf4f567a02","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so","hashes":[{"alg":"SHA-1","content":"6f40d65d90362dd03336f344cb8ee6a62ef6e150"},{"alg":"SHA-256","content":"7f354683aa64d33351ec79f28a86754e3845f916960e5d448a00b6b8b43c31df"}]},{"bom-ref":"e08c763596c3a5d6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so","hashes":[{"alg":"SHA-1","content":"30551c585a03ea3f6eb497e24b24c530fc5d2eb7"},{"alg":"SHA-256","content":"a39917a35d37b019c1c2402b28a9a0a9d71fb22c856753c7ce22e33fd0328bae"}]},{"bom-ref":"9f6e66456d94152c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so","hashes":[{"alg":"SHA-1","content":"6d0e3e8f367c00c8594a5d90bd50ab3d6501370d"},{"alg":"SHA-256","content":"7493224a981263e2dcf7a6c42dec3361187df5ecdf1e55dd0a5b02942ff7f8ab"}]},{"bom-ref":"848680a40568d2b7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM256.so","hashes":[{"alg":"SHA-1","content":"214e58ea5b05bdbc09722a22a192f98c8d1aa045"},{"alg":"SHA-256","content":"bd7aaf7c6477d4637ee420cf8df1cc9974e7faf65346147024c1f6d5578753f7"}]},{"bom-ref":"9e71c2ff3c9fa174","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM273.so","hashes":[{"alg":"SHA-1","content":"72674778a9b2a64228016c8afb6a84635482f70b"},{"alg":"SHA-256","content":"e381172a8b36c1911a9a6ca2880bd19c69eb95c11fb5d61475b6dd3e5ced0f9f"}]},{"bom-ref":"4eee98b9dd5d1ce0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM274.so","hashes":[{"alg":"SHA-1","content":"54f435f5f919d16e31dc3d0c7ce7bb0dc2452d69"},{"alg":"SHA-256","content":"ade8cebd04ecbac79785d98d41679515549498329f3890a7d2b927336c312153"}]},{"bom-ref":"7b757d14313d3895","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM275.so","hashes":[{"alg":"SHA-1","content":"93b1145dd2312d96c8b965e2fcb313d8178b5f38"},{"alg":"SHA-256","content":"783206e57e0e741e459b8055277f59c3fbd3a68fa3d128a2398b7f6b03b3277f"}]},{"bom-ref":"52263ae9d8334240","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM277.so","hashes":[{"alg":"SHA-1","content":"0f0b3890b77f2d6f0f51824c5151e45b24833394"},{"alg":"SHA-256","content":"33a9dcfd575bfbc83b14dbbda0797740ed043f2a9a939ff0adcecf34b47801f5"}]},{"bom-ref":"cc0e4fcd39afdbcf","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM278.so","hashes":[{"alg":"SHA-1","content":"40e77bf53914aa04e8a9fb54cfcd4311027ebace"},{"alg":"SHA-256","content":"d738c2a6ed40c043b0c119b44e90c7c1c7094d01ecc2b864f31acc12b5a78d6c"}]},{"bom-ref":"ae47fde7eca9a96b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM280.so","hashes":[{"alg":"SHA-1","content":"d751c40340f669509f0d54be2aa76615997aacac"},{"alg":"SHA-256","content":"165891f4683c9fd2a60990971e6403003afd9a85d11799e5139d358938333738"}]},{"bom-ref":"06408dc48aac98a7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM281.so","hashes":[{"alg":"SHA-1","content":"9482ba815b7a9bb5e9d187217c11790843d101a6"},{"alg":"SHA-256","content":"63fa43bcf90e08ab9fd5f4d970750406b309f16ea56a3d08490f41031b9158ce"}]},{"bom-ref":"64b3acdef36a197a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM284.so","hashes":[{"alg":"SHA-1","content":"beb914a153a7d3b59dc924aaaf49b9211d3bc3dc"},{"alg":"SHA-256","content":"fa956e05420426206642d8d392dec1d53f1344029726e5f0dc287e784b94b79d"}]},{"bom-ref":"b9b3fb947aa909a8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM285.so","hashes":[{"alg":"SHA-1","content":"52601ad36bce24f9883ee7922df7109352d1cf31"},{"alg":"SHA-256","content":"35bb3c5b9c61c056980d35e096826b9cf791ed8f8728b076eccbff15945187bd"}]},{"bom-ref":"84bd33ec7e5542ed","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM290.so","hashes":[{"alg":"SHA-1","content":"a3f43a38333bd093706d63a701b1915590f3f282"},{"alg":"SHA-256","content":"5353c072f4c9373081793d51fababcbe97219b7ae1e4bac76dd49b299121e95d"}]},{"bom-ref":"70e96d00799afd4e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM297.so","hashes":[{"alg":"SHA-1","content":"40f5e0f0ef35e6d9b31cdd41f8b8914ac5bf413c"},{"alg":"SHA-256","content":"be59a19a6ce279595896600b0b7a6bc7e6651f410751320d3cadd7ad3ca614fc"}]},{"bom-ref":"0ab5a0a2aac73d12","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM420.so","hashes":[{"alg":"SHA-1","content":"527674ee8b8c3fa938f778cd9d3794960994b34f"},{"alg":"SHA-256","content":"e3160f182f3a5bdaa6acdf3a82f0ac362e2eb8276205a0502fbee9337bb0c361"}]},{"bom-ref":"98c6334886195641","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM423.so","hashes":[{"alg":"SHA-1","content":"7ddc768b9dc32568929b55a31e3257c1088c28a7"},{"alg":"SHA-256","content":"ee76a81f33cbd9991e0141ce7e2d64f0ff0c69295ffca5f44b0192d687b382f0"}]},{"bom-ref":"aed8faf4c26e9957","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM424.so","hashes":[{"alg":"SHA-1","content":"d602b03a5bbf1aab6b9bf69bae8b1bb80d38f909"},{"alg":"SHA-256","content":"6747cc773adc4ce0409e1f0be933e9291858826d384ed13b1ede8da34dc25e92"}]},{"bom-ref":"16b94005c9b29ed3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM437.so","hashes":[{"alg":"SHA-1","content":"23dc1f84e9796d6b8cf9d90740c91ffd6f17e8af"},{"alg":"SHA-256","content":"bb1843b65e4f7568a443be7fe860e4947ac0468cc28fb84d3295d8232ee3564b"}]},{"bom-ref":"c0b3bad466ee23d9","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so","hashes":[{"alg":"SHA-1","content":"23711435d7fc069bcbd4fcecc6d970475db030fd"},{"alg":"SHA-256","content":"a32c35235a73b653de324797c58fac1d1765e044a89ca891b1300dcc5578390b"}]},{"bom-ref":"2fbfa8fd4c9d96b9","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so","hashes":[{"alg":"SHA-1","content":"3a00621133c1c6bea5004fc711a7a1b7c4555754"},{"alg":"SHA-256","content":"1a91f228b1910b2cf4e9f8861dba13e5a316284104ca0e837dd135f9d847f842"}]},{"bom-ref":"7552875bbbed4d58","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so","hashes":[{"alg":"SHA-1","content":"80901d3aedddaf0004eca957d8a4e045042c0f0f"},{"alg":"SHA-256","content":"8f9dd3d73cd890ff6ff1e9d0ecb0acec5577a57130ab8035f1cea4e173a3392c"}]},{"bom-ref":"f4464561ca1d61eb","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so","hashes":[{"alg":"SHA-1","content":"5f11b370e3d5ba879dbbda1a6cec53757c378956"},{"alg":"SHA-256","content":"f8733d28e4409c2138fd1befc1a750c22f11892742ee3de17713416537fbe92c"}]},{"bom-ref":"53deb847ecd046de","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM500.so","hashes":[{"alg":"SHA-1","content":"c88d704756f75f984df8c27a1c870103da9d7254"},{"alg":"SHA-256","content":"8688b07cb6a070d8adc29d0af846ec3342e8a6e8b085eccad5b1b46966ba97b7"}]},{"bom-ref":"c77bda5b737a2c6e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so","hashes":[{"alg":"SHA-1","content":"82ec4035b269211ed715e550f373a61356cbd425"},{"alg":"SHA-256","content":"b881d5690c0530b5787e7d74d4d16b6cb208231d4a51fddfe40f64b82910d3fe"}]},{"bom-ref":"87a5b4d4c1aaf111","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM803.so","hashes":[{"alg":"SHA-1","content":"df3f8cd9726120fcdab1b888781f634b54322adc"},{"alg":"SHA-256","content":"53f94a943165496123d439c8d39d2c032cc2dff7a3b3e6ea58e625abb0386d48"}]},{"bom-ref":"e4d71152ec091137","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM850.so","hashes":[{"alg":"SHA-1","content":"a5634ea5f1e7939b9499c7b3cf90cd60f397ff91"},{"alg":"SHA-256","content":"770eb226a529b4f4e9f2be951e52bb2b74e72a02c5e58572f1a7ba8064422d4f"}]},{"bom-ref":"10df4c3de61eee48","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM851.so","hashes":[{"alg":"SHA-1","content":"407d18254b8823dfc80872ec3c5f78ea031b7a22"},{"alg":"SHA-256","content":"49feacd5fed92d472d2582bf0eaac310dc9df62fc9cefdb40efe7b6a2fd523b4"}]},{"bom-ref":"7234309018d9a233","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM852.so","hashes":[{"alg":"SHA-1","content":"66c7710c2f2313c259823af3c1733698c26e7d38"},{"alg":"SHA-256","content":"c26859f0f8b4c7a910c7a1399aaf0e35230d4c56ef63702abc7611d7474a87f5"}]},{"bom-ref":"5dde1e2bfb3aeeec","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM855.so","hashes":[{"alg":"SHA-1","content":"08c3bd4e0044285b04ab2aeff8a62cc257a2990e"},{"alg":"SHA-256","content":"5a02336da7fc4a0052166b16cf784bd28db3b2932c16aa0c2534684a6ff1d801"}]},{"bom-ref":"2380a62947974a04","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM856.so","hashes":[{"alg":"SHA-1","content":"0e470c2a4be0f3c528746ce7c8c6e35fb5f17e1d"},{"alg":"SHA-256","content":"0370a9771407fba243df73ca8e9840af07b1f4a99c1bbe22336af1eb081aa6c8"}]},{"bom-ref":"e72f064a5e83600e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM857.so","hashes":[{"alg":"SHA-1","content":"99914c0faa014d06387161e30c2e5b02ef3abafd"},{"alg":"SHA-256","content":"3d258725e070326b41224203cc284dce59370fd45bf15e1a925b5a14d843612c"}]},{"bom-ref":"bd5924b68c2b6d31","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM858.so","hashes":[{"alg":"SHA-1","content":"e40ad6d394aa2281b606f3ac050c063a27868580"},{"alg":"SHA-256","content":"cc2864891393dd32989ed77574a02857f814ca86b94e710fd426597327ef2200"}]},{"bom-ref":"ed88c5cee8b48d05","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM860.so","hashes":[{"alg":"SHA-1","content":"114cd9def17cbcb5e2e0e5897e6dae9ed0e58703"},{"alg":"SHA-256","content":"a98cdee8a94a93185785c09aa94e971364dba7dc788eedcf15d0d0de5fc8bd84"}]},{"bom-ref":"fb20b18b92c83e1a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM861.so","hashes":[{"alg":"SHA-1","content":"8e7fa0667724593611acb6a79a95a038589e2813"},{"alg":"SHA-256","content":"bd613a59d0da64066bca2e9f1982f3c98ca0739483c9d808111d7da6a2acb72d"}]},{"bom-ref":"4e796caa7d234277","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM862.so","hashes":[{"alg":"SHA-1","content":"02dd6c11715e18e36b5f1a38aa8c33bb7d764909"},{"alg":"SHA-256","content":"58b5b0b821ed8362e4fcb6d865784bbf7a4e11495a668029e64c1e8e23c270da"}]},{"bom-ref":"11e3fbda2142876e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM863.so","hashes":[{"alg":"SHA-1","content":"af469923cd130c6aa637de21db015408500ebd5c"},{"alg":"SHA-256","content":"d6ec875e5aa16886951a78dd8e1cd9d1de11dd9af12026e95db31ba30dfa9464"}]},{"bom-ref":"2fc12b4ae1d853e8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM864.so","hashes":[{"alg":"SHA-1","content":"2346d3d5307faa92301037b952cd4d1f5a14331e"},{"alg":"SHA-256","content":"81bf9545eac29ec7fb14a8c4fd8107d51e27988f7dbf87f43759d1a0bbe209dc"}]},{"bom-ref":"820d835b73e43853","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM865.so","hashes":[{"alg":"SHA-1","content":"5fd09899819652eb4f43ea2fcba3d8780adf57ac"},{"alg":"SHA-256","content":"33308f40ebed0a7c387b754bd74d2ea26f5f02ec0174c87e602de237b31c4aea"}]},{"bom-ref":"60339c0f8906f7ad","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM866.so","hashes":[{"alg":"SHA-1","content":"0bfc59453a7cf80d1bdadc8fa095ac1813273cb4"},{"alg":"SHA-256","content":"e9efc14b8473eab7957c31e38825b68bb0c59561ccca212068aa4be39bfe2584"}]},{"bom-ref":"f32416fee04f8120","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so","hashes":[{"alg":"SHA-1","content":"9089b5e2a6ad39e716067e3965d5cba19bfb8a12"},{"alg":"SHA-256","content":"e69b449ca7d028291c3fa8a99e1b4a7f2687782d369b77946c30b7b91f6d5372"}]},{"bom-ref":"57997cca2070d9f8","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM868.so","hashes":[{"alg":"SHA-1","content":"a12ca069356542058a3655e21bb4fd310e444e10"},{"alg":"SHA-256","content":"860845c028439f5cd79d32e962f2e881a37d70eec3e99a56d7929d5911cd5904"}]},{"bom-ref":"56927de3cdaa27be","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM869.so","hashes":[{"alg":"SHA-1","content":"c37e3250353f1e5b0e69b28493a1aa1f6395033d"},{"alg":"SHA-256","content":"d68de291df1a994e3dc97c984d6981f09f252681b2bbe2588cf7bcf34b3e0d6f"}]},{"bom-ref":"4e7934ff4373b7f3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM870.so","hashes":[{"alg":"SHA-1","content":"a898ee1779d5374793cf7f3f19a7253b3b6f857e"},{"alg":"SHA-256","content":"78a1a78afc4a6cdf751dd5d3942953ca5f22eac31a20c616f95cb06850f6ad61"}]},{"bom-ref":"138e9925a4bf2140","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM871.so","hashes":[{"alg":"SHA-1","content":"4ce4e188f2295b179cac669fcbdc35cc3fbb5c66"},{"alg":"SHA-256","content":"8cbb8596ed22056f69c7b1ebf96d998a82f9b9ca2145ea24e2d8950939c8cc20"}]},{"bom-ref":"c4a78cafbb0294b3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM874.so","hashes":[{"alg":"SHA-1","content":"5add4f2efb85ecf8c38c57813a76a66d609bbcc7"},{"alg":"SHA-256","content":"387188843d5439bdb96090e494a3d837e270e092b7a6df93758c9f2b8e57b72c"}]},{"bom-ref":"aada3e05fd0a2710","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM875.so","hashes":[{"alg":"SHA-1","content":"f940c82d3a006818be40d845f54821634af4aa11"},{"alg":"SHA-256","content":"bbc39702d8910090b52d36648ba8f33ac6dbd5f1076d3fb871ff66dcfac52e12"}]},{"bom-ref":"5e676c594072aeb5","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM880.so","hashes":[{"alg":"SHA-1","content":"c737206f97fbccbcaa018bd76490c17b9a8555d1"},{"alg":"SHA-256","content":"1fd5a147e964a6a28c59a19bb2436a3a963b519dba86585f61a40ce613cbb569"}]},{"bom-ref":"bd5751e8109bac02","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM891.so","hashes":[{"alg":"SHA-1","content":"c87509bc7b6016f0c368e1e24d13dcd074dc2749"},{"alg":"SHA-256","content":"b8ee6800d61627c5372e62481b4eb8fe1238da2c33721780ec73a668454e5c6f"}]},{"bom-ref":"ca37331751235708","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM901.so","hashes":[{"alg":"SHA-1","content":"e37443e051096e9a0e5bfb74811e9e376fbedb44"},{"alg":"SHA-256","content":"7d400c1f8250226a38237baa0b7c26c6251e83bb6eb2d2a2cf0a66976bb62740"}]},{"bom-ref":"03c2324c23b9e405","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM902.so","hashes":[{"alg":"SHA-1","content":"d2dbaa80e726690c66d61ad762ede92d85696e4e"},{"alg":"SHA-256","content":"c21a5f156b3256f175676a4178ccdba08544143edbbb1288eb8155afe1af4da8"}]},{"bom-ref":"f0c0c452871ac326","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM903.so","hashes":[{"alg":"SHA-1","content":"02bfd3a87a67df09e4eb7870116aef998ce72a58"},{"alg":"SHA-256","content":"4ee1c48e1d0d887a8c0e49e07180346aea0d4bbf694338f27c0c266bb5c10fc5"}]},{"bom-ref":"a2d5afa6164609bb","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so","hashes":[{"alg":"SHA-1","content":"cf96d8aa87d5fe24fdca994b3e458c4800853a8e"},{"alg":"SHA-256","content":"533afde596f08662d0da3e291211bbb2aeb12900d868afe0dbd78b12d5491b9c"}]},{"bom-ref":"e13a6449bbcfe032","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM904.so","hashes":[{"alg":"SHA-1","content":"fdbcd6c469f8c04efd795a997e3ecd472e0224e9"},{"alg":"SHA-256","content":"73da15d95de8631509b139fc15ffc6c4c15c9c1308fb23f212632d360c14807f"}]},{"bom-ref":"d0a0f870d9204cbf","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM905.so","hashes":[{"alg":"SHA-1","content":"1c733e07256b27cf218746ef29d1c437f81ef112"},{"alg":"SHA-256","content":"ca9369cfca57d36dd52d980fdbc02d695621c39f0d1bbc9a9a0ee97efaf6c0f0"}]},{"bom-ref":"effdc986b0705afb","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so","hashes":[{"alg":"SHA-1","content":"5d80c7cea21e11098add3f1c9f231f8a28a09c87"},{"alg":"SHA-256","content":"e61005c782c03701d08c6777bed16f2b8ded7f7c00dd03f580b1e6c834625552"}]},{"bom-ref":"e6a52b36bd45224b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM918.so","hashes":[{"alg":"SHA-1","content":"b9ea0e843a1f7bd537042c9bc8952d170d587859"},{"alg":"SHA-256","content":"bc4e060392679f746d2b86d0b657ce0319054972c612a8d30282044f3b4ffe32"}]},{"bom-ref":"7afe7170a616b756","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM921.so","hashes":[{"alg":"SHA-1","content":"1dadaa3c840ea421c98bf3fb5e9624639a8340a7"},{"alg":"SHA-256","content":"8acc170faf573dad4969daa1bcab896147265fbf3c7b9132e722ffdfab19946b"}]},{"bom-ref":"93c76c0b7bca1a20","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM922.so","hashes":[{"alg":"SHA-1","content":"8b6013e16d393bf1dd4c973abca20c3f69263ad6"},{"alg":"SHA-256","content":"a5a3c713330654ca4227e2700cf592e55d177b74950cbb163419f1d45db192a9"}]},{"bom-ref":"2d146d9b047b1133","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM930.so","hashes":[{"alg":"SHA-1","content":"05aff59abc1972250c2dfea9741c2639bf147396"},{"alg":"SHA-256","content":"aae607cab8c05cd0aebd5bb1c454c8071ece915bcdc69ddc6a7a2956770dc70d"}]},{"bom-ref":"c5115d0836099218","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM932.so","hashes":[{"alg":"SHA-1","content":"29dd9516c732035c126fd01019870294ac423a8c"},{"alg":"SHA-256","content":"5e8d8884c02072e4be0c9e80b6032553ece53116491faa553298c37461867469"}]},{"bom-ref":"8a1e5e3f44089aad","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM933.so","hashes":[{"alg":"SHA-1","content":"6209861f127ca94c2be7d331413f820795e9d76c"},{"alg":"SHA-256","content":"552cb3020e95e4af7ef38f0350ac25612a7d2ba283f1335f39e8cb85d068428c"}]},{"bom-ref":"6c71f32abffb028f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM935.so","hashes":[{"alg":"SHA-1","content":"08e3f9fcd5ae625c00324263b0e960a5bce4118b"},{"alg":"SHA-256","content":"eba61c10a934f1d5ac794975a281301ae4bddbe5f279a70a02fd2826a63d7c45"}]},{"bom-ref":"80e3a8b2153d0eca","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM937.so","hashes":[{"alg":"SHA-1","content":"94a0c16bb9a0901c0df195b14d4c42288e2aa95d"},{"alg":"SHA-256","content":"7dfddfa24fb516cb520940f5e3aec83f96dae8bdf9251d1ade3f0d55acb7f519"}]},{"bom-ref":"a3c8bfe420bcc829","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM939.so","hashes":[{"alg":"SHA-1","content":"0264c6dcac788fcbfadcd700390d6ac957574496"},{"alg":"SHA-256","content":"1a810f0d9278a2a08ac81e32b68eb0f6197c2edbeaadf7fd2cc90331c6d69883"}]},{"bom-ref":"6265800cb190fab7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM943.so","hashes":[{"alg":"SHA-1","content":"3e56ce1b321bfb3897f961992d623d58677eb1f9"},{"alg":"SHA-256","content":"c2bbf6ade39bd7e3bc2e054f56d04c38e75c989e6e4ab655b389ec1d105f0933"}]},{"bom-ref":"2395a3d955fbfd95","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so","hashes":[{"alg":"SHA-1","content":"cfedc00a3840637817fe8a984b3baa54e7dce570"},{"alg":"SHA-256","content":"a8a0c70c284e09187252588a009bee82b016c73ba5664b321abf58efefecd87b"}]},{"bom-ref":"351afdbe1e888272","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so","hashes":[{"alg":"SHA-1","content":"4c01d350e41b77b7151b1812f93b60cce1d2ddb4"},{"alg":"SHA-256","content":"8c3f3df624c4a9c24d9b4e6e8fa30140a9d182abeb8c1996788a524c38576138"}]},{"bom-ref":"d2e0a82056ca06fa","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so","hashes":[{"alg":"SHA-1","content":"31d98b77f9a004f4aef6fdde3dc42cb2ddba3a89"},{"alg":"SHA-256","content":"1927ed087b139ca1a1e0935ecc90cb663d1a525f81b1eab250dd675c4f7e484f"}]},{"bom-ref":"a704416ea45567f2","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so","hashes":[{"alg":"SHA-1","content":"5130d7b520fd956ed0a61608e0c5d736ca433684"},{"alg":"SHA-256","content":"dcf4a51f0230d8d3cbb233c6480ff08438be99fbe045b6926bdbb65a1d5f595f"}]},{"bom-ref":"5a8460351c97ea16","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/INIS.so","hashes":[{"alg":"SHA-1","content":"12ad9aa681529b834fe276679040ad0f2119babc"},{"alg":"SHA-256","content":"2d32bbdbe111777de5b05173572e4ef4b139150c9fdecfb941e226499f8bb2e4"}]},{"bom-ref":"c059d41c90f41962","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so","hashes":[{"alg":"SHA-1","content":"d5392f086e52a57a8df2282da75d6d5b476e7496"},{"alg":"SHA-256","content":"4bc6a652114ab81ac1da54cd8babb9ead9ecce06849e581cce261172f54a0331"}]},{"bom-ref":"c328a2e1754eb231","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so","hashes":[{"alg":"SHA-1","content":"74254f56347eeacc1352290225575ea4d288443a"},{"alg":"SHA-256","content":"324348fe7d352cef1f0181ec2d5daf879a8e3d4e8197c3732f064b17467ee4ef"}]},{"bom-ref":"80f09e04cadd5975","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so","hashes":[{"alg":"SHA-1","content":"8d11ef29ee62965911278c07ed1174656406d627"},{"alg":"SHA-256","content":"fef989fede3c435b504cf9a83cff1a4da8f3f8dac56adc849b3072c67d9edd9f"}]},{"bom-ref":"c7c62840a00e95e1","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so","hashes":[{"alg":"SHA-1","content":"cc71ddedfa635b2eb7cf3acfb454691ce08129a4"},{"alg":"SHA-256","content":"057c638204fad72486c34ae451c41bb0957540a6134c0493170e41588c821be0"}]},{"bom-ref":"c5faeb8b3b5a9bb5","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so","hashes":[{"alg":"SHA-1","content":"0b886b3ebdde2e1322b43bb2bb158d0e6352836d"},{"alg":"SHA-256","content":"971581b0ca6f6ab60d87e6225beefca3b619a226470a22b5f40b2682572723c2"}]},{"bom-ref":"5389362b2dbfc328","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so","hashes":[{"alg":"SHA-1","content":"c3678dcac01b07904f520115ba64f0dd10a3f734"},{"alg":"SHA-256","content":"2cfc67d1dd1ce2e69f309ed2967177dfb647ea74029ef890f100335337784ea8"}]},{"bom-ref":"99a4d31345957fd2","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so","hashes":[{"alg":"SHA-1","content":"3194cae1f01d7994282f8b20be51c6be303f060e"},{"alg":"SHA-256","content":"31815d65f248468b26b08cd2e0326b91d6963d7d4594da78771fc4eb9151e489"}]},{"bom-ref":"d4d3b872700faae0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so","hashes":[{"alg":"SHA-1","content":"38ea04869d3584bf15ed1a468fe054eee6c33b0b"},{"alg":"SHA-256","content":"db2343f674c4220a1412be0222114e1007c6c55385e1376ff79be8b53795ebb1"}]},{"bom-ref":"85674623b6184cd0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO646.so","hashes":[{"alg":"SHA-1","content":"3c863949e7dde7cbf0aadd77e89fa17af40542dc"},{"alg":"SHA-256","content":"904d4e262cbbaf3b6eb80d83963ee8cc8d5850efcb4ecb5b229abdf8fb8434f7"}]},{"bom-ref":"3ceb437e4efa212d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so","hashes":[{"alg":"SHA-1","content":"1ccc2491875f6b33ec7331c2ae95b601dde4f131"},{"alg":"SHA-256","content":"c05c25d0b39968bd5f565233ee5107b1a6a8112462146317f6e65313442cc9a0"}]},{"bom-ref":"7bf080b28d784321","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so","hashes":[{"alg":"SHA-1","content":"85cdcc83378faa58b84c67d623d194cea9659167"},{"alg":"SHA-256","content":"be37ee85c2b9464bc09c41a58d074eac36e24b206c3cdb9aae0df4ec2d7c97ce"}]},{"bom-ref":"f6bc8f985537c685","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so","hashes":[{"alg":"SHA-1","content":"d75c0bd2603e017b1c254865b2e0090a9230ecc1"},{"alg":"SHA-256","content":"e95fa33e466cee3691cd3d166d40eb950c96ebe1bca0ba60922155e68ca6c6eb"}]},{"bom-ref":"efb1f3f256700032","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so","hashes":[{"alg":"SHA-1","content":"af2ad17335a542c3ccfe5b371a3416871a83fae5"},{"alg":"SHA-256","content":"6c7a3972a4669b3314fa099598562187ce2ab1ac83e54a879fec36b4bfad0baa"}]},{"bom-ref":"54adc87192b479c1","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so","hashes":[{"alg":"SHA-1","content":"0adde1c983fda5f9f827b47ff1c9cda17a7e1765"},{"alg":"SHA-256","content":"e806684bf9ab3d48514cf840be43db165dc06e7d819916984e75f88e4e69c49d"}]},{"bom-ref":"dd94ea56ff2000b9","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so","hashes":[{"alg":"SHA-1","content":"774a10c91b1e165e826634fad5609e3d335afdf2"},{"alg":"SHA-256","content":"8ff67983f6e7092d4b46d860ddbaf91558de1370899e92dfe5f482d9902f8ed5"}]},{"bom-ref":"f3fb93f1e813084a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so","hashes":[{"alg":"SHA-1","content":"fbbc4f87d951c955ac9b57f30461db95278e9ab2"},{"alg":"SHA-256","content":"a67508b99641c22f25e4158c7c045691cb8d81ea7dd96f8a17b821faf7a6181d"}]},{"bom-ref":"eea67a67383d8315","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so","hashes":[{"alg":"SHA-1","content":"63bc30855a2d25f0721396ab68bd757f6698b7ea"},{"alg":"SHA-256","content":"dff604254965d5cc65102aa4eccc06257ef56286d5abf5bf14176b5b1ca76c86"}]},{"bom-ref":"91a06d45f1108bd3","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so","hashes":[{"alg":"SHA-1","content":"df2968c9f35328fd2b93d46905a65f911f026272"},{"alg":"SHA-256","content":"c7db3bccb1f873456485ea1b1db907b041529e560beaf355e27c522953829585"}]},{"bom-ref":"28980b2b90ae810c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so","hashes":[{"alg":"SHA-1","content":"9df2b2df502ad109dd624264d357590b68fb0d6a"},{"alg":"SHA-256","content":"c63fd2c3bfb09a89a3707e447eb3ed21a2653aa2fdaff8884efa95216a501971"}]},{"bom-ref":"bbfc095468651365","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so","hashes":[{"alg":"SHA-1","content":"01bcefcaa1ca6ded86ddf902c747d8ad82f3c532"},{"alg":"SHA-256","content":"0aa46f6641682f912a003d9a7109842a531650534c4dc3cc40556eb56a2e071e"}]},{"bom-ref":"48d75db910242b6f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so","hashes":[{"alg":"SHA-1","content":"478cc3ff0b4db46db50e89823ee830eae06b2d15"},{"alg":"SHA-256","content":"76bc3eede19d5465550bdb0a9776e909bbc0e43ca940fcde4d996ddba5cc7ea0"}]},{"bom-ref":"4906c0dccba17277","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so","hashes":[{"alg":"SHA-1","content":"13e178a60bfc29f0374aa3c860ba39c1bce6a2b9"},{"alg":"SHA-256","content":"a425992893bcbdf6762a1d9fda48f47117be9caf917565c1dea1968f1bb3a81a"}]},{"bom-ref":"0ced367a72128b4d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so","hashes":[{"alg":"SHA-1","content":"cc059ad82b43140e963ce2ba3f6848cafc41ccf6"},{"alg":"SHA-256","content":"04bef1d7e504573b1370814e546092d2452377f1e18ef6add6851870ca4fee7b"}]},{"bom-ref":"6894223b51ccf35a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so","hashes":[{"alg":"SHA-1","content":"7795a53ab39bfda0e53307469ca6c35ede30800b"},{"alg":"SHA-256","content":"96e23781655b2fdca6bb14c17f0455b8dd288da83925231c52c36d4487da0dea"}]},{"bom-ref":"8eb5fbc68c27224b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so","hashes":[{"alg":"SHA-1","content":"328d1bfb02a1e07b92a38e6a9679c866eb1e13e8"},{"alg":"SHA-256","content":"7a3e399a2d0150c4264a946889dd8e00678937b87926401407d042efd8ab30c4"}]},{"bom-ref":"c37027224d177c4f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so","hashes":[{"alg":"SHA-1","content":"30f207586505a3c3e0d3cd69597d3141a477177b"},{"alg":"SHA-256","content":"777d0432c6e6da213e4b52ed9b194ff3f6b4247216766d24ac26ad02c8f4c3d2"}]},{"bom-ref":"ddd16b42ba976b1f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so","hashes":[{"alg":"SHA-1","content":"c74575f1919ff57595be4d540b911d89f176057c"},{"alg":"SHA-256","content":"2248b85f1bebbba90ebb375bf49e2c9bbbd68c4d7995bac379ce799f29331fdb"}]},{"bom-ref":"64bd4b8f912692c4","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so","hashes":[{"alg":"SHA-1","content":"c01cd5953a4772890c909b281edfbc79bfb8f530"},{"alg":"SHA-256","content":"55e9fde07a952959527a3451fda62323a49260d4d782c5f4d9e40e837906c430"}]},{"bom-ref":"26334ff60eab6b87","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so","hashes":[{"alg":"SHA-1","content":"fd76c2b1c3b888a2377dbf061e16c44f46b29715"},{"alg":"SHA-256","content":"7601cba58691ad928ebf500d8e82d174177b7c24d569f7e5f4fc688de19751e3"}]},{"bom-ref":"c434ce31ca02c13e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so","hashes":[{"alg":"SHA-1","content":"efa8ae45b518dc4999134cd86b4000dbae9a00e0"},{"alg":"SHA-256","content":"94f1309c59883cf5bf1c98b16852b64c4a0051c43a3f0148715d416664d5f3ff"}]},{"bom-ref":"fbb41cbf4eeabe8d","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so","hashes":[{"alg":"SHA-1","content":"2e6ba2c0e1e1bd2ecafeb1d446170b048402fa73"},{"alg":"SHA-256","content":"d34f08e7698e9ec4318e8c89d5f5ee3a2fbd4db3e47c24101bdeef672ae6908b"}]},{"bom-ref":"3fbc242e3aa69df4","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so","hashes":[{"alg":"SHA-1","content":"3d4dd1ed68d4c07c8468fdb2a77747d0fbd13e39"},{"alg":"SHA-256","content":"1c04621a72b10fc1aee147dcbefff570200d4a1b1c8d2813f12ca94e1f5daae2"}]},{"bom-ref":"971b93265d5091a6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so","hashes":[{"alg":"SHA-1","content":"3263ffc9ac9ba382cb59fd397ea510e31178f8f9"},{"alg":"SHA-256","content":"b1a063cae1f047af52aedaf34fdb4841dd23d72b204fae252474d55f6a231982"}]},{"bom-ref":"9eebf077d3df1378","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so","hashes":[{"alg":"SHA-1","content":"9b307d5c5532f95b45eb5237bc39b95d1369598b"},{"alg":"SHA-256","content":"83ec6eb3c34a6a2bc154d3dbaf9bc994858533a0856e1f5996f5349d0765096b"}]},{"bom-ref":"f897459f777829c6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so","hashes":[{"alg":"SHA-1","content":"3e64d1cfab890ba7629f25e55d10215fc6c31270"},{"alg":"SHA-256","content":"836b9d6d040c4d518fbf6760662823dbed3543f9585783928b80f34ba471051f"}]},{"bom-ref":"f3ed9bff1fdcb2ff","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so","hashes":[{"alg":"SHA-1","content":"4a7c59e34b52e9a63320018b24a3f860cd952dbe"},{"alg":"SHA-256","content":"1d805ad55c593e3a7a923db50a8d58906705a68c53f4391a7454299d7c117d90"}]},{"bom-ref":"aaff521b44a2630b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so","hashes":[{"alg":"SHA-1","content":"b1fad415c0ae67fd5ccc483cb43d5f70cffcc8a4"},{"alg":"SHA-256","content":"b108905f69ae63764bb07e7225dcec76e062ac350b6c5ec6e4c9114a60fb0734"}]},{"bom-ref":"1ce05819a0cd3627","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so","hashes":[{"alg":"SHA-1","content":"be355f0dd0f1feb3d1f9701af8134c6788ebd327"},{"alg":"SHA-256","content":"ff8b153eccbd432773964a1820aaf968b91f23183c821d45032e89309850c89e"}]},{"bom-ref":"099a6014fd52d141","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so","hashes":[{"alg":"SHA-1","content":"753e0ab3a930f9e64bc39494c2ed62f12507d56e"},{"alg":"SHA-256","content":"6473caf72731e34f9a913e771b92d26f08ae049ff6d3cdba57238ae0ac6c525c"}]},{"bom-ref":"2e40ec1cf61ad00c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so","hashes":[{"alg":"SHA-1","content":"4244ac10eeeaadd1b36bd1c07e6e74e85c14eea8"},{"alg":"SHA-256","content":"665b5fdc33000127d49f64b48a832cbc01d2fcd42c0ec354c46bb78d4e14ca8e"}]},{"bom-ref":"c27670e7afcd1573","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so","hashes":[{"alg":"SHA-1","content":"04e812265c2b9b030f4bd4877ab8e387ea14bf7f"},{"alg":"SHA-256","content":"8a38dbf82248b37162e98ff5e7ab2f6ee8dc28e7c926f816f2339f51e26b1f77"}]},{"bom-ref":"b93a807733d9ef61","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so","hashes":[{"alg":"SHA-1","content":"31398bf60a7b23ab0c777b80b1ca0d8e7443e67f"},{"alg":"SHA-256","content":"d684a3f10a3315ccf865172d6a8247476da2a2d6dc07705c2b82af18145c5e07"}]},{"bom-ref":"c0eaa59d210a551c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so","hashes":[{"alg":"SHA-1","content":"2742d36496a0288fdafd3186a2ea34a6a664cfd7"},{"alg":"SHA-256","content":"94970c6214246ae06165ca89c8d0c07502c98d115132fad3cfa46456b9c73ac3"}]},{"bom-ref":"5c623d371eaab1f7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so","hashes":[{"alg":"SHA-1","content":"f992b798aa2c535e56c92090055cbf60d8b52afe"},{"alg":"SHA-256","content":"89fef9170b29dee60a0121e0930c153c91953e08528d7ab9ffa4eec6f77eb865"}]},{"bom-ref":"698aea62bbd81cb0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so","hashes":[{"alg":"SHA-1","content":"31e1bdb8b37a1ea161162a0833bda8add2f34753"},{"alg":"SHA-256","content":"37e1132c26f71e7ff64ed602f2d7c11c304f42ac525887a65010b9fc0f1d5a35"}]},{"bom-ref":"b84d43e86576d8ed","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so","hashes":[{"alg":"SHA-1","content":"505c47eeefcb6c775c1a99db6314dafc093e0797"},{"alg":"SHA-256","content":"3deceeba8a3cf1bfa39deb26f18f4418d8384b7b467c9a405201465ce22e79a1"}]},{"bom-ref":"7010239f331726d0","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/MIK.so","hashes":[{"alg":"SHA-1","content":"0821ffbec2904633648d29464cac2dc73f53ff99"},{"alg":"SHA-256","content":"53dcc21a1f0f2593125964e92c71283a1afa488314c7719d503b211a4ea7d212"}]},{"bom-ref":"6409ab49042b29c6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so","hashes":[{"alg":"SHA-1","content":"cfd3a08711ca156462affcfaef64b0c716f0d869"},{"alg":"SHA-256","content":"512189ebf2ce74487b8b734445bb511f0bacd1f9058cbeedb46e75d13eff634b"}]},{"bom-ref":"eb996dc334dee94e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so","hashes":[{"alg":"SHA-1","content":"ddc29c6d0e4be944dee343ed46b952cba60b0b99"},{"alg":"SHA-256","content":"1e627690f928964ec96f416c0c52b03072cd2e857301b01b73a2d7457be4577a"}]},{"bom-ref":"85535c9b0f8c21ec","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/PT154.so","hashes":[{"alg":"SHA-1","content":"f751be7f590f0d1bbce9610964516ef495f1d384"},{"alg":"SHA-256","content":"a12e266f491207cc99b7c0e8fc8dd796fea4e537f426ec3486e64eeb403a992c"}]},{"bom-ref":"1692f8d2ca87b3ef","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/RK1048.so","hashes":[{"alg":"SHA-1","content":"44bc943d721fedfc64e153f7e47767043898604c"},{"alg":"SHA-256","content":"1f4e127fde3f18feaaa178ce8e49a68efb514a95d66c559a7014067570185480"}]},{"bom-ref":"61408e7654e99cb4","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so","hashes":[{"alg":"SHA-1","content":"72042141b21f6eef58b36c9d283bad9d74d6b46c"},{"alg":"SHA-256","content":"d3fdaaeafb4bec170a2bc57ea4937dfcae2dd4c09ef3d4514f6352dab02e4ab7"}]},{"bom-ref":"686859a88babdba7","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so","hashes":[{"alg":"SHA-1","content":"6d772d0a996e6252e1e10bff57c33ac9c60c513a"},{"alg":"SHA-256","content":"d017b014d168ed931c079440ae697fdb5d84bebef4fe70596aad565666638a4c"}]},{"bom-ref":"943f4e7b84e88299","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/SJIS.so","hashes":[{"alg":"SHA-1","content":"e52f4d9f49dd9178a06df9bb5cf9ffc7bf38e993"},{"alg":"SHA-256","content":"3fca790fbea4622ac4935f9319238c2e141b43d3bd9fc235ec42f70468b9a5e4"}]},{"bom-ref":"784983ec765da823","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/T.61.so","hashes":[{"alg":"SHA-1","content":"2bc8da179bc6ef42643b307b3760c074e820b495"},{"alg":"SHA-256","content":"aa5c5a0eb426092f5338dd3795bea2226d3b767f4f64bf0b00f6fabe4e13ed04"}]},{"bom-ref":"74b9058c979dda88","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so","hashes":[{"alg":"SHA-1","content":"8eb3e33573f26afbebff926fdc7b813f1d113342"},{"alg":"SHA-256","content":"6e8c1171eb3a78b75b434fa517d39b3ad6fabe8d6a3b8b9801312f51a9e6ab65"}]},{"bom-ref":"d9c860491457b82b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so","hashes":[{"alg":"SHA-1","content":"7fe205dfc4e0c0c8f245cadfe4e0c6b5c999628b"},{"alg":"SHA-256","content":"c96a5c5d72eb97796449ef6ae2e5ad00a6942ba496c284ac0341339c4603fa4e"}]},{"bom-ref":"84993bf24bf70f15","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/TSCII.so","hashes":[{"alg":"SHA-1","content":"2457fb95fa89425b55c18e537721d8bc443ba995"},{"alg":"SHA-256","content":"9edf4a8bb01161f2d955f930deea51106898ed9fe24296a8a0a0afed6579686a"}]},{"bom-ref":"9cbcdb8e03027fea","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/UHC.so","hashes":[{"alg":"SHA-1","content":"387d74022bd09d4b23d49e0d7b042acefef0ef8c"},{"alg":"SHA-256","content":"cb0fc033b1a9aa2c3b6deba600fc8afb4fa2c304ab0d40c67dd0fa1146475fe6"}]},{"bom-ref":"f9c163cffa5abc2e","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so","hashes":[{"alg":"SHA-1","content":"7e4e9b64046b6c9e6ded37c33392b9f285315d18"},{"alg":"SHA-256","content":"54b072a9b78053543acab03c2fc6e41ac47195976ccaf2f5e7ec2f5314ffbb93"}]},{"bom-ref":"2328597939777f87","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so","hashes":[{"alg":"SHA-1","content":"094a4cc24519ea806148126cfd2aad8392e89a4d"},{"alg":"SHA-256","content":"953f051398791fe6ef7699ca0569e4c561d873ac86f5136a840c65bcd3827efe"}]},{"bom-ref":"44254d7b19560850","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so","hashes":[{"alg":"SHA-1","content":"70611742faff0e06d116170825ea090799448f54"},{"alg":"SHA-256","content":"c1af9dd1794eb25f5fb4853831d8d6edb2146fbd2c796878953fad923771bbf0"}]},{"bom-ref":"da44bd3c3485bceb","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so","hashes":[{"alg":"SHA-1","content":"5a096e9f2411f9157e6667ff018a5c257a55437d"},{"alg":"SHA-256","content":"68679fb092d6d9067c7514aa7e5a1546404c0b7785fc9624ca77b0dcfd7a2b87"}]},{"bom-ref":"cbf7fea853bb121c","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/VISCII.so","hashes":[{"alg":"SHA-1","content":"e7a477bd2541a91f6e8c302ec4df0e5d0b023d03"},{"alg":"SHA-256","content":"cb86123265642c276ff7ccbf5f96c97a026deaddc7f9c971c134d1b2147bd1cb"}]},{"bom-ref":"74bbca6f459a09cc","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/gconv-modules","hashes":[{"alg":"SHA-1","content":"274a433dba3471d0b839ae2403c5f376854196b6"},{"alg":"SHA-256","content":"57793b77fddf602134707ff717c99beb44941904f103175971dd653aa57fac85"}]},{"bom-ref":"07b410c4853c261b","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache","hashes":[{"alg":"SHA-1","content":"3b5bb225fc7fbd2b94c6c039092d2b9501aa87a7"},{"alg":"SHA-256","content":"52c227df9d53248238602c1ddaccd2c8ddc4cc6a61aa45d7c425af590b8806a5"}]},{"bom-ref":"3c8419fc32574e2a","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf","hashes":[{"alg":"SHA-1","content":"4a6635a33ae1a3a859e483df9188d7cdbe74b1fb"},{"alg":"SHA-256","content":"f2e27de033d617a30619daa611be070c2a3c6d853e6498781cb88b55fcf04ed7"}]},{"bom-ref":"55a8e59918554056","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libCNS.so","hashes":[{"alg":"SHA-1","content":"f37efe4d0e65463fb37489f02618ff942f74833d"},{"alg":"SHA-256","content":"96180457c28ec5e312da9f769953632de7b7aebc20088410254086e1328032c4"}]},{"bom-ref":"f7e9f18eb7644540","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libGB.so","hashes":[{"alg":"SHA-1","content":"c70a88f00d791d8100669d7913a79687e1728154"},{"alg":"SHA-256","content":"15dd3f4f3c377361eb4f6682815340c6e6c845827d52d1cd7dffda0b76e5893f"}]},{"bom-ref":"c3ed168edae1a17f","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so","hashes":[{"alg":"SHA-1","content":"c2e7b18dbbc292054005fe3b801501b669cd9a68"},{"alg":"SHA-256","content":"e4cae5706f5838720f5b7e4c9ea090d0f6cd1361a96c798456ab59e21d85e325"}]},{"bom-ref":"f7fb3dc3723b11e6","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libJIS.so","hashes":[{"alg":"SHA-1","content":"4b52e2567e6d534476d6f33b45b1c4228d422975"},{"alg":"SHA-256","content":"4b934b3f8fedd8f27a68ec9a09aa4b69eb913a2fb48376fa45be4e254a3c5fee"}]},{"bom-ref":"cdb52724a3da8ea9","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so","hashes":[{"alg":"SHA-1","content":"1271e901b68b427cfcc3490f96ea496130697408"},{"alg":"SHA-256","content":"86bd0e765fe51c1ffeeca9ac05845fbe63a04edf6faffccc91abb9e0418cf6a9"}]},{"bom-ref":"7a296971ba9c40cb","type":"file","name":"/usr/lib/x86_64-linux-gnu/gconv/libKSC.so","hashes":[{"alg":"SHA-1","content":"ad7918830b7083fd059ccf874d7e5bd6d7376b64"},{"alg":"SHA-256","content":"50f4412b2ea466ec54313fa6e054fafccc12fa588e40d658c088eee784d9452d"}]},{"bom-ref":"642bdbee859f1404","type":"file","name":"/usr/share/doc/libc6/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"f133232e65cf9d30fd385ba9b92266fcb5c0b8b1"},{"alg":"SHA-256","content":"79408d7c17b316acbd64927833f3e8b7c263b156f268bf88ded05dd484045fcd"}]},{"bom-ref":"914da59e1aa53072","type":"file","name":"/usr/share/doc/libc6/NEWS.gz","hashes":[{"alg":"SHA-1","content":"079a22fc989c28bde8ebdb6788738acbf5675712"},{"alg":"SHA-256","content":"ab35f664dd33d6d6413f45bbfe5d7829b834da46f128ff73f9206381adbf4963"}]},{"bom-ref":"f1bed43a88299221","type":"file","name":"/usr/share/doc/libc6/README.Debian.gz","hashes":[{"alg":"SHA-1","content":"6f97553bcf63fd634f55c095c7d320fc5710a527"},{"alg":"SHA-256","content":"103388d45c31c59534c3c71378dd532a69d90b6fa0618cf41cdc123613d463ac"}]},{"bom-ref":"8bf8905b2e90632f","type":"file","name":"/usr/share/doc/libc6/README.hesiod.gz","hashes":[{"alg":"SHA-1","content":"64cd179ff5e04220667bf91c139a71b4f00ef0e7"},{"alg":"SHA-256","content":"1c29df03287ea5a50015da416a42ff3622fe7a97a7598f0cc9693b729fca15e1"}]},{"bom-ref":"f0dfc846f6e07011","type":"file","name":"/usr/share/doc/libc6/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"8511895ab116c5e76cf9ff2fc2d535afdff986f3"},{"alg":"SHA-256","content":"aed6d774f2e224e54822147afb414fed82945b09cd16c55b59009970402fec70"}]},{"bom-ref":"6089ad1d3ff02f05","type":"file","name":"/usr/share/doc/libc6/changelog.gz","hashes":[{"alg":"SHA-1","content":"f7ae4398742b7f55ccc4b70211ab3a1c7dc7c2de"},{"alg":"SHA-256","content":"b66db2deaee0257c5a456c17ee3058e014b51d596466b8454da17936a38d7e88"}]},{"bom-ref":"00a0d4608c9233b6","type":"file","name":"/usr/share/doc/libc6/copyright","hashes":[{"alg":"SHA-1","content":"5c4df62d190848821200ce4041d2753bd431a7eb"},{"alg":"SHA-256","content":"40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"}]},{"bom-ref":"e00d74407bfcac01","type":"file","name":"/usr/share/lintian/overrides/libc6","hashes":[{"alg":"SHA-1","content":"f04fa1695efe0177ff27db0a1da810841551395c"},{"alg":"SHA-256","content":"721d9d61cab96ffc0d684525ce0858096a9fe78cde675a757a61dc393d3c191d"}]},{"bom-ref":"23b6b2aaabe13926","type":"file","name":"/var/lib/dpkg/status.d/libc6","hashes":[{"alg":"SHA-1","content":"67ac8ff7745135243b9670ca01c957707ef9436a"},{"alg":"SHA-256","content":"1a622c0af548f98b1f150b801fdeafc879e2c68254ffbadc232b5e9fcc0ab5e4"}]},{"bom-ref":"7a6298e4af245ae2","type":"file","name":"/var/lib/dpkg/status.d/libc6.md5sums","hashes":[{"alg":"SHA-1","content":"624049ffb9b20401eb97962de81748dc65947747"},{"alg":"SHA-256","content":"2d73ce28ad6ff5b6265fc29198b1aea8313428dd57dd366bb10da068875b44e0"}]},{"bom-ref":"a2d4c1ca3e966bbe","type":"file","name":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","hashes":[{"alg":"SHA-1","content":"9efc9df5f9a5e8b7c6a73fa384f4db65e3bf5daf"},{"alg":"SHA-256","content":"49f95780a49687dbcc584ec54ac01429a50e05f91b1eef00167c8803322aefac"}]},{"bom-ref":"ea98e287bd2d5b0d","type":"file","name":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","hashes":[{"alg":"SHA-1","content":"4a167419566189b6f614b2e8cdef2bc7df4106eb"},{"alg":"SHA-256","content":"4851d64ee4a0a138b22951ff846175fc7d714acf3118058e922b1894b8114719"}]},{"bom-ref":"fb862d1af542b1b8","type":"file","name":"/usr/lib/x86_64-linux-gnu/engines-3/padlock.so","hashes":[{"alg":"SHA-1","content":"bad85a68cb4dc8a395dfeb2c843600ac50958212"},{"alg":"SHA-256","content":"2cc3222cb567b14c83c2b28955e34c90f87c9b2f4633416c31851fd0f55a658a"}]},{"bom-ref":"dbb0db46340e3893","type":"file","name":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","hashes":[{"alg":"SHA-1","content":"ef9cda44ea81ffc5e31d74869bdce6e96ac6e354"},{"alg":"SHA-256","content":"55019c10d21b875e0328ec85c88702b90a5661dfd9f8ca7bb7f6def6b7e8a604"}]},{"bom-ref":"dd69056e209899b8","type":"file","name":"/usr/lib/x86_64-linux-gnu/libssl.so.3","hashes":[{"alg":"SHA-1","content":"dd0081f41601786106628edd492141e3ecd569ea"},{"alg":"SHA-256","content":"a3035eb28fa9f42630142755c20b5796ce687bddbc601dfcc3e9c5cf18b2726c"}]},{"bom-ref":"dcf38da0fb8038f7","type":"file","name":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","hashes":[{"alg":"SHA-1","content":"beeb5222d1d3051922d744f7c8b199f145e6f7a8"},{"alg":"SHA-256","content":"09f22b59b3aff6770f92493e7d8deeb287076bc9f166d8235301903bac8aaf30"}]},{"bom-ref":"f1bffc792956677a","type":"file","name":"/usr/share/doc/libssl3/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"7cde8aa4debebe86ec348e3996d00c11a45157cf"},{"alg":"SHA-256","content":"db928268f948f5fc0817c3d36f1d496f6f3ba72cf3715d28cc5b467359310255"}]},{"bom-ref":"ef698a78c47c719b","type":"file","name":"/usr/share/doc/libssl3/changelog.gz","hashes":[{"alg":"SHA-1","content":"b16389cf272c62bc45e043b26bee0fcf8f6c5ae6"},{"alg":"SHA-256","content":"ba752336d46e767b66c61d5847aaf7920cde4df9a80210b462f4261f768928dd"}]},{"bom-ref":"0c17a98953ecdfeb","type":"file","name":"/usr/share/doc/libssl3/copyright","hashes":[{"alg":"SHA-1","content":"b936c38070ff5b477030a02e903cc7cbc1f1f11e"},{"alg":"SHA-256","content":"6a7da622fe0637a334d2a8fc470852d2ffb77d9a2b2f930f854e32a41ad6ef35"}]},{"bom-ref":"9e5f51607ef03353","type":"file","name":"/var/lib/dpkg/status.d/libssl3","hashes":[{"alg":"SHA-1","content":"eef7b639f6e3c7e4bad77d5ada3cf9eedd2ae9f8"},{"alg":"SHA-256","content":"51a9ee839b755fd0abac598af1860dcc4efaf15dce762015c2934e0da35636e1"}]},{"bom-ref":"5516c647c47dd9fc","type":"file","name":"/var/lib/dpkg/status.d/libssl3.md5sums","hashes":[{"alg":"SHA-1","content":"5a670d001c89ee02d04d11ac3d6d09f1946b5107"},{"alg":"SHA-256","content":"e92c8bf8d84e868406e3143fbc2b694c9a1ddccb37f583d49a4e1c02fbb13587"}]},{"bom-ref":"a53a0676ad482f61","type":"file","name":"/usr/share/doc/gcc-12-base/README.Debian.amd64.gz","hashes":[{"alg":"SHA-1","content":"57b11da2c6a21643a21ad818ac06da8e5cad0ea4"},{"alg":"SHA-256","content":"6edc0d8dffa071ec0866aabfa6b7831f9b464c397c93b310fd44606684b8dcb4"}]},{"bom-ref":"97e14c77b0adbe1f","type":"file","name":"/usr/share/doc/gcc-12-base/TODO.Debian","hashes":[{"alg":"SHA-1","content":"98cf44e59ce96c1e737613d13cdc8944060cd662"},{"alg":"SHA-256","content":"aba726eeeafd7ae426552559759c83ee93249d0d9c4e3e19f146fde6d2cde448"}]},{"bom-ref":"b5d71972fd1339ae","type":"file","name":"/usr/share/doc/gcc-12-base/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"a906291f3fe576bf85157e8ca0a9646a236c5e64"},{"alg":"SHA-256","content":"3cfe78f97524912290c9fc4ef8fd737efb1fa29440949f0bfae980beb9ea4cbc"}]},{"bom-ref":"06324e9c173b5048","type":"file","name":"/usr/share/doc/gcc-12-base/copyright","hashes":[{"alg":"SHA-1","content":"1e3101e727f5e80dad6482faddeef7d4165bcf46"},{"alg":"SHA-256","content":"da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"}]},{"bom-ref":"20cfaa60cdc174cb","type":"file","name":"/var/lib/dpkg/status.d/gcc-12-base","hashes":[{"alg":"SHA-1","content":"ef289de9d7b7cfd8e13838e0bbf38a6c6bd0a8d5"},{"alg":"SHA-256","content":"98d554fc1ecc48c11784fab0cda89ce555fca098e44dc6e3f466f926155473c7"}]},{"bom-ref":"5ca2529237a3b691","type":"file","name":"/var/lib/dpkg/status.d/gcc-12-base.md5sums","hashes":[{"alg":"SHA-1","content":"69e7a480f28cd95772430ef9ff66bca0dbd679c4"},{"alg":"SHA-256","content":"ec8820d85310f7ca6f64c55c57e11fedc3aec8ba66a7a469d31611d6cd7d9122"}]},{"bom-ref":"1c5f82c72e8c0596","type":"file","name":"/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0","hashes":[{"alg":"SHA-1","content":"675942f9c3f83b37297658d860d796d46fb3d110"},{"alg":"SHA-256","content":"f9a9ad78a8dc39c0e90a265ffa551fae6c92a40f360889b44a7e141f9a2adfb1"}]},{"bom-ref":"ed9f73f8877f6240","type":"file","name":"/var/lib/dpkg/status.d/libgomp1","hashes":[{"alg":"SHA-1","content":"4b971f7598113ccc7f478f4820d072735b26fe09"},{"alg":"SHA-256","content":"212458f2d3ae6db89582e5d35065a47a18202b070bf1c931a7455f556a52670a"}]},{"bom-ref":"e2f598f3797d5a65","type":"file","name":"/var/lib/dpkg/status.d/libgomp1.md5sums","hashes":[{"alg":"SHA-1","content":"d790d9ee95300062d3a9c0e409b0383dc3857682"},{"alg":"SHA-256","content":"de2795a32b4e83006e66df14331efcfd4419ad1220f1ff8974834818632a3010"}]},{"bom-ref":"6ed49e8a701d8a8a","type":"file","name":"/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.30","hashes":[{"alg":"SHA-1","content":"026869f81ca55beeaa494e0d49ae7ec035ebbb87"},{"alg":"SHA-256","content":"e7848e32af4932840ba775169041759a2a8dd5a008af360e5c55bce506eebcf4"}]},{"bom-ref":"0c3539fc4048abe6","type":"file","name":"/usr/share/gcc/python/libstdcxx/__init__.py","hashes":[{"alg":"SHA-1","content":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc"},{"alg":"SHA-256","content":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"}]},{"bom-ref":"66adddf44f73cd1d","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/__init__.py","hashes":[{"alg":"SHA-1","content":"e9aaaed74b510a58cfb5a332e3410c24d7b0877b"},{"alg":"SHA-256","content":"f904daea3a5c91d7b336377a93a85eaa0060842810230704f4c0b702b4154c6a"}]},{"bom-ref":"27a12780b0366ff1","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/printers.py","hashes":[{"alg":"SHA-1","content":"b8fc48226783e0b9d7d84492a90ad831d191ce71"},{"alg":"SHA-256","content":"a11707c4086bfff865bb6533fe4a64729cea151955d692f4b7c71d050d09013b"}]},{"bom-ref":"baab700d83279072","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/xmethods.py","hashes":[{"alg":"SHA-1","content":"141340c98b76151bf75a7a6c8c9d4ea45fa53f7f"},{"alg":"SHA-256","content":"ca0a5c9a7f946784e1bc97407fce251f481bfbbd9813a85d628ad602af4b3847"}]},{"bom-ref":"d7ed0cef286e0bd5","type":"file","name":"/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.30-gdb.py","hashes":[{"alg":"SHA-1","content":"79d1e56e4e5b003f978ea898bb0c5f2da519e241"},{"alg":"SHA-256","content":"6990e32948295b48e5732bb3eaa49a2833343bdd0b254f5fb4d91ca92aac4168"}]},{"bom-ref":"dd921499f2afb85d","type":"file","name":"/var/lib/dpkg/status.d/libstdc++6","hashes":[{"alg":"SHA-1","content":"d800ca9ba7bc388cf50f40852cec316099c4cb5e"},{"alg":"SHA-256","content":"c1dcc019d5a71265af70d4125330fcbffe25ca2eb04db17e3b95780fd03b3928"}]},{"bom-ref":"1df01cb0c261782c","type":"file","name":"/var/lib/dpkg/status.d/libstdc++6.md5sums","hashes":[{"alg":"SHA-1","content":"8bbca5d93bf088f96a3aace3d109f558a60aa176"},{"alg":"SHA-256","content":"1405be832cde657e141de53cdd60e37283f674bf3250eeaf81efc3193f6eb4b9"}]},{"bom-ref":"72e33335cd0d84b2","type":"file","name":"/lib/x86_64-linux-gnu/libgcc_s.so.1","hashes":[{"alg":"SHA-1","content":"6cee473a1819d3524615a779bd0591a22b580082"},{"alg":"SHA-256","content":"2bd1552c47799ef67e701e81d4383061fd76059868e446e63560f0dd0d5ec14e"}]},{"bom-ref":"30da9445046629d5","type":"file","name":"/usr/share/lintian/overrides/libgcc-s1","hashes":[{"alg":"SHA-1","content":"6a437a448c534d9b9fff0b406a7569308b81f73d"},{"alg":"SHA-256","content":"eed87afa7d83880a25ae5a41ba9d98d89a1fc2e2e3bba0f4d5c3cdda21a457a4"}]},{"bom-ref":"73cb07df94766993","type":"file","name":"/var/lib/dpkg/status.d/libgcc-s1","hashes":[{"alg":"SHA-1","content":"97e67814c5a7f221350faef52bbc1ccea69a2c59"},{"alg":"SHA-256","content":"7fe4909d27ae5b31eb54850949c9d480ee3db1ab0eca4acf934c4eb91a42bfec"}]},{"bom-ref":"4a8278e1d68478d0","type":"file","name":"/var/lib/dpkg/status.d/libgcc-s1.md5sums","hashes":[{"alg":"SHA-1","content":"360d9693ea39d197ec49cf01e166c1f484e0aee8"},{"alg":"SHA-256","content":"f9302ab1aebb988f7e8321d1d1fc395bd1ab6dd387b2316b3c0930b216792418"}]},{"bom-ref":"80c113eca027a978","type":"file","name":"/nodejs/bin/node","hashes":[{"alg":"SHA-1","content":"962b483928c6a939ea5ee6874e0921891f50b3cb"},{"alg":"SHA-256","content":"ccacb2d6d87ba6d118b2bffc1ae33747a05cc5fc6b1f1ec4fc1d420b687e952d"}]},{"bom-ref":"22e6502e8df9b931","type":"file","name":"/juice-shop/build/package.json","hashes":[{"alg":"SHA-1","content":"65a9b0e9d7fa8ef07461b3838bb0be92c63dd472"},{"alg":"SHA-256","content":"1f78f6479f57759c0509027a3a5e5e140498e34f0683753c0bdea97346ab8cca"}]},{"bom-ref":"31c7d96bd58ba969","type":"file","name":"/juice-shop/frontend/package.json","hashes":[{"alg":"SHA-1","content":"134704c07245bbf72d2d20515e498d25f7e52626"},{"alg":"SHA-256","content":"f52a55cb3a732620191056b570a475a72f2f99c5d5d15c7a2d16847d8b7e9783"}]},{"bom-ref":"ed8510af347dd578","type":"file","name":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","hashes":[{"alg":"SHA-1","content":"b4b51cee01a8bfd426a63712cf29e2c60ca79c71"},{"alg":"SHA-256","content":"9cdfe2227ce61c1a701da4e62ca73f6fdce1fce6f076015c18d420efb8c7c833"}]},{"bom-ref":"acc0021cf8998dc8","type":"file","name":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","hashes":[{"alg":"SHA-1","content":"f02c656ee72f28316f9cb9641fc95fbdab02a2c4"},{"alg":"SHA-256","content":"2ed21f6ba1c3ad4b49e247fc9b6bc3274ac7160613879f4fd6e770a53d976d8f"}]},{"bom-ref":"67eddf3c10bc8c66","type":"file","name":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","hashes":[{"alg":"SHA-1","content":"8261d5bd08d594c9adbf0da3b3549db292c2241c"},{"alg":"SHA-256","content":"ab0032feec7f52c591cc58c4892f668277e777f924638dc944f55c9ca995bc0f"}]},{"bom-ref":"bdec2cde4c1e1d57","type":"file","name":"/juice-shop/node_modules/@babel/parser/package.json","hashes":[{"alg":"SHA-1","content":"58794a4783d952771f3778fe8feef89135e6d180"},{"alg":"SHA-256","content":"e64f4e7689cf2c3a43cdd979fd326b1883f0fbe8e9fbc9c94dc6906e3e75a24a"}]},{"bom-ref":"79c52d3c0297ce1a","type":"file","name":"/juice-shop/node_modules/@babel/types/package.json","hashes":[{"alg":"SHA-1","content":"498ef87e9a056cbf9872f1a71f9f38ba96939d98"},{"alg":"SHA-256","content":"872bd3a13903e3570b727703a50602c1fad9d234bda2764cde7a32d40e7dfd27"}]},{"bom-ref":"783751a099503ba5","type":"file","name":"/juice-shop/node_modules/@dabh/diagnostics/package.json","hashes":[{"alg":"SHA-1","content":"615ceaf7eb5602b3e37fa07ddb1ad1432d8b091f"},{"alg":"SHA-256","content":"072e3e4120bf0a65b7fafddb07a0576f9404add4c22808241741f5f87bc3f3ee"}]},{"bom-ref":"cd1f7bc05e6ac8ba","type":"file","name":"/juice-shop/node_modules/@ethereumjs/rlp/package.json","hashes":[{"alg":"SHA-1","content":"b923a3028307d5b86d7361adb7fbcee1f06bf89a"},{"alg":"SHA-256","content":"01818f2f43b5858347c844fcb79ce968e48442d6924f6103d2cb555df2708c1b"}]},{"bom-ref":"a852377219a16c09","type":"file","name":"/juice-shop/node_modules/@gar/promisify/package.json","hashes":[{"alg":"SHA-1","content":"02e977a876bd7e3217381e7ba9d2cb07f379d274"},{"alg":"SHA-256","content":"dca651c9d8bb01b3691f5c6e2ad4be9ead2b031c27fd9d545c8d4f546917c6d5"}]},{"bom-ref":"80dd8ce1559a9b68","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"de0f02896f6a8be0b475eb7a2e2b9b44506fd332"},{"alg":"SHA-256","content":"8b0af5d1283904ff127afe213e918fdd8c96e7c42e539f8941f1fc66d2f377d7"}]},{"bom-ref":"94a189eb60f822b2","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"238c48183550d02ab5c0dd37e13d57006dce640a"},{"alg":"SHA-256","content":"181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"}]},{"bom-ref":"ad0eebf3e6ed1f4c","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"53ae7a1b3953e86624927fec8421d453d9c88e41"},{"alg":"SHA-256","content":"adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"}]},{"bom-ref":"459a7d4e6bc0000c","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"323ec71c0cdb2dfdcf717f3e324f0b77981d7c58"},{"alg":"SHA-256","content":"01cee5e384d1e26843021c1f91bc05ed009e14c2d31c01349a374e64d3416e7d"}]},{"bom-ref":"c445cf3c3427f413","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/package.json","hashes":[{"alg":"SHA-1","content":"5f8f4c1e3bf1144f3a52c51bf040d843bb2a8b90"},{"alg":"SHA-256","content":"b4f9cc8d09602a487dea1c227ce24777cda87e2ad8a29ab9f741214ab78dc065"}]},{"bom-ref":"7ea6c59634d917bc","type":"file","name":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"504edba0a95630e08edf150335c2fe914825fc5a"},{"alg":"SHA-256","content":"ab8c1c2bce664e4c76b1937fa1a28f00ca5231a70cf0c1f78dd473101a9d2a88"}]},{"bom-ref":"459384f7769cc9a8","type":"file","name":"/juice-shop/node_modules/@nlpjs/core-loader/package.json","hashes":[{"alg":"SHA-1","content":"cd02e5ff012605c4ede81659f599f810fcc12909"},{"alg":"SHA-256","content":"cdbd82e10bd48a95eb0b32d5e8a6b2a89ee8cbc94ad70dbb955a8a6cb286615b"}]},{"bom-ref":"e5daca1fc27e0bda","type":"file","name":"/juice-shop/node_modules/@nlpjs/core/package.json","hashes":[{"alg":"SHA-1","content":"e94cc654f5e482f295b5856d7e07f4ed05f60d55"},{"alg":"SHA-256","content":"8433a26777457ba8fa02a13b1cf6ce0114e1145d9530410bcabec5227d7e7542"}]},{"bom-ref":"92ce357437770af7","type":"file","name":"/juice-shop/node_modules/@nlpjs/evaluator/package.json","hashes":[{"alg":"SHA-1","content":"d4e4614c08a8c96faed9a1e217916dff4eeb43e3"},{"alg":"SHA-256","content":"d0b704247e374d6c2efd538f83233a0ff8128d63e3193bbe62694ae3f52a2066"}]},{"bom-ref":"44f2b34ff50a0220","type":"file","name":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json","hashes":[{"alg":"SHA-1","content":"c79aa843461bf601e79f66f39ed2b28d0f8616bb"},{"alg":"SHA-256","content":"cee7e002f0e879252112042df79b6abffd0d8fb1dcf56f5ee231dfa615f5fb26"}]},{"bom-ref":"d3db2e8b07ed666a","type":"file","name":"/juice-shop/node_modules/@nlpjs/lang-en/package.json","hashes":[{"alg":"SHA-1","content":"7655ad80fcfa9713426cd5512d5e5766648c8f49"},{"alg":"SHA-256","content":"d6bbcddd0abdd4b6fa632946bb931ca2b711026ca7f717e74705e5d47e47fec3"}]},{"bom-ref":"ddaedff67d229cfa","type":"file","name":"/juice-shop/node_modules/@nlpjs/language-min/package.json","hashes":[{"alg":"SHA-1","content":"d81512de92c96c5c793718052f53460d62039cf8"},{"alg":"SHA-256","content":"21eb26022b66aa123dbec04b895615c73433e5935a76c3bad85e22e964e6c048"}]},{"bom-ref":"cace6c61429206f0","type":"file","name":"/juice-shop/node_modules/@nlpjs/language/package.json","hashes":[{"alg":"SHA-1","content":"39a85e1f8805a4daaba8ea93da43b466d66c56f3"},{"alg":"SHA-256","content":"4275c5db73e1ba75b26fb37da08e579717cf994a63573aa4acb2daab807ee0ac"}]},{"bom-ref":"97f053d961183c41","type":"file","name":"/juice-shop/node_modules/@nlpjs/ner/package.json","hashes":[{"alg":"SHA-1","content":"cd239cfbe2ee0d7bf0230fc964a6afa1e560bd25"},{"alg":"SHA-256","content":"a4dc4178e692d68d555d7ec30f1fc279d95451a5f931c097e2617dab34f112fc"}]},{"bom-ref":"71a712933e833084","type":"file","name":"/juice-shop/node_modules/@nlpjs/neural/package.json","hashes":[{"alg":"SHA-1","content":"29cb429d4c243b818337367b923dec8491d697c8"},{"alg":"SHA-256","content":"8c85825d2b58f10988f904bba0bb42997418aac91d363bae4352fc53f7bc354e"}]},{"bom-ref":"33006b0157af4e9e","type":"file","name":"/juice-shop/node_modules/@nlpjs/nlg/package.json","hashes":[{"alg":"SHA-1","content":"6131e8c86b271fbdb0ea8eb74ebd7e9c2c6908e4"},{"alg":"SHA-256","content":"b1bbe5e32e9fd0485134feb0cb9113ef646af8b9fd3b014d8aa77d02791b7355"}]},{"bom-ref":"5fe2d9038b5b72ce","type":"file","name":"/juice-shop/node_modules/@nlpjs/nlp/package.json","hashes":[{"alg":"SHA-1","content":"8e03d2c38b11faaf0fc8bd3941f1d9f772707235"},{"alg":"SHA-256","content":"b9fa7c51f52a11c42bd197a395a600db8ccc405ac21beb8e6083eb68d933810a"}]},{"bom-ref":"be28d026a83f8534","type":"file","name":"/juice-shop/node_modules/@nlpjs/nlu/package.json","hashes":[{"alg":"SHA-1","content":"05456ff17d4e005a97c50462379142ef1ad7fd1f"},{"alg":"SHA-256","content":"22af6861a12068101f17814fc443e11ddf76401137bc47ccdc26de09fad5c075"}]},{"bom-ref":"e63d086ac9d0c5d0","type":"file","name":"/juice-shop/node_modules/@nlpjs/request/package.json","hashes":[{"alg":"SHA-1","content":"37fe2c1a666a5edc816e33e6b177385b80391a3b"},{"alg":"SHA-256","content":"b717d18b16463aa817bac3ce94441fa2cddccec5aeb2c6385037ac0e61400651"}]},{"bom-ref":"90f05cda9c324428","type":"file","name":"/juice-shop/node_modules/@nlpjs/sentiment/package.json","hashes":[{"alg":"SHA-1","content":"63f1fbe755b968120a79380d6963f0a669a50cbe"},{"alg":"SHA-256","content":"095e144b2dc82fd4f21f1b3dac0b991daf05cf831a6a1c340c5b58758f925398"}]},{"bom-ref":"a2a034c545676dfb","type":"file","name":"/juice-shop/node_modules/@nlpjs/similarity/package.json","hashes":[{"alg":"SHA-1","content":"dbdf3a0372d9e54d270b44fd41631489ae5d6c22"},{"alg":"SHA-256","content":"956659aca543e7ae2a290f21d5f5f8f1e00c5a86a1bf017d0f9b1dacabe541b6"}]},{"bom-ref":"80cd256067990c12","type":"file","name":"/juice-shop/node_modules/@nlpjs/slot/package.json","hashes":[{"alg":"SHA-1","content":"8d4441a98234e0dfb53f955dcb89f146874e4138"},{"alg":"SHA-256","content":"fa85e036f2e91b0af16412e6e622b6055036b83545c69153c9ac71c56698fbe5"}]},{"bom-ref":"eaf9d351526bcbd3","type":"file","name":"/juice-shop/node_modules/@noble/curves/package.json","hashes":[{"alg":"SHA-1","content":"0fd9f24eefe764a426a907c1f677dd70068dfcc3"},{"alg":"SHA-256","content":"bf61194229da9a7fd331fcf44cc24f746b5cbaefe941a312215376584c269bd5"}]},{"bom-ref":"ce19e73cb7a18360","type":"file","name":"/juice-shop/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"696457a8c87f5f6da7f2844a140e72f84b782b8c"},{"alg":"SHA-256","content":"8d8203c66e91a9e6ee510facf378a2c7420b27139360132a257010c2e5f091bc"}]},{"bom-ref":"28cae70995d2a4fc","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json","hashes":[{"alg":"SHA-1","content":"126adbedcff6faa6826eca63c75e9193237ab10b"},{"alg":"SHA-256","content":"7a08cb2fe1d2b788e0a7bf6a9b7597dbeeeae804698c2fbd15de786d284d327c"}]},{"bom-ref":"8d6b4491cd81b76e","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/node_modules/http-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"f8b2b2bf2f3e2f8491496f9efe80b96442a803a9"},{"alg":"SHA-256","content":"38b61961aa0ba3028f2e120b3d883179281f6ba25fe22ff2214bf9f363161b65"}]},{"bom-ref":"69062b394180aa17","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/node_modules/https-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"17ea193ab8be5c579a2d10e9a13bff389858f7e8"},{"alg":"SHA-256","content":"b08c1977d38f14f4be7fb5be33aab545e3e5a6e2e12100733a6ad97dec995206"}]},{"bom-ref":"2c0bef569cbdc4b1","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"eba45f816c43b1e505440b7a7f8392e38ba11306"},{"alg":"SHA-256","content":"a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d"}]},{"bom-ref":"aa9bd7a9a974a4c9","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/package.json","hashes":[{"alg":"SHA-1","content":"ca472993ec88d2b98a488f843d480575f24092f7"},{"alg":"SHA-256","content":"d67f4edf03680423c43434e3b28902feec2a136da2e85355034b174ba286828b"}]},{"bom-ref":"7f222aa5c68c6f8e","type":"file","name":"/juice-shop/node_modules/@npmcli/fs/package.json","hashes":[{"alg":"SHA-1","content":"cf0302511d637d6a1f8b5e49b3d9b42210c7b8f0"},{"alg":"SHA-256","content":"028cce261f1b1840efa893492a88911e0f4832e29b46ae0dd38eb6ba5ae85856"}]},{"bom-ref":"96fb20312cb5ace0","type":"file","name":"/juice-shop/node_modules/@npmcli/move-file/package.json","hashes":[{"alg":"SHA-1","content":"5d957f7d5bfb7d98d91c207e0d0a2471fbdef3a4"},{"alg":"SHA-256","content":"8fe75d037af2bfe77e1e675a77015f3522a2fdaf0a638907c9a925ee507e9e90"}]},{"bom-ref":"59004777d831fa1b","type":"file","name":"/juice-shop/node_modules/@otplib/core/package.json","hashes":[{"alg":"SHA-1","content":"9fcbeeb885ce09af6927bbc50b13e4779162fffb"},{"alg":"SHA-256","content":"4a14e820d8ede1c94a342e2c9f28f22944a397a8dae4b263ba17244714c5ee3f"}]},{"bom-ref":"5790c3dfc73074ad","type":"file","name":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json","hashes":[{"alg":"SHA-1","content":"025e2b195b1c94cd657a7c2ac6f98da922017c4c"},{"alg":"SHA-256","content":"e4451c061462b6fb035c63aaf9fbbb31fe837694ecad8cebe5604e83466924f0"}]},{"bom-ref":"24befd4a6fc645ed","type":"file","name":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json","hashes":[{"alg":"SHA-1","content":"a28b307aecd048d7bf94df41f9c6eee660b1f56e"},{"alg":"SHA-256","content":"ee70d0824a09a5d72207a93ff8ed1a856b9a29ebcce3e87846f4a9cb870f18f8"}]},{"bom-ref":"e123de424bbb7508","type":"file","name":"/juice-shop/node_modules/@otplib/preset-default/package.json","hashes":[{"alg":"SHA-1","content":"467cc154c147707bff62acb8a9449313ca2a46c8"},{"alg":"SHA-256","content":"5f5e69f0eb8ec02010c0af1d942706e17a6ae648d2076469491972fe13b67d2d"}]},{"bom-ref":"84523db68eb048ef","type":"file","name":"/juice-shop/node_modules/@otplib/preset-v11/package.json","hashes":[{"alg":"SHA-1","content":"a75aba4a28d683a4a35761deb6bf5e6d9f882050"},{"alg":"SHA-256","content":"5ebdc30f0156cfa19ed7fa17fe5cc991df8ffcb7b69999a887e368ad9c79289e"}]},{"bom-ref":"f0c7a772cd372da3","type":"file","name":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","hashes":[{"alg":"SHA-1","content":"0dd3949ab9157869b8d3387f50a149bca2638d73"},{"alg":"SHA-256","content":"c52af8cea1efc18fc306336d6ade5a1d8d9ccd8916a5d2246bc585a92635901e"}]},{"bom-ref":"1bd881934a2537a9","type":"file","name":"/juice-shop/node_modules/@scarf/scarf/package.json","hashes":[{"alg":"SHA-1","content":"1d33fb93dace20b12286fb4b7f1682646af3f82b"},{"alg":"SHA-256","content":"f19876be1dc7b05cb55fb3ab06c20cc0ac87769287b3aad6cca50660a4b314fd"}]},{"bom-ref":"84d2b96b1c147570","type":"file","name":"/juice-shop/node_modules/@scure/base/package.json","hashes":[{"alg":"SHA-1","content":"8f88eda970ee0e6f4dc8df2d79e0dde2f1384cc8"},{"alg":"SHA-256","content":"bc9089063e13f92386e1cadb1c7887753a62ac2bc91171fd14b1c1a107efe998"}]},{"bom-ref":"0f2d1a239126d5b0","type":"file","name":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json","hashes":[{"alg":"SHA-1","content":"13a7711d4838b588d34094c0a37ecb6fedb214f2"},{"alg":"SHA-256","content":"c1aa90e6c1160d2e56df181fe67670127c2aeab230a2754bc1d7fb2a653a5d68"}]},{"bom-ref":"3ae0971f4efdeb50","type":"file","name":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"05934fe2d902bcf292a9675b70e58f0cf749baae"},{"alg":"SHA-256","content":"60a38b31b3dbe8a261fc525e7263a51df22af80c9800f09db0dd6e3d5bde3690"}]},{"bom-ref":"ad9fe804df83d102","type":"file","name":"/juice-shop/node_modules/@scure/bip32/package.json","hashes":[{"alg":"SHA-1","content":"bac50a7e3b472d0d4108ccf21f58754fd198b50b"},{"alg":"SHA-256","content":"94ef521ad8dc07dcdc7528f0dc382151214cd535ff646107fb4729037595b8a5"}]},{"bom-ref":"c3be78f95a1fd483","type":"file","name":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"05934fe2d902bcf292a9675b70e58f0cf749baae"},{"alg":"SHA-256","content":"60a38b31b3dbe8a261fc525e7263a51df22af80c9800f09db0dd6e3d5bde3690"}]},{"bom-ref":"b0c7461e4ac2980d","type":"file","name":"/juice-shop/node_modules/@scure/bip39/package.json","hashes":[{"alg":"SHA-1","content":"af76c66c3cedd94fd7ed5db4ea900cc2be5cbe3b"},{"alg":"SHA-256","content":"3ae6ec1542df70e83b02079fa2ea96e1ad845049ae9ddbd28fb1e43a7662715b"}]},{"bom-ref":"1e88f7d280eee4b2","type":"file","name":"/juice-shop/node_modules/@sindresorhus/is/package.json","hashes":[{"alg":"SHA-1","content":"8ea4d75fb2542edc23ac23515566932977d948a5"},{"alg":"SHA-256","content":"55307d8c3e660374d48940083df93fd8f3a865eaff6bc34b5e5e455be718d439"}]},{"bom-ref":"385a26bc4e8908f8","type":"file","name":"/juice-shop/node_modules/@swc/helpers/package.json","hashes":[{"alg":"SHA-1","content":"05c138187e3e03162e3013e7f2f13fc18c0c2fff"},{"alg":"SHA-256","content":"135140ae9edbdeafd3bd5e9c369a6828820f74ab2ce66c78a54743814da12282"}]},{"bom-ref":"ea2305e47037616e","type":"file","name":"/juice-shop/node_modules/@tokenizer/token/package.json","hashes":[{"alg":"SHA-1","content":"1a93635fac9b224d4d9cec1fadb28b3086d283ee"},{"alg":"SHA-256","content":"a677763aaed22462b4f9df2526b1038cef3a90bc6cf80be27b4e65d0f14472a9"}]},{"bom-ref":"d844281fcc4f89e5","type":"file","name":"/juice-shop/node_modules/@tootallnate/once/package.json","hashes":[{"alg":"SHA-1","content":"f811250e6ad2116f4a996c7ac512a2d66c5b2240"},{"alg":"SHA-256","content":"0a358d669305b78f0ab46886871045bc80c13e48f4a4669762ef13452a8fac40"}]},{"bom-ref":"0ca398b57cef6bd5","type":"file","name":"/juice-shop/node_modules/@types/component-emitter/package.json","hashes":[{"alg":"SHA-1","content":"ccdbee7ccc3f57a596e334aadea037c5c1447b36"},{"alg":"SHA-256","content":"ad6d8f6ce55d30e47af416a460b07e27d39c8d953356dd708f8333984328ac24"}]},{"bom-ref":"3b720ada047290d3","type":"file","name":"/juice-shop/node_modules/@types/cookie/package.json","hashes":[{"alg":"SHA-1","content":"9a6923a33ab098b02ad284c092970aeb6b4e0f91"},{"alg":"SHA-256","content":"e71f9bef0642169c02de9e503e801f58aa259c58bbe51451a6ed618424f4048f"}]},{"bom-ref":"82d42a55e68e48dc","type":"file","name":"/juice-shop/node_modules/@types/cors/package.json","hashes":[{"alg":"SHA-1","content":"e40b9fa3d6c69bb63b0f8c946c073b445acf32b0"},{"alg":"SHA-256","content":"668eaf9685f07c43881b376ddf4fccf6d1896c0e46e528b0a32c383e15237271"}]},{"bom-ref":"74cdec7eddbcd076","type":"file","name":"/juice-shop/node_modules/@types/debug/package.json","hashes":[{"alg":"SHA-1","content":"27659d96915bd90c84cfa41700969b553177add9"},{"alg":"SHA-256","content":"bf9a9236cb995a4741f1a789244822f5174344020bf2b1242858a4263a01ed89"}]},{"bom-ref":"33b8ede09ac85209","type":"file","name":"/juice-shop/node_modules/@types/ms/package.json","hashes":[{"alg":"SHA-1","content":"2c98c18c958411b8b7fe5b181770ff00346947af"},{"alg":"SHA-256","content":"bbd8f5322ea82216e826e522a6a4ec2ed3086b57a25234d0044673eb374b8e2d"}]},{"bom-ref":"fa416ea6580cb087","type":"file","name":"/juice-shop/node_modules/@types/node/package.json","hashes":[{"alg":"SHA-1","content":"635b3374360ea92c2a4d658126f7daa989ca1f63"},{"alg":"SHA-256","content":"bc509097787f78ec29d05d0968569752ffc8bf1ec852e154feba1d1cfa012f50"}]},{"bom-ref":"d161f9f04783e113","type":"file","name":"/juice-shop/node_modules/@types/strip-bom/package.json","hashes":[{"alg":"SHA-1","content":"4f849ea3fd5f23f00385d06579aa48ac5da29969"},{"alg":"SHA-256","content":"4fcff5152d7e1388a926b583b91bf2916a9cb25cca9d011347f7d4772aab4567"}]},{"bom-ref":"5881f2d01adb4e68","type":"file","name":"/juice-shop/node_modules/@types/strip-json-comments/package.json","hashes":[{"alg":"SHA-1","content":"2c7c945b49ba7176ac3fde356d47b4e1176726f0"},{"alg":"SHA-256","content":"bfb2c610634c73c7f3791e72899dfa98efd598077affd60e99efe89fb9000ff0"}]},{"bom-ref":"a57d957a3ffc89cc","type":"file","name":"/juice-shop/node_modules/@types/triple-beam/package.json","hashes":[{"alg":"SHA-1","content":"c8ff7e60bf9d5507804b6906a5e020081e5f68f4"},{"alg":"SHA-256","content":"c8ed1c5130fb111dfad72c99a414eeb10a3171be8076aca86307b4d80c9ca079"}]},{"bom-ref":"4bc8e7f34e96d1dd","type":"file","name":"/juice-shop/node_modules/@types/validator/package.json","hashes":[{"alg":"SHA-1","content":"06b153837f42a4aca8c8fd8f6de8809db12195c5"},{"alg":"SHA-256","content":"a3d61251e6b5e8a55ea80fd91f4f48fee0424b6c44b951be446021fd97c2a909"}]},{"bom-ref":"a8d550046a95c788","type":"file","name":"/juice-shop/node_modules/@types/ws/package.json","hashes":[{"alg":"SHA-1","content":"bb39fa55deab3295a86f291a56d6b16d7f5fdcf6"},{"alg":"SHA-256","content":"2543dffcad98c8d5efb56d93b88d3f2269f672dad944009f6bf17ce301555b19"}]},{"bom-ref":"5d72401df6d2bba7","type":"file","name":"/juice-shop/node_modules/abbrev/package.json","hashes":[{"alg":"SHA-1","content":"bfc3606e605421f81936c77f156694df03ea1f55"},{"alg":"SHA-256","content":"5bcbdff71c063d5177f25fd3a5c7a6c2a9d565d968765ee3a1e73449dc0bc671"}]},{"bom-ref":"324f263055f85f81","type":"file","name":"/juice-shop/node_modules/abitype/package.json","hashes":[{"alg":"SHA-1","content":"a9814578937c3208645a3f6a1666c42f3ae6d75f"},{"alg":"SHA-256","content":"d424c23739a99f4f4cb816f029585df2728ffc4e0a4362ba8cc8bca7c9550b2d"}]},{"bom-ref":"d8f14a6b5fc49e04","type":"file","name":"/juice-shop/node_modules/abort-controller/package.json","hashes":[{"alg":"SHA-1","content":"1919f0e7e241c60fff52bdd87df08ceee790ba05"},{"alg":"SHA-256","content":"3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164"}]},{"bom-ref":"89ad8dc1f6e31ffa","type":"file","name":"/juice-shop/node_modules/accepts/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"3c1b22e6ecae04b514912326957e6a205b015098"},{"alg":"SHA-256","content":"8672e91f7395ce51ec789d883d7f7d872a40847bb83a6a3f89c3d1ded39e55d9"}]},{"bom-ref":"df848717f7d379e6","type":"file","name":"/juice-shop/node_modules/accepts/package.json","hashes":[{"alg":"SHA-1","content":"131ba4d63747e6663a9c19409e43ac034bd532cf"},{"alg":"SHA-256","content":"e5716d5d939db08c5c28ec6ae86ed67be5320f91089e2673fca1c5b876e57aa3"}]},{"bom-ref":"19415651fb8dc489","type":"file","name":"/juice-shop/node_modules/acorn-walk/package.json","hashes":[{"alg":"SHA-1","content":"f9ebf044144f14d2bac572cbddf78db8d0ae6487"},{"alg":"SHA-256","content":"95f930fb1606221d00cb13f4059d0ead88055192a7c5b703fcf72f2480f1b7d2"}]},{"bom-ref":"a38550b02e0adc8a","type":"file","name":"/juice-shop/node_modules/acorn/package.json","hashes":[{"alg":"SHA-1","content":"893f21a606dfca045579f8883e25ddb0ea87e6c7"},{"alg":"SHA-256","content":"9e422c8225c9cc4c774e9a9392d0ecac7f766b46122ef2db99db0fc4bbedc247"}]},{"bom-ref":"6b910567f02c6171","type":"file","name":"/juice-shop/node_modules/aes-js/package.json","hashes":[{"alg":"SHA-1","content":"02af0ae260ec880f2595635440d69184dd3ae979"},{"alg":"SHA-256","content":"60fc352466697ba86743b36101b2157cf413ac0e7d317788548993600f10cd7d"}]},{"bom-ref":"8c655536eea0b33e","type":"file","name":"/juice-shop/node_modules/agent-base/package.json","hashes":[{"alg":"SHA-1","content":"609a1aaa756f9bd0d85449d4c9e1040c170e9115"},{"alg":"SHA-256","content":"05daa619e51686fd21d15f987f943f6692c56b9f489f555cbaf42a4263d5c5e8"}]},{"bom-ref":"1e93c0d2dd504df4","type":"file","name":"/juice-shop/node_modules/agentkeepalive/package.json","hashes":[{"alg":"SHA-1","content":"56d77987880ed3be6c5c0a6370f7fcfa1dc2cb58"},{"alg":"SHA-256","content":"8bdeeb4c6f66678c3a97b2fbc3a0c93b9e03dc021e85145859e1c72be7526822"}]},{"bom-ref":"8224768d0791617b","type":"file","name":"/juice-shop/node_modules/aggregate-error/package.json","hashes":[{"alg":"SHA-1","content":"1a2aa44c34e2912cc96c75d0f1c2865a23a5e6f8"},{"alg":"SHA-256","content":"903137f787b80f82cdd11659b386966fa716be537e81fe9d474ef04ea0918f26"}]},{"bom-ref":"ee0a0fa79d710eaf","type":"file","name":"/juice-shop/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"f1b78e043012e1ab5689d57377093e88f1400677"},{"alg":"SHA-256","content":"8b2dc166f2b74d5098bad38bdd3dd2f4d4775c626199872f5e36dbb48c40931d"}]},{"bom-ref":"706eb20923b12714","type":"file","name":"/juice-shop/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"2abbe25af4f77cdc6986e0a6b14e9088aa6d3d93"},{"alg":"SHA-256","content":"8a015c815240c949222d5f474721b5888dd9413fccbbd91ab552bac134317f76"}]},{"bom-ref":"3387938882de953c","type":"file","name":"/juice-shop/node_modules/anymatch/node_modules/normalize-path/package.json","hashes":[{"alg":"SHA-1","content":"fc704b76301681294309df4f3936e4e5e1657e55"},{"alg":"SHA-256","content":"284ea445a01a454ab1235a08101445fe16592303167090815f4a75b54d6fba04"}]},{"bom-ref":"b869e0823f8c083e","type":"file","name":"/juice-shop/node_modules/anymatch/package.json","hashes":[{"alg":"SHA-1","content":"4523871509997216d762edfc97cf9bc6400478a4"},{"alg":"SHA-256","content":"83f4f2ce1880ee96d44a7fa5add101c19edf3ca42f50c7c20cf2e59f6d751c3f"}]},{"bom-ref":"8cc40f7e6f3205a3","type":"file","name":"/juice-shop/node_modules/append-field/package.json","hashes":[{"alg":"SHA-1","content":"0c83d1d2369a3dac3edce107c0e7ca22f5d853c3"},{"alg":"SHA-256","content":"e8af240292f03363891c9fbb252d78dfcba4a4cba574d30aace32341d2fe7a22"}]},{"bom-ref":"01dfb544b8ba2d27","type":"file","name":"/juice-shop/node_modules/aproba/package.json","hashes":[{"alg":"SHA-1","content":"a705c382734b6694d6c98a8825d7b38d905cad58"},{"alg":"SHA-256","content":"6dcea0602535f88458b2e93b4dcad98451fdf1ee5dd5cbe8538cad12c3379068"}]},{"bom-ref":"6c8218619ca5ebdf","type":"file","name":"/juice-shop/node_modules/archive-type/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"3e30390a94384a39e4b46e8d55ea92f4a68f19c5"},{"alg":"SHA-256","content":"731f325f6221bea8b2168c6f207296f9bcfc88f4f3189f38ac126ad663feb671"}]},{"bom-ref":"a94bfc9907b80ff1","type":"file","name":"/juice-shop/node_modules/archive-type/package.json","hashes":[{"alg":"SHA-1","content":"4ba4289c5ce1187cbb36a9debbea25356b9bc864"},{"alg":"SHA-256","content":"0f1d1cab9005aad5785c5544a117accf97bd896243131ebe6eb74b0a5600fe1a"}]},{"bom-ref":"027f0f3d1ca8f7a7","type":"file","name":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"07bca81be058c1ce","type":"file","name":"/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"7862c2febafccbab","type":"file","name":"/juice-shop/node_modules/archiver-utils/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"58aa0c465c1d1063","type":"file","name":"/juice-shop/node_modules/archiver-utils/package.json","hashes":[{"alg":"SHA-1","content":"b87a5196d43a0b967228fe8975640cf4eb50970e"},{"alg":"SHA-256","content":"dcf66f1fe9ce29bdcaf6b866e878365b8b1ebe76cab20149511529679c847ca1"}]},{"bom-ref":"32e48972c52714e9","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"5da55b9a896c8eed5f30013777ffbc8181bdfa67"},{"alg":"SHA-256","content":"180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"}]},{"bom-ref":"fd5b61674d73cccb","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"8e580b41fc56230f","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"e3c32a8ba7d16261","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"3d2afca7eb80d73a","type":"file","name":"/juice-shop/node_modules/archiver/package.json","hashes":[{"alg":"SHA-1","content":"66e8510aed54598ae1c823c8fee5f5a328374dee"},{"alg":"SHA-256","content":"b64c234b963198bceb01078344022ed411c86b1239d58aa84ef93a2f143b5289"}]},{"bom-ref":"922437f713ade0a5","type":"file","name":"/juice-shop/node_modules/are-we-there-yet/package.json","hashes":[{"alg":"SHA-1","content":"03e43bddeaf901ecbd2f1d09ee3f1efdfdd7da61"},{"alg":"SHA-256","content":"a68108794c8c3b8c1806785cbaa94dd8a338907bd4676d2b54a4216edfa73b56"}]},{"bom-ref":"6808cc5584a199e6","type":"file","name":"/juice-shop/node_modules/arg/package.json","hashes":[{"alg":"SHA-1","content":"6a712b1a8294ce33bcd29c497ae0bbac44ba674d"},{"alg":"SHA-256","content":"b607bd41545c27cf0e41b53c79a0a00b98d0e7c1a03a0ff9b9d6b6b082ad3738"}]},{"bom-ref":"95ba08fa12626f90","type":"file","name":"/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json","hashes":[{"alg":"SHA-1","content":"dee1e26f14c8468e2e42814a439315ce89ee517a"},{"alg":"SHA-256","content":"f7ed5a0dc9b4c939e92be6acdf3bd83abc3d7e5def9c1307f3c9f53bd7cb2f8c"}]},{"bom-ref":"3280ded774af372f","type":"file","name":"/juice-shop/node_modules/argparse/package.json","hashes":[{"alg":"SHA-1","content":"98f9959fac3c999adf8991e2a4ac3c874c93f00f"},{"alg":"SHA-256","content":"48b848e56c31eda738f76fb8573ae1fe0012c4b1ec9d9cfe8783517a142e9531"}]},{"bom-ref":"ceba7347ce3f6898","type":"file","name":"/juice-shop/node_modules/arr-diff/package.json","hashes":[{"alg":"SHA-1","content":"1c65a38cdad6dddccb81e37e5fb8a69b26ceb1d1"},{"alg":"SHA-256","content":"2b5d24629f45dc15f67a5a0addaac28176ea9dd3ad27db7cae8a38d753c18933"}]},{"bom-ref":"a0228323c89faf94","type":"file","name":"/juice-shop/node_modules/arr-flatten/package.json","hashes":[{"alg":"SHA-1","content":"ebae0bfe7a0b7d5931a8b2d558ee7ccc6f49d9f8"},{"alg":"SHA-256","content":"f5a7e9d8661929555f8f83686b6ad8499b07a2c0769e71381d119b001183bbda"}]},{"bom-ref":"e1826ce7da849080","type":"file","name":"/juice-shop/node_modules/arr-union/package.json","hashes":[{"alg":"SHA-1","content":"0aecc76c35be272981c3beee908277d1b824bd96"},{"alg":"SHA-256","content":"d757674b8b78e9730d3c3e2843b81db48709cd91203b9b7e31436288c52eb66d"}]},{"bom-ref":"5ec77ce7b57e71e1","type":"file","name":"/juice-shop/node_modules/array-buffer-byte-length/package.json","hashes":[{"alg":"SHA-1","content":"79c934e5f793f408bf9e7d6cdae3b00479c8f882"},{"alg":"SHA-256","content":"477d1c0349dfbe051b3bc99b289a8360570264a1731f73e3c594ed8b9a3b6252"}]},{"bom-ref":"3fd96ab9c7380d22","type":"file","name":"/juice-shop/node_modules/array-each/package.json","hashes":[{"alg":"SHA-1","content":"ee5fd48cb545b4345405c98bbfa05dbbc9ae1623"},{"alg":"SHA-256","content":"55d0a75c82606adf64ec0f98d93db3920a4f3c882a253c10ec58b519c336e72e"}]},{"bom-ref":"a2786dee9a60502c","type":"file","name":"/juice-shop/node_modules/array-flatten/package.json","hashes":[{"alg":"SHA-1","content":"fc51b89d0fb7cc640a0495baa4005364e83718c3"},{"alg":"SHA-256","content":"5c5e0e10cfa23f163d1fe68aa57a881d09cac39d720e1361c697b86c4d33e0f5"}]},{"bom-ref":"68971e84a6f38c71","type":"file","name":"/juice-shop/node_modules/array-slice/package.json","hashes":[{"alg":"SHA-1","content":"498e1b0981039be5c67000ecb466f0b4ba520bd9"},{"alg":"SHA-256","content":"456b16091f29b8d2343819f68f2dc4f890bd234cd9a2e27b30e28990663b076f"}]},{"bom-ref":"b14f4254248711d8","type":"file","name":"/juice-shop/node_modules/array-unique/package.json","hashes":[{"alg":"SHA-1","content":"2bb158b53a1409669f166ede289156fee9544df1"},{"alg":"SHA-256","content":"9fb64ddadb8f8a5ac27dfe0a4a2a8a18ded418f8f692dbbdf20fdf48b8b500e1"}]},{"bom-ref":"7ff11bc2933627d1","type":"file","name":"/juice-shop/node_modules/asap/package.json","hashes":[{"alg":"SHA-1","content":"c768bb58495d19e1d5d195d3f212204714c7378d"},{"alg":"SHA-256","content":"f69d11cfb6add01ac63fce2a47e0b4596d667d8f43d89853ac27aab06a9fcf28"}]},{"bom-ref":"28311630e1384e6b","type":"file","name":"/juice-shop/node_modules/assert-never/package.json","hashes":[{"alg":"SHA-1","content":"a38c1ee73c79bb5548e0119f2df68a26b6839439"},{"alg":"SHA-256","content":"ab906b2a34e8f397a6006e587f5d716d24ebb58cd82eec36cb4e3476c500f78b"}]},{"bom-ref":"de35ca8c83ada0ac","type":"file","name":"/juice-shop/node_modules/assign-symbols/package.json","hashes":[{"alg":"SHA-1","content":"31f42a481b541ab8bd956eeaa7dd3ec5ffc907be"},{"alg":"SHA-256","content":"9076874450a8b3a437b2838491e55a385da18be21dd6e4d6e4a8b51ef4a4b0bd"}]},{"bom-ref":"0999ac6b07eb3617","type":"file","name":"/juice-shop/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"edef722d2ef943350b398c9c11b1fc4e2e4928f5"},{"alg":"SHA-256","content":"e010fe63aa861e8a60fb8b9d3e7fb5205e3b8d6001ebe3ff95985996abe581a9"}]},{"bom-ref":"016f0ced7168b972","type":"file","name":"/juice-shop/node_modules/at-least-node/package.json","hashes":[{"alg":"SHA-1","content":"9271d65ae400dff5e800ae6f031d1bf6f58252c6"},{"alg":"SHA-256","content":"cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5"}]},{"bom-ref":"cda86df7a8faad79","type":"file","name":"/juice-shop/node_modules/atob/package.json","hashes":[{"alg":"SHA-1","content":"7e099d0a51a068ec930a7028a252adba6efb386a"},{"alg":"SHA-256","content":"ec5f817e82b3589ffa74b5d955a87b10d314357f992e7171c9f2669521f75098"}]},{"bom-ref":"4c32ad35e4f5f452","type":"file","name":"/juice-shop/node_modules/available-typed-arrays/package.json","hashes":[{"alg":"SHA-1","content":"13e400badea570dca072b1116d9dbc627c94c4f8"},{"alg":"SHA-256","content":"ffce2bbb0b85b9a20bcc674e4c78307ead42af0299e1d28a9dfb249566e0a319"}]},{"bom-ref":"1fca304bb004aa10","type":"file","name":"/juice-shop/node_modules/babel-walk/package.json","hashes":[{"alg":"SHA-1","content":"f10c8c76a7c340e00bc91168a1ff049dbad7d173"},{"alg":"SHA-256","content":"1549b64069d6ae24d7d91a466204624ab1509f12abb7924b6e0b603323d34d87"}]},{"bom-ref":"d5b9ced225a35a61","type":"file","name":"/juice-shop/node_modules/balanced-match/package.json","hashes":[{"alg":"SHA-1","content":"ef0a0d2fd68c3396309ab54ab08c5f8d362436ea"},{"alg":"SHA-256","content":"b30c328501dead1870b894ad604405b2284b571c1f12664cdc61d92a2e3397c2"}]},{"bom-ref":"1d35de52ed5fe343","type":"file","name":"/juice-shop/node_modules/base/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"ca2a7d4413c40ae9c669a82bf19b8cb2ae4a557c"},{"alg":"SHA-256","content":"03cce8ab627f9aa9d11af4a225523a9c7c67c51a135b630b85f5743920b312af"}]},{"bom-ref":"b4e2d190f2abf6b5","type":"file","name":"/juice-shop/node_modules/base/package.json","hashes":[{"alg":"SHA-1","content":"1da798824f84110d95803e41212229b4b49c847c"},{"alg":"SHA-256","content":"cd7a2e84a4f4de166504077960d87a3e62a9d4c0b1247d9fa7691c4e332b52eb"}]},{"bom-ref":"6cda523ca437ed6c","type":"file","name":"/juice-shop/node_modules/base64-arraybuffer/package.json","hashes":[{"alg":"SHA-1","content":"1853ae06931a67b3eb8bb76c801ac258966ff74e"},{"alg":"SHA-256","content":"c137a784510ece7d3b9b1d4de59c55a0594b1ed51b30c9581e8279cb705b0286"}]},{"bom-ref":"799df632e4f7887c","type":"file","name":"/juice-shop/node_modules/base64-js/package.json","hashes":[{"alg":"SHA-1","content":"e17d74f1f7f0fa4bca8ba3a2cff79b34f64718ea"},{"alg":"SHA-256","content":"9758f3ab8c45e07bb9a368e32f9a8b3729623bbf47cbbb205b32d674ab2a91f0"}]},{"bom-ref":"cb6486014ce81b70","type":"file","name":"/juice-shop/node_modules/base64id/package.json","hashes":[{"alg":"SHA-1","content":"25c444de022a4b4bb9e98d09bb0e8fe5a66d1b9b"},{"alg":"SHA-256","content":"26250fc512e912fc8dcdd1728025c79e85cc4727ba7e662d0ec0700f843efae4"}]},{"bom-ref":"87008727643867d4","type":"file","name":"/juice-shop/node_modules/base64url/package.json","hashes":[{"alg":"SHA-1","content":"30611c9388765dd6c0c1291183460b5b99ae40a6"},{"alg":"SHA-256","content":"5d243a76cc698b4dbf9eeea3f62dd96719753b7d369860b6c8722146f7b83c7c"}]},{"bom-ref":"0c9ee79887ad44ec","type":"file","name":"/juice-shop/node_modules/batch/package.json","hashes":[{"alg":"SHA-1","content":"b5ed756847feb09f819111e18a8b51b6683ce916"},{"alg":"SHA-256","content":"8b7595e8387929390fa5432f184e98059e32323a9ae3757fc0d251f44da22f36"}]},{"bom-ref":"8024d16eaa6c9755","type":"file","name":"/juice-shop/node_modules/big-integer/package.json","hashes":[{"alg":"SHA-1","content":"c504e3cd069e16c72065b57157c1a923ec93ed7b"},{"alg":"SHA-256","content":"720c9966ac00b6e579aed1c8927f9d9a98dcd4a0cf738276e83899e023595266"}]},{"bom-ref":"95de9b43230da056","type":"file","name":"/juice-shop/node_modules/binary-extensions/package.json","hashes":[{"alg":"SHA-1","content":"09235a3c2fdebe7e975f19f4930e1fb7dec29410"},{"alg":"SHA-256","content":"f775eb159a64b320a9a62aaa831ae67e13ab05bd9ca375b8ec830a1e53cbc56d"}]},{"bom-ref":"14cdbf8b54307ff4","type":"file","name":"/juice-shop/node_modules/binary/package.json","hashes":[{"alg":"SHA-1","content":"8cb90d0e380085f35eabe6b378749d8402f9db2d"},{"alg":"SHA-256","content":"355ec61b56448e3d9ad74b286fa07e1b18bcbf153f45223b1a4f68d86bec891f"}]},{"bom-ref":"bc3467cb9bbe3da1","type":"file","name":"/juice-shop/node_modules/bindings/package.json","hashes":[{"alg":"SHA-1","content":"14bbbadeb1307b1f711ee10093d5b46a7889677c"},{"alg":"SHA-256","content":"a87721fe406e1f1798fef44d697b46ea1efe346fda118010334713346ee4207c"}]},{"bom-ref":"200ac34e07a7a8cb","type":"file","name":"/juice-shop/node_modules/bintrees/package.json","hashes":[{"alg":"SHA-1","content":"0541c9772153e0380217e17b877f3865ffa176ed"},{"alg":"SHA-256","content":"b1428f5f1084ec992b386903254420e8bbbd3cc9b3482dd8a8a031c749b1c5f9"}]},{"bom-ref":"65426fce3a2c83fd","type":"file","name":"/juice-shop/node_modules/bl/package.json","hashes":[{"alg":"SHA-1","content":"95c3eee39930a1a112884e039aa18eef6440528d"},{"alg":"SHA-256","content":"cac689c32b3053d3f3ad5fb36209c9a6300eecac11e258daf9098cc9974460d6"}]},{"bom-ref":"c4a4df199c815ade","type":"file","name":"/juice-shop/node_modules/bluebird/package.json","hashes":[{"alg":"SHA-1","content":"3bff8f918f77c01976fa2bff8bb461bf23783e55"},{"alg":"SHA-256","content":"06b909dc60508422d664b7734fb45f5466bfcbccff796db5413fcd1afb194712"}]},{"bom-ref":"0f8011582208a49d","type":"file","name":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"87aa10f8921bdf94","type":"file","name":"/juice-shop/node_modules/body-parser/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"a6af3330c1f23fae","type":"file","name":"/juice-shop/node_modules/body-parser/package.json","hashes":[{"alg":"SHA-1","content":"aa50b4852dc781a883beaceb57c2b1774eef8fe4"},{"alg":"SHA-256","content":"3a3c8fbb2c486e035c762e11d905d74433b78086bbd00070283f6f41d0e62fe7"}]},{"bom-ref":"2ab29cda27c555a0","type":"file","name":"/juice-shop/node_modules/bower-config/node_modules/minimist/package.json","hashes":[{"alg":"SHA-1","content":"cbeb5fd655b50ee618fc9b78949313cd91cdbeff"},{"alg":"SHA-256","content":"e6350b96ff55772bef33991b8da848758e0c7863dfaffe30230dca255ea9cc11"}]},{"bom-ref":"612a676db7c4771a","type":"file","name":"/juice-shop/node_modules/bower-config/package.json","hashes":[{"alg":"SHA-1","content":"d4e8606dfe9863f0545a544de8b570ab7db0c04b"},{"alg":"SHA-256","content":"faef7161cb5e3c3c4fb2435cef197824cc7337e392437919f0d88e0edd5036f8"}]},{"bom-ref":"8a384dee5acf14a4","type":"file","name":"/juice-shop/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"c2e8d8ccf674a808b63453e8432ae0f696375fbd"},{"alg":"SHA-256","content":"3247d7a57a8b8c75fbbce15488d3a4ffacb6ffc56c89ec63dccf9028a15d8af5"}]},{"bom-ref":"cf7be3a0c08187e1","type":"file","name":"/juice-shop/node_modules/braces/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"913d5cf2a0ec5d5c","type":"file","name":"/juice-shop/node_modules/braces/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"978762c519598162","type":"file","name":"/juice-shop/node_modules/braces/package.json","hashes":[{"alg":"SHA-1","content":"b937fbf6a4c3de5784ab427d8d4ed048af53abc9"},{"alg":"SHA-256","content":"baaeb5b10749a51b93128c383429bc48bb42328e15609a3b2bc2f8af66e3a2c0"}]},{"bom-ref":"d0818a8378533de9","type":"file","name":"/juice-shop/node_modules/brotli/package.json","hashes":[{"alg":"SHA-1","content":"1f95a73a0930da325211f5d256c3210e33f3c715"},{"alg":"SHA-256","content":"387b47d00ea96cab9b4c521629fbcdc7621053ac061812526f3c69700924cef5"}]},{"bom-ref":"25ed7c669696adcf","type":"file","name":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","hashes":[{"alg":"SHA-1","content":"eac3922d78d7c767750da439f58b88df8966ddca"},{"alg":"SHA-256","content":"abd77cd9f8e32a213714c6a188c62a59d97bb9359824022db89f57da4949a549"}]},{"bom-ref":"36f016fac0a411da","type":"file","name":"/juice-shop/node_modules/buffer-alloc/package.json","hashes":[{"alg":"SHA-1","content":"6acc40da3b381363e82c3d32b8b64510d6627ba8"},{"alg":"SHA-256","content":"d607efec5e54b94b612bd7065186e00f1591fade12aaf41a170606d02f6ac670"}]},{"bom-ref":"e18ec75809eb7c35","type":"file","name":"/juice-shop/node_modules/buffer-crc32/package.json","hashes":[{"alg":"SHA-1","content":"1ec2ea09d6d0b9bf7e3ed6e75af3d50bfe578902"},{"alg":"SHA-256","content":"f94d0f0c1be8f8714670c5fee03899bdb6485d430236d81726e24012a3696e6e"}]},{"bom-ref":"183f93265c57eabd","type":"file","name":"/juice-shop/node_modules/buffer-fill/package.json","hashes":[{"alg":"SHA-1","content":"a57438f89e767aca1edc938a71bbe480917ee65f"},{"alg":"SHA-256","content":"602a10e946f2f5eff5b19781d13fb3b589babe12815a1a9be4c7a673eb0fdd4f"}]},{"bom-ref":"ebf8b22756f787de","type":"file","name":"/juice-shop/node_modules/buffer-from/package.json","hashes":[{"alg":"SHA-1","content":"49b8d27c728855d92e2609b2c67e82b89f57cee5"},{"alg":"SHA-256","content":"f7cde31d1db3e71738045206397d472e1f12513643ba4b9fd60ea337f22b1e3f"}]},{"bom-ref":"e80016a697bbd003","type":"file","name":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","hashes":[{"alg":"SHA-1","content":"981d326c4f01015129658b464df7d98938100cd9"},{"alg":"SHA-256","content":"cd2622bc8900ccc51417ed40ae01922030eaba84760b5aa6f820b4c431e7ac65"}]},{"bom-ref":"40edaab14b6e6dad","type":"file","name":"/juice-shop/node_modules/buffer/package.json","hashes":[{"alg":"SHA-1","content":"2b48c222660295ee0110538cfdd70b220aedf800"},{"alg":"SHA-256","content":"5af7b62dbf5575a301cd13e8616f1d7d9cff3c90f9fab7bc3d6a1f4fbfee94eb"}]},{"bom-ref":"6adb075ecc4f5f99","type":"file","name":"/juice-shop/node_modules/buffers/package.json","hashes":[{"alg":"SHA-1","content":"8324a9b6635486c55bdc9921641dcc039b2f9528"},{"alg":"SHA-256","content":"7091616d3b687b0de9dfbc6a1f8ab61e01742a3ec87f977bef64d1f299e231b9"}]},{"bom-ref":"9dbd1f5136704e30","type":"file","name":"/juice-shop/node_modules/busboy/package.json","hashes":[{"alg":"SHA-1","content":"b1d7ef4a9a615c7a947a39139af8edf1972546ab"},{"alg":"SHA-256","content":"4faefdc1fc73a2c8a87dfa0cc6ca3dc3d9e518abf9b92d84aa495c59b3e20c92"}]},{"bom-ref":"62ea12f5493f881e","type":"file","name":"/juice-shop/node_modules/byline/package.json","hashes":[{"alg":"SHA-1","content":"7f0093e3c1c1e5d19b95497c6f75773dff621e0f"},{"alg":"SHA-256","content":"1e04ce363d8ca0e5e2a781b0baa923d23c60f475b7b9c11d1d15407baea288c1"}]},{"bom-ref":"7314e74d18891a66","type":"file","name":"/juice-shop/node_modules/bytes/package.json","hashes":[{"alg":"SHA-1","content":"d8fe3e70eb4ecf4bf58385e4b27f89b7ce656a28"},{"alg":"SHA-256","content":"99b21c09ce812dc76a06cd87c4753247cb9615c6a8501c5a5a9d9caa22ea2d12"}]},{"bom-ref":"5df9f8c89bf0c3fd","type":"file","name":"/juice-shop/node_modules/cacache/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"eba45f816c43b1e505440b7a7f8392e38ba11306"},{"alg":"SHA-256","content":"a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d"}]},{"bom-ref":"6362bbb10205454d","type":"file","name":"/juice-shop/node_modules/cacache/node_modules/p-map/package.json","hashes":[{"alg":"SHA-1","content":"95eec87c2f7ed9f31ccd295eb97b9ce9d98c58ed"},{"alg":"SHA-256","content":"02ba1a164520f5d93c9688a1cc9fb08586af4a883678f27aeafe1f787c66ee90"}]},{"bom-ref":"97e7d14f815476fc","type":"file","name":"/juice-shop/node_modules/cacache/package.json","hashes":[{"alg":"SHA-1","content":"4bfa58e7ac62a86d0f86b54faa34f063f3344a61"},{"alg":"SHA-256","content":"3b4d9ce8c3a3f853d903c06b5ec38a06c8ac9a2ccb236bf6a532d92cfe1b07de"}]},{"bom-ref":"d321f99bbe90f700","type":"file","name":"/juice-shop/node_modules/cache-base/package.json","hashes":[{"alg":"SHA-1","content":"40e901e9a100b92c7c04472107c3b54a8f943ede"},{"alg":"SHA-256","content":"18eb3278083502b196afe2ca535181be1ddec2cf8af93f784742dbe37d6547e8"}]},{"bom-ref":"11c5e4e4c6285ae2","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"000b39656a452f8e4ddcedb94597a6970c3f456a"},{"alg":"SHA-256","content":"08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"}]},{"bom-ref":"42a1cee1b5c84287","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json","hashes":[{"alg":"SHA-1","content":"6a175397a93014316dcf454724d6f93f2dac12b7"},{"alg":"SHA-256","content":"fa9898eaf4e2fb3ed3e0201cb1c40df1fa7aa67fc2442cb87827ac1435dd5d09"}]},{"bom-ref":"0b1447a7aa167ada","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json","hashes":[{"alg":"SHA-1","content":"2315bf1117b2f6bebee08fb9fd639a00ed7f099d"},{"alg":"SHA-256","content":"d86d32aa7e20779ba4ec8884babed30632cfd1cf193070eda9d8ef5c8640c1db"}]},{"bom-ref":"70b488af994a8599","type":"file","name":"/juice-shop/node_modules/cacheable-request/package.json","hashes":[{"alg":"SHA-1","content":"9ce876f09b4eaf8362aed671962a970175bf3bf5"},{"alg":"SHA-256","content":"45bc898c23761b5ddd1fc7dfc1c09663969115ab867496af0fa075e71ed22c68"}]},{"bom-ref":"4b525877e8c2da6e","type":"file","name":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","hashes":[{"alg":"SHA-1","content":"ba7d54557351d8746e4d2f88e7d4106ca4d0d541"},{"alg":"SHA-256","content":"59639b628c6846f674857c6a613fd47e2e4d2a24036cdf0f7a62ac634f4c8a5f"}]},{"bom-ref":"7516ff791f7e7abe","type":"file","name":"/juice-shop/node_modules/call-bind/package.json","hashes":[{"alg":"SHA-1","content":"4cd1ffb4be834e81429d3423e8071a1565a11f68"},{"alg":"SHA-256","content":"c8bdb16ee847383a756c3c9cb98ea283e1bddb64b474630d2b693ef882f6f0ea"}]},{"bom-ref":"1d108c7ed1621746","type":"file","name":"/juice-shop/node_modules/call-bound/package.json","hashes":[{"alg":"SHA-1","content":"7c7c20ff22ed55c0f73a9ca1e378190b9ab3ba29"},{"alg":"SHA-256","content":"dcc8abb3c4ad3774234272149020cb36d7b1a3d377a419454d1e7adb368dd9c3"}]},{"bom-ref":"998939db95fc736a","type":"file","name":"/juice-shop/node_modules/camelcase/package.json","hashes":[{"alg":"SHA-1","content":"7b4c16368eaa4ca5dba17965ea8557a35368a0f0"},{"alg":"SHA-256","content":"b6d533c740d144de4da1493940b541978a77aae9d712dd0d609f60c58c83a73e"}]},{"bom-ref":"62f02ed7244eaea2","type":"file","name":"/juice-shop/node_modules/chainsaw/package.json","hashes":[{"alg":"SHA-1","content":"f1208fa90fe3f162e1a72f3ce3751b66f6775830"},{"alg":"SHA-256","content":"51910ad64abca4eb8c2c23abb2f713ba5220db89ed89c9fd198d27241a5a70ea"}]},{"bom-ref":"1796f2079a4ce15f","type":"file","name":"/juice-shop/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"6837c455c887920ad9b0cad624aa4b9b51625fd8"},{"alg":"SHA-256","content":"80052c957e397ff669429ea957c2bdc792578c2178866f7a940c8eb975b5ca91"}]},{"bom-ref":"46b13eb652bb9a6e","type":"file","name":"/juice-shop/node_modules/character-parser/package.json","hashes":[{"alg":"SHA-1","content":"a1b981e621b2868fbdb14e10de12ceea86bbe82e"},{"alg":"SHA-256","content":"49974b723e98bec9dab8641bca5ee468739c04a0b7fcc501d762924f32f80aba"}]},{"bom-ref":"3929483264eeed78","type":"file","name":"/juice-shop/node_modules/check-dependencies/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"10b5bea95a8cb4de","type":"file","name":"/juice-shop/node_modules/check-dependencies/package.json","hashes":[{"alg":"SHA-1","content":"135b12fc1630fcc211e000d30b2548ee3b2838a8"},{"alg":"SHA-256","content":"be0e5fbded0d620007cf53494a2c410f563eda629c299904c8a917d9bb076c3e"}]},{"bom-ref":"8ee863410a536e5d","type":"file","name":"/juice-shop/node_modules/check-internet-connected/package.json","hashes":[{"alg":"SHA-1","content":"d31e0f2806f530985628d217df6dadc1ade50b50"},{"alg":"SHA-256","content":"1a279d547e9d20fbb87db6c96dee1bf5c9bd5b2b5ed45309343133af5e3ff87f"}]},{"bom-ref":"f71e06aa0e514891","type":"file","name":"/juice-shop/node_modules/check-types/package.json","hashes":[{"alg":"SHA-1","content":"f424a387a8b8c162e56279ca5259b40edd9f522b"},{"alg":"SHA-256","content":"fb5b3c004a773d1927ff110d5caa2080a6c5a89a0f61612d251296879b46f62d"}]},{"bom-ref":"a62512e5b2579a09","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json","hashes":[{"alg":"SHA-1","content":"124d44a7e3c5fd1b2370ff51929158c7c39c46c2"},{"alg":"SHA-256","content":"56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7"}]},{"bom-ref":"b733eb287de9a4f4","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/fill-range/package.json","hashes":[{"alg":"SHA-1","content":"1682e8ba503f3836b55fc5763adfd0605f0d1b6a"},{"alg":"SHA-256","content":"87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735"}]},{"bom-ref":"dc139e082756ee3c","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/glob-parent/package.json","hashes":[{"alg":"SHA-1","content":"e0c963215972bcd46dcb563560b4113ad5970b57"},{"alg":"SHA-256","content":"858af9aa27cfe6eea1cfd1abbda15ad0ccc87e66e88b3ad249fab8df6dd13192"}]},{"bom-ref":"7a7986a4b67326a9","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/is-number/package.json","hashes":[{"alg":"SHA-1","content":"2bd4ba6c07c12d2b7af0035e57b46cbb7e133477"},{"alg":"SHA-256","content":"51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620"}]},{"bom-ref":"d4eb4f9a5f79f809","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/normalize-path/package.json","hashes":[{"alg":"SHA-1","content":"fc704b76301681294309df4f3936e4e5e1657e55"},{"alg":"SHA-256","content":"284ea445a01a454ab1235a08101445fe16592303167090815f4a75b54d6fba04"}]},{"bom-ref":"3a4ec2cd8b7bc4c0","type":"file","name":"/juice-shop/node_modules/chokidar/node_modules/to-regex-range/package.json","hashes":[{"alg":"SHA-1","content":"c16a607925055788aae94f1123fa0d769af161bf"},{"alg":"SHA-256","content":"766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec"}]},{"bom-ref":"497645effcaaff2e","type":"file","name":"/juice-shop/node_modules/chokidar/package.json","hashes":[{"alg":"SHA-1","content":"330eaeb3120e4066ddae2f62e9ead4199f02e615"},{"alg":"SHA-256","content":"30205a4e6053ed1e4dd6fba9e9d382a39eac54634f463e7059bfacbfe9a151c0"}]},{"bom-ref":"2e7262b5fac6bda3","type":"file","name":"/juice-shop/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"fc7d452c2e7e9b57f311b04f8b5826656ccc8e1b"},{"alg":"SHA-256","content":"4300e90fdd91ec7035047473c60f880251a9801bd786302729d4277751d3b948"}]},{"bom-ref":"22abe4cef8c44dce","type":"file","name":"/juice-shop/node_modules/clarinet/package.json","hashes":[{"alg":"SHA-1","content":"4dc5d68200d25cdd05e4e38fef2ebb6ce2b6b299"},{"alg":"SHA-256","content":"b6ed9b595f76a6c8e4a7db7cae4e7df7beeeede69de0e9908a69143599be1b41"}]},{"bom-ref":"db9c29fe78d4f245","type":"file","name":"/juice-shop/node_modules/class-utils/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"9630fedbcbccc883892f78a2b21184ef87e6b9bd"},{"alg":"SHA-256","content":"b999a380ba13fef8b973f3df54c1f11f2c8d97d4f5f691600508fa2b7108fe52"}]},{"bom-ref":"c9f4cb0ce0dbff7b","type":"file","name":"/juice-shop/node_modules/class-utils/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"5b25f9cf1b1cbe731ebc6a083375947c7961278f"},{"alg":"SHA-256","content":"b8498c15313f99506d9f9d2e99c98668c77260090fa9ea358ee9449ecc89436f"}]},{"bom-ref":"99effa84f5a54a26","type":"file","name":"/juice-shop/node_modules/class-utils/package.json","hashes":[{"alg":"SHA-1","content":"8e29a88c544f0411961f1c6cf3d3865205f06228"},{"alg":"SHA-256","content":"5c2f877d951d784fdb630ad674fb490c4bd8fb74dbae60ab8a3b85373c4743cf"}]},{"bom-ref":"f4579c4982a93c3e","type":"file","name":"/juice-shop/node_modules/clean-stack/package.json","hashes":[{"alg":"SHA-1","content":"4783e06a89ee21c7109f053235b03211ec87f5af"},{"alg":"SHA-256","content":"9b4a4a5cc61a09e61aa1ce84bc68c84aef90abf9a0280d09214a89189257ca7a"}]},{"bom-ref":"9a2155b3775ea3d1","type":"file","name":"/juice-shop/node_modules/clone-response/package.json","hashes":[{"alg":"SHA-1","content":"c109beb613fd2573d6b8ccb99ed48f2b25360e94"},{"alg":"SHA-256","content":"5c4ec09512661e52caf27ee747116d8104fb7da25c7fbe82ffe760dbdda99e63"}]},{"bom-ref":"665ae0935d6fe7b7","type":"file","name":"/juice-shop/node_modules/clone/package.json","hashes":[{"alg":"SHA-1","content":"0fdce1636b3aa8c1df63be2fdb3e3b66066b82d4"},{"alg":"SHA-256","content":"07e9c7efd55a99cbe2909d1fd46b032b67cba6b493d1fbc974fddf4f2adebc83"}]},{"bom-ref":"d1daf5f303c8d0bd","type":"file","name":"/juice-shop/node_modules/code-point-at/package.json","hashes":[{"alg":"SHA-1","content":"b223a41679c19b6eb58a4ebb29c7bb5c23ffb2db"},{"alg":"SHA-256","content":"25069e9b754306d51bb333f034a741d99e052bee4c99d13ecdba7f485bb01749"}]},{"bom-ref":"8a7e66fa6cae2e0f","type":"file","name":"/juice-shop/node_modules/collection-visit/package.json","hashes":[{"alg":"SHA-1","content":"98d227b5e292287b3c6dca202e2d8185d63a794c"},{"alg":"SHA-256","content":"52bd4317cce67d1213b80370b34032c0e431c3a3b98479939be59c82123222b2"}]},{"bom-ref":"3319eef2155cdfd6","type":"file","name":"/juice-shop/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"799d15c0afcf7b320069d0734a1806b3062da05b"},{"alg":"SHA-256","content":"b19880ef7c610484649d11309820cd55c8934ebc4bde0b37706e94483bf2bd0f"}]},{"bom-ref":"a9d1cf72aecf1216","type":"file","name":"/juice-shop/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"5aa7aaf5028aece2d7a920d5644c25c87723d203"},{"alg":"SHA-256","content":"522669bd4c785d5c372377f5b139243f5fb6cf6335fc9df0e7c2d294b6b678da"}]},{"bom-ref":"22b0e29ffc2783b1","type":"file","name":"/juice-shop/node_modules/color-string/package.json","hashes":[{"alg":"SHA-1","content":"f96738a1141539dbdbc51718c79cb4d94e8ccd57"},{"alg":"SHA-256","content":"30fb162f7493291dd29ced85001979f2e99fd68fbcf59ad55300a657d8352bd0"}]},{"bom-ref":"f83288966cfafc59","type":"file","name":"/juice-shop/node_modules/color-support/package.json","hashes":[{"alg":"SHA-1","content":"a47d93a86d7864eb1866a3367f7c5ace53dc18d1"},{"alg":"SHA-256","content":"baf5cca1519cfaa530a21810bda9fe6236082d855a59ff66f5ef437bf51451eb"}]},{"bom-ref":"c670d261dcd84172","type":"file","name":"/juice-shop/node_modules/color/package.json","hashes":[{"alg":"SHA-1","content":"ec64e33c1912215425758aa5c87b25315f923e97"},{"alg":"SHA-256","content":"9fe2997a1879f8357ec7ecd0782f4e6ed7101c9c1e87872587750878807d7a8c"}]},{"bom-ref":"cc52f53366a32962","type":"file","name":"/juice-shop/node_modules/colors/package.json","hashes":[{"alg":"SHA-1","content":"a4f69f04fe66223dfe4b4bc5c73653a2a6d410b5"},{"alg":"SHA-256","content":"12d1b76eb6efbe581026d035eba2a3c916fc5d4664a9476d23bafc6813db9176"}]},{"bom-ref":"3f203b294f809055","type":"file","name":"/juice-shop/node_modules/colorspace/package.json","hashes":[{"alg":"SHA-1","content":"c2181ca17ee7860a79776184e75133f70ee3e3bc"},{"alg":"SHA-256","content":"ff421a60a0bf74fb140306c19bdbe6e4871b801e7459a0f0136c76255c8f9cb7"}]},{"bom-ref":"0ecdef365abbdfc4","type":"file","name":"/juice-shop/node_modules/component-emitter/package.json","hashes":[{"alg":"SHA-1","content":"93e268feac3350d3806f9deca82dfce16d06d9fd"},{"alg":"SHA-256","content":"cdb4584e6657cbc5bd76295b0e3828969fec5cdf3c812178ea80f37378398080"}]},{"bom-ref":"853002f225a281b8","type":"file","name":"/juice-shop/node_modules/component-type/package.json","hashes":[{"alg":"SHA-1","content":"03289fd70f7e974c6f698df8d877912ccd127e29"},{"alg":"SHA-256","content":"93a42e729e1f42670f510fbb1b7e90e6834a4e60657c67da82d321a4d99a30d3"}]},{"bom-ref":"7a696510a22ba315","type":"file","name":"/juice-shop/node_modules/compress-commons/package.json","hashes":[{"alg":"SHA-1","content":"49b373b2919e1a111b2b198de6f73e229c1b4708"},{"alg":"SHA-256","content":"0144c9f8c98abb94ae03eaec71cd3fe7190a8f1c77ea898a012ce30e72bdc6c1"}]},{"bom-ref":"d8d1207655edc2c4","type":"file","name":"/juice-shop/node_modules/compressible/package.json","hashes":[{"alg":"SHA-1","content":"dd8d4a57b09cc1f78941ee6b3c36192c64775600"},{"alg":"SHA-256","content":"78af3f89054f6ef1bc4ba56724a5edb55babf7fc6a4e88b8bb5ae631afcf9219"}]},{"bom-ref":"a12082e0e5c11e45","type":"file","name":"/juice-shop/node_modules/compression/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"9a6ad11a54a75c2a","type":"file","name":"/juice-shop/node_modules/compression/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"4e2d34e70cb2ae2f","type":"file","name":"/juice-shop/node_modules/compression/package.json","hashes":[{"alg":"SHA-1","content":"12e3bb6f942049ca301efab637953ab8aad3e61a"},{"alg":"SHA-256","content":"5c2303e1e6b34b76a1c913d4f09fc0b3e374d4539aa5c89b99d6d58ed91620e2"}]},{"bom-ref":"84a56ea8e3a842a6","type":"file","name":"/juice-shop/node_modules/concat-map/package.json","hashes":[{"alg":"SHA-1","content":"10e204a14998c9e1d13bba6ab5243194a94d5d6a"},{"alg":"SHA-256","content":"4fe5e8089b65ebfd55bb86f465ba896ba6a8e24b7b61de1e0f420f590616b118"}]},{"bom-ref":"f33b0dea9aea209a","type":"file","name":"/juice-shop/node_modules/concat-stream/package.json","hashes":[{"alg":"SHA-1","content":"bf0359010a483481d391dca89ee461e718627b0d"},{"alg":"SHA-256","content":"90182f042f9d995d6021ee7b9cb56d044b700fbf5f7dc03057343dcca4df00d5"}]},{"bom-ref":"954febf0d38f6fae","type":"file","name":"/juice-shop/node_modules/config/package.json","hashes":[{"alg":"SHA-1","content":"e8ef1128810fb2561de65ece79eb48991c87014c"},{"alg":"SHA-256","content":"f1bb1cba9e9cb4cc00e33db8dd4f254810d5df5f9ec4f51c6ffe9e396f84b0fc"}]},{"bom-ref":"882d542eef8616db","type":"file","name":"/juice-shop/node_modules/console-control-strings/package.json","hashes":[{"alg":"SHA-1","content":"48149fd6456eb7fa73b547c26577132ed9fb15ca"},{"alg":"SHA-256","content":"2da7c4bb166dfa347305d34eebafaec098a9afeaaa26e4844736597507dbb968"}]},{"bom-ref":"39ec5c0fe1840ab2","type":"file","name":"/juice-shop/node_modules/constantinople/package.json","hashes":[{"alg":"SHA-1","content":"04d4d5b1853df1f182ee1f1a285c283c25c3fe22"},{"alg":"SHA-256","content":"7b0cf478d904186f397b8c75c0f8129d0f36bfcde75929880ac0bedb38c76c7f"}]},{"bom-ref":"dce709f96d4c4b76","type":"file","name":"/juice-shop/node_modules/content-disposition/package.json","hashes":[{"alg":"SHA-1","content":"1b871ffaefe2a1fd69aa9b1538b4003bf0eae9ab"},{"alg":"SHA-256","content":"2459c0e8fbeb5716ab06e9ef73747bba46ed2bc52e310bd4e9f0ef1f102da61f"}]},{"bom-ref":"b01fecde44c5e06b","type":"file","name":"/juice-shop/node_modules/content-type/package.json","hashes":[{"alg":"SHA-1","content":"1545c6d8538d7e59f375d4ae4b0e0d10471a6c1c"},{"alg":"SHA-256","content":"bd78a5427ffca1966621301edc6cac2146c8c1e137f122161ba90dca7ec89f77"}]},{"bom-ref":"b4a9771c3b063575","type":"file","name":"/juice-shop/node_modules/cookie-parser/package.json","hashes":[{"alg":"SHA-1","content":"5e3c194dcb531a61c8dc8c6d97fc65f138d52a09"},{"alg":"SHA-256","content":"27eebaa9ad78117c9b6965e3c6cd24356504e5a7abd3450cafc46a1b6e1e97e5"}]},{"bom-ref":"8c3e82297aca9bce","type":"file","name":"/juice-shop/node_modules/cookie-signature/package.json","hashes":[{"alg":"SHA-1","content":"eb071423205fc35573e714baa755e3a9e900a979"},{"alg":"SHA-256","content":"ab66777a673ae096d6b5aa51b5edb46b84e6fcd85dc03358c35576e3df0464f5"}]},{"bom-ref":"eaccc703e9b2296e","type":"file","name":"/juice-shop/node_modules/cookie/package.json","hashes":[{"alg":"SHA-1","content":"49ffb97b37b2a7b8b0967428ca088145d3483365"},{"alg":"SHA-256","content":"7fa781bd142e7f38b66bff64b4e3a8be9e53e340e7ddaf27caebd00322602208"}]},{"bom-ref":"ebb91d866972c27f","type":"file","name":"/juice-shop/node_modules/copy-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"fd929c84df8212c26be2d096b914144a25a78e6a"},{"alg":"SHA-256","content":"4519ab160a3aea0b54ab9705508fc8965e0d201db35f1e569d744b4102b498b8"}]},{"bom-ref":"8de48f601718fd96","type":"file","name":"/juice-shop/node_modules/core-util-is/package.json","hashes":[{"alg":"SHA-1","content":"67e07f86f3ffc5d437b0c03d9bf2417493e64859"},{"alg":"SHA-256","content":"9effbb5ec239b4de8bae0499e760bc86b7fa731e310e7a2721d8ffb667194e44"}]},{"bom-ref":"c7fbd93492b642ee","type":"file","name":"/juice-shop/node_modules/cors/package.json","hashes":[{"alg":"SHA-1","content":"b8a30eaf1dbed2ac75ec546af07524622335020a"},{"alg":"SHA-256","content":"696bc0da9976d31a421ad5598bdb8fc0364645ab1473b4271850171728e35f47"}]},{"bom-ref":"4180b3ea24e8ae16","type":"file","name":"/juice-shop/node_modules/crc-32/package.json","hashes":[{"alg":"SHA-1","content":"68b5c6e6bad4dc0a93adaba6924a7eacc7fb69b5"},{"alg":"SHA-256","content":"2a96a3fe106da3dffa3479e8983c01c745f0f8c8f961ec9b6af5fb7ff35ce05d"}]},{"bom-ref":"dd70419749df62a8","type":"file","name":"/juice-shop/node_modules/crc/package.json","hashes":[{"alg":"SHA-1","content":"dcc2939933df570c8260f4fd4fbbd6b88c420626"},{"alg":"SHA-256","content":"3bdb1642fb5a6e1c822e5e3dccdce83c59bcd73e84934fdcd0c3c65ebda6718e"}]},{"bom-ref":"007487310f28486d","type":"file","name":"/juice-shop/node_modules/crc32-stream/package.json","hashes":[{"alg":"SHA-1","content":"669fb5f9deac7203619c72ea7a0df0d4460417d9"},{"alg":"SHA-256","content":"1913530699dad57c6bf7d89127c0c521266133a615b3685d51deca1ae9a33cda"}]},{"bom-ref":"718c4a5152980219","type":"file","name":"/juice-shop/node_modules/create-require/package.json","hashes":[{"alg":"SHA-1","content":"cb4700a39d8af16c8b3622188a16708202a7e84f"},{"alg":"SHA-256","content":"ab24478a8bf476370538c9a28524d3fe444282db4144b8de5c15862762d8e974"}]},{"bom-ref":"aaec003120e2e6d9","type":"file","name":"/juice-shop/node_modules/cross-fetch/package.json","hashes":[{"alg":"SHA-1","content":"0029d0db6223c3ffd0138c1c1260e6d5926ddf25"},{"alg":"SHA-256","content":"856d0b44165fcd5421c6cd801d45f8d3160c22ebf7ddfb21016c366d475f6dea"}]},{"bom-ref":"7fe9c6cd355317c1","type":"file","name":"/juice-shop/node_modules/cross-fetch/polyfill/package.json","hashes":[{"alg":"SHA-1","content":"379b25996c1d38fb694b24fe699747acfec4847d"},{"alg":"SHA-256","content":"4374ad2af39a6215a04299af6134273278ca160f4eef9cb110b1637fea5ac633"}]},{"bom-ref":"34d6375837f25845","type":"file","name":"/juice-shop/node_modules/cross-spawn/package.json","hashes":[{"alg":"SHA-1","content":"9becaa8ecb51ad9b303dd62369423cb9f287163a"},{"alg":"SHA-256","content":"2e106cd9b4ae4e34ead35218371a0d4e172da72515a4f8f97d69a2e1fe3dee82"}]},{"bom-ref":"e98a117cbdae59ff","type":"file","name":"/juice-shop/node_modules/crypto-js/package.json","hashes":[{"alg":"SHA-1","content":"65c10fa4433d97c3ebe204470e8caaa105d6fcd2"},{"alg":"SHA-256","content":"b021f29bcaa1cef60884f4281e0011a5e80758e0f6460e9a6061f28e37282ca4"}]},{"bom-ref":"3b01fe0c1b09104c","type":"file","name":"/juice-shop/node_modules/dateformat/package.json","hashes":[{"alg":"SHA-1","content":"3d4b932fedff8c3566e9eff570421fae695c91e7"},{"alg":"SHA-256","content":"9d72ce65bcf960ea44a19840e86c0476ae56034cca2181ecd6bced70559c97ff"}]},{"bom-ref":"140b0678edbdb6ef","type":"file","name":"/juice-shop/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"867baf5b5a330ab0443c88e654e8c43622c3d7a9"},{"alg":"SHA-256","content":"7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"}]},{"bom-ref":"d8b1865f1af4d029","type":"file","name":"/juice-shop/node_modules/decamelize/package.json","hashes":[{"alg":"SHA-1","content":"ccda85295237a30d5621b1d9a4569be24c92564f"},{"alg":"SHA-256","content":"fb07ecfb5937f8757b0721fdafa6febff75d3c159f6dc8ec0d6ad4e1d1be7d9c"}]},{"bom-ref":"aedd16a3700ed1c5","type":"file","name":"/juice-shop/node_modules/decode-uri-component/package.json","hashes":[{"alg":"SHA-1","content":"6202fd7f4a33d4ef4d36b0f1a26ee5dc22f7851a"},{"alg":"SHA-256","content":"8f2e9784337b3b4fa69359f88f75a2847e0aa17776f062cb518d008d8d408bca"}]},{"bom-ref":"e194721607e0cb9c","type":"file","name":"/juice-shop/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"a8a1643a6d1bfc2cd01968fece47576aac7f85f0"},{"alg":"SHA-256","content":"e4f071e185bd8373eced227d9fc256e7cb17c05aadf4a9ff25e6ebdbef489580"}]},{"bom-ref":"d14b98e346015147","type":"file","name":"/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"},{"alg":"SHA-256","content":"d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"}]},{"bom-ref":"95351d254e4cb5b5","type":"file","name":"/juice-shop/node_modules/decompress-tar/package.json","hashes":[{"alg":"SHA-1","content":"2a60c06be62f9b9c9eff038925e902ce2e3c2a69"},{"alg":"SHA-256","content":"c218803dd64ee674ce941eda27ca12c5d949bc582de8cb30fc37f830c1184da0"}]},{"bom-ref":"41e1d96b7421cefc","type":"file","name":"/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"a6530cf198e519ea50ee8e0bf674c209f5280991"},{"alg":"SHA-256","content":"11468db6795e371a155e5f59e4d3db4bac561f04bed7851609739ca2971363a6"}]},{"bom-ref":"104f3a329c29fe2a","type":"file","name":"/juice-shop/node_modules/decompress-tarbz2/package.json","hashes":[{"alg":"SHA-1","content":"8868c09e4485e8a5259107e1627b82d28c9c4088"},{"alg":"SHA-256","content":"529925f1b024ee1493f613b8b8f341eb57c3f4d652387fb9d60ec6a94c55e848"}]},{"bom-ref":"7eb7658927ccaabd","type":"file","name":"/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"},{"alg":"SHA-256","content":"d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"}]},{"bom-ref":"1e7c2644170d0df4","type":"file","name":"/juice-shop/node_modules/decompress-targz/package.json","hashes":[{"alg":"SHA-1","content":"3e50782d9594c0eb2209145de66307aa14762462"},{"alg":"SHA-256","content":"563940fa7817c65d09bf0825521cd80be7fe3371f655f63806dd39d0a332feeb"}]},{"bom-ref":"a58a8b934d92a093","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"5fb963b346a2cd3ac5d664048eeaf13db03da127"},{"alg":"SHA-256","content":"77dfe1fe927c8f631f4ff5cd7040a9f3fb8149ee65160d0f936dff5844d21ee8"}]},{"bom-ref":"9fedbb72c995533a","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"b7150c9c5b976f0f6c27c5a5e4c5466e40091c19"},{"alg":"SHA-256","content":"30c9eb7f6849e5e7eb35dfd625b2e474c7632fbe4377f2186763967cce5e61aa"}]},{"bom-ref":"e2a158947911c8e4","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"9d9d1d73f03f4b32f19e6829392a51c9d15b7195"},{"alg":"SHA-256","content":"bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"}]},{"bom-ref":"2651df68cb906f7e","type":"file","name":"/juice-shop/node_modules/decompress-unzip/package.json","hashes":[{"alg":"SHA-1","content":"fd0b816b1f4ad813eff7743092370f6fdd251e91"},{"alg":"SHA-256","content":"bd8dcc48b9394f349abfe168301e8d0e33d9b48d9fca79108d6a6302c9349f72"}]},{"bom-ref":"abe44555fc256b44","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"},{"alg":"SHA-256","content":"7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"}]},{"bom-ref":"40487f307ae1781a","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/make-dir/package.json","hashes":[{"alg":"SHA-1","content":"5dc583570034b28410731ea0164940ba872f2a53"},{"alg":"SHA-256","content":"d125b3068a54b746267706fa6c5e6087171fdf42f701cd7b64508c51dd1fec40"}]},{"bom-ref":"6b2971870a49a7b8","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"9d9d1d73f03f4b32f19e6829392a51c9d15b7195"},{"alg":"SHA-256","content":"bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"}]},{"bom-ref":"f9282065072533b6","type":"file","name":"/juice-shop/node_modules/decompress/package.json","hashes":[{"alg":"SHA-1","content":"cca6473d46387c59d174ea40cae6ee46365a8fdb"},{"alg":"SHA-256","content":"d3d6e3c813ac057db9a5a7cd1ecbcb678df9238df896a7f791881d04efb7e96b"}]},{"bom-ref":"547b70ca49b072fd","type":"file","name":"/juice-shop/node_modules/deep-equal/package.json","hashes":[{"alg":"SHA-1","content":"917bab6d83cd346a03fad8ccb657ab7272de7314"},{"alg":"SHA-256","content":"21b5cf3db0f28c0b0125231ed308baf7d9324e96085165be0db27df55cc68279"}]},{"bom-ref":"cee20f5d335e7385","type":"file","name":"/juice-shop/node_modules/deep-extend/package.json","hashes":[{"alg":"SHA-1","content":"873beeb015297e8e026fdd9d97450877dcbb36cf"},{"alg":"SHA-256","content":"21b307891704eb34e9be621d7563d13734f75f41d8f97825862b05ca5bc2d217"}]},{"bom-ref":"c5521f548d6b0f53","type":"file","name":"/juice-shop/node_modules/define-data-property/package.json","hashes":[{"alg":"SHA-1","content":"c9384aa894159ee96e107cdd3002915849fc91fc"},{"alg":"SHA-256","content":"bde7f1465b344a24da2b10d2ee99f87edf8e0ecd177c28370b60ad9595de730e"}]},{"bom-ref":"b3bcc7a58804cf1a","type":"file","name":"/juice-shop/node_modules/define-properties/package.json","hashes":[{"alg":"SHA-1","content":"7258fe1b09441a50b6399709b9f40811b7da135f"},{"alg":"SHA-256","content":"b61b15058833610f17197bfb60847926703e077b180de684ccc50866906f6fb1"}]},{"bom-ref":"67b2e567c630eb11","type":"file","name":"/juice-shop/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"913cdc3f4533f33212008427e8d7586fb0d8c77a"},{"alg":"SHA-256","content":"abeefd42bcf869fe8652b1037aa42742b71d5a56138b36af4b22d36243e6a872"}]},{"bom-ref":"a508da21c2ac58e0","type":"file","name":"/juice-shop/node_modules/delegates/package.json","hashes":[{"alg":"SHA-1","content":"f192d34b412f6fda6a541acee81de9e0d48648bb"},{"alg":"SHA-256","content":"7fe6ba799e1316869f2990cfe8e51bd29a40e1e5f327babdd38d23e3e23e8d87"}]},{"bom-ref":"bc18002d18a91b1b","type":"file","name":"/juice-shop/node_modules/depd/package.json","hashes":[{"alg":"SHA-1","content":"3c10082c1464a6f589aa10cda88285e780ebf857"},{"alg":"SHA-256","content":"5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99"}]},{"bom-ref":"1439fe9266f8b5af","type":"file","name":"/juice-shop/node_modules/destroy/package.json","hashes":[{"alg":"SHA-1","content":"e12115ed9a1e2c56eb35ecfc14ff83b8c02935d5"},{"alg":"SHA-256","content":"f865b50652dc062f43142e01f55db2760cc10d255bd05afd232e738999c58188"}]},{"bom-ref":"2b1e222108454155","type":"file","name":"/juice-shop/node_modules/detect-file/package.json","hashes":[{"alg":"SHA-1","content":"4bb909e6a4e96fae92a08102ea75db073df4348a"},{"alg":"SHA-256","content":"5c9dafc723e89cbed5a46bd5661a8ce51ff3b0ea7ec1f1a446d91294bff47283"}]},{"bom-ref":"1c7d3ec9d89b7c26","type":"file","name":"/juice-shop/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"df38d1adc85f0f39030df82734c0d53a6a4ab728"},{"alg":"SHA-256","content":"bb418f4fa450f8a418f8fc46c33727edef55aefd54c43ec6a9421a65ca8d9827"}]},{"bom-ref":"cf831517c31791d5","type":"file","name":"/juice-shop/node_modules/dfa/package.json","hashes":[{"alg":"SHA-1","content":"8380e4b8de016791903fae93500e6bed99730482"},{"alg":"SHA-256","content":"96c0ce3cc17b34aabd58fd442157766d9e244cba735e54ee4fe10d7841f0460c"}]},{"bom-ref":"a390483d59a52a54","type":"file","name":"/juice-shop/node_modules/doctypes/package.json","hashes":[{"alg":"SHA-1","content":"871d1d4274f18991e95e1fb8152ee7f389e357c3"},{"alg":"SHA-256","content":"75c3011d12383ba4daaf2bd220c601da3c9b95205394ebd70b4a1c78814298bb"}]},{"bom-ref":"b20ef628223be93f","type":"file","name":"/juice-shop/node_modules/dottie/package.json","hashes":[{"alg":"SHA-1","content":"2b100dd10d7e21fa58a49f76ed5666a1eff45b01"},{"alg":"SHA-256","content":"229a5002823b593767b88e3b6f85bf6262540564f405d1f5be672d0233d97171"}]},{"bom-ref":"9fbb85dea3072601","type":"file","name":"/juice-shop/node_modules/double-ended-queue/package.json","hashes":[{"alg":"SHA-1","content":"30542f1f765ce4999dbac3bbe0b3ff1df8dcef06"},{"alg":"SHA-256","content":"006484a1d2b6898582f6b11c448bbde98d05fede3ed0b062250222329dc436a2"}]},{"bom-ref":"e03e80414c4fcda9","type":"file","name":"/juice-shop/node_modules/download/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4a6b4729fde430cee32de953aa6fca071be059d1"},{"alg":"SHA-256","content":"8294d202a217083501a4d8331056aee92b4e08a793652199ba381ddc5827445c"}]},{"bom-ref":"984c87812c509a9e","type":"file","name":"/juice-shop/node_modules/download/package.json","hashes":[{"alg":"SHA-1","content":"ae5526f3f8da448d11127e9eb7b12b4c0db0f5ae"},{"alg":"SHA-256","content":"c50eeac8286ef9c74324c8a3788c920d89af79ee02273482661d0e0e53c6ab98"}]},{"bom-ref":"cda168370dc1b9b4","type":"file","name":"/juice-shop/node_modules/dunder-proto/package.json","hashes":[{"alg":"SHA-1","content":"d4f4da85fa9e51b4843d29d7e541991cf377b8d5"},{"alg":"SHA-256","content":"24df71008e4225c858f389dd2728b76cf66b752256d42a38ed7930aacae7fe2b"}]},{"bom-ref":"9a44ce53cb68d5ea","type":"file","name":"/juice-shop/node_modules/duplexer2/package.json","hashes":[{"alg":"SHA-1","content":"03b1919d071f65ef5340b0afb32ebf000056bfcc"},{"alg":"SHA-256","content":"80a5177685b461feb7f741c08ab2268a63e108b03bae0e5056f6a6bebf8ce315"}]},{"bom-ref":"932bab8db89ae4e6","type":"file","name":"/juice-shop/node_modules/duplexer3/package.json","hashes":[{"alg":"SHA-1","content":"b78f4dda4b12e85d2889a30486b82c559f5744bd"},{"alg":"SHA-256","content":"107bd6232c7aa9c50bc3d562b3052e69cadad3a691bdce012ddb244b6357e3de"}]},{"bom-ref":"3b2785a103aeb613","type":"file","name":"/juice-shop/node_modules/dynamic-dedupe/package.json","hashes":[{"alg":"SHA-1","content":"030d522d03c194f4a9e4b137e1d188e0ce248e0d"},{"alg":"SHA-256","content":"9ed561a0767b7ef8d15e12e0feee1efc6f6c71dc79ffa8189ed9397a56483109"}]},{"bom-ref":"50debcbff3ca0823","type":"file","name":"/juice-shop/node_modules/eastasianwidth/package.json","hashes":[{"alg":"SHA-1","content":"c3bff6d91fcbc648b17edd5f8e37bac1f47485a4"},{"alg":"SHA-256","content":"51db62f97656d02d4bc9670393cae42930dbd1ed89f5837056851807e602867a"}]},{"bom-ref":"9df0fa36065b81c4","type":"file","name":"/juice-shop/node_modules/ee-first/package.json","hashes":[{"alg":"SHA-1","content":"7ffe61f87f94a558fabc177cad5c9b90b16481cf"},{"alg":"SHA-256","content":"a4eece6ff6b38bf7ac107323f381cc60500097a9cbdd473f5d5b45e68822cb89"}]},{"bom-ref":"38e0b03b50d1c252","type":"file","name":"/juice-shop/node_modules/eivindfjeldstad-dot/package.json","hashes":[{"alg":"SHA-1","content":"af20b4726ad418b94f3f536ccc764cda1236840f"},{"alg":"SHA-256","content":"ace4488e54d7e874ef61df9734a1a6c87c3df723a9cd14ef88294001f4e64f0d"}]},{"bom-ref":"a2f9739b25e02496","type":"file","name":"/juice-shop/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"c26fe90da5886724a2676b8e3d5890beeacaad20"},{"alg":"SHA-256","content":"7bec29b9ca68f2c4becc60e866c2f9342ecdc89fab39841a818ccd9eda15c148"}]},{"bom-ref":"da1e44a5e5cd4723","type":"file","name":"/juice-shop/node_modules/enabled/package.json","hashes":[{"alg":"SHA-1","content":"35340901cea631effd557c9f64aeb682dcb2c459"},{"alg":"SHA-256","content":"5bc65d6409ffeb2c9eada8c0706d2b6426697d748fa2f409342f3668f4ee23f7"}]},{"bom-ref":"0badbc40bf1660be","type":"file","name":"/juice-shop/node_modules/encodeurl/package.json","hashes":[{"alg":"SHA-1","content":"40228259bb4f106706490d0b0b73cd4f35d6db44"},{"alg":"SHA-256","content":"5df10798f4b086da95c24180d7519fa4f68e2057a48e2ff6b76b91d6ffed1e9b"}]},{"bom-ref":"2725510a0c4d4f97","type":"file","name":"/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a3d90badf75db503f5dd3ff3fb76d120d1424978"},{"alg":"SHA-256","content":"3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"}]},{"bom-ref":"3556b008e5f0af5d","type":"file","name":"/juice-shop/node_modules/encoding/package.json","hashes":[{"alg":"SHA-1","content":"52b117f2bc3113970224b9dc97b7fc18f7df30ab"},{"alg":"SHA-256","content":"8a868d7c206bf2eb71c0721a957b7a255738678f72c290c880b46fec4ec54dbe"}]},{"bom-ref":"72749b5813de35bf","type":"file","name":"/juice-shop/node_modules/end-of-stream/package.json","hashes":[{"alg":"SHA-1","content":"7e21c9362d2b1158118b6673f45fa1c6695c847f"},{"alg":"SHA-256","content":"da504d0bef5a5974590b62f58df0003b448eccde6b5fbeb044506b7e43368eb5"}]},{"bom-ref":"87f01fcf9adca342","type":"file","name":"/juice-shop/node_modules/engine.io-parser/package.json","hashes":[{"alg":"SHA-1","content":"4a12fbe97085b55ea1025807ce2d6e45ed3c29c5"},{"alg":"SHA-256","content":"3745d9cfcd726c33b1066fc4c0ebfdfc8590b762861e4ff7d1f50b37f338afa4"}]},{"bom-ref":"67670dd4e8fd60fb","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","hashes":[{"alg":"SHA-1","content":"b7049b02b54f0da0a956bc0967ce39f5429442a5"},{"alg":"SHA-256","content":"07269baaaad9a16ef8a4666d69cdd387891658eaf31af3026abd8b9e3fefc9c9"}]},{"bom-ref":"debe04b9c386e3b1","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/ws/package.json","hashes":[{"alg":"SHA-1","content":"55eba127d99266b82e347a07bc4e164aa9c134ab"},{"alg":"SHA-256","content":"0104bf7fa4b359d2a844c2ad0d37a0bf6fe14531e4c9c33055004dce85e8d1e7"}]},{"bom-ref":"f2d767398cc4281d","type":"file","name":"/juice-shop/node_modules/engine.io/package.json","hashes":[{"alg":"SHA-1","content":"2b4f930598e5129e2c27429b87b7554cb065e11d"},{"alg":"SHA-256","content":"b72c50246f14911e15b0f0145cce9a20b78bf8aabf4b79d4c178ef02f53f3a27"}]},{"bom-ref":"cb09c265dd07eb53","type":"file","name":"/juice-shop/node_modules/env-paths/package.json","hashes":[{"alg":"SHA-1","content":"b5b570f41c1d3e8f251fd06d075cefea4a3449a9"},{"alg":"SHA-256","content":"b92833e5851ec53bd4cd8093f6099d0c6e6818c4374ec1d09aa25d4f9ba91ec4"}]},{"bom-ref":"e91bdfa5f48ae6fe","type":"file","name":"/juice-shop/node_modules/err-code/package.json","hashes":[{"alg":"SHA-1","content":"5c7bc63340bc312d1563bb2b369e333e1165ab04"},{"alg":"SHA-256","content":"ff5360c17c3e197fc4a4a4fa0d07640292556d585a49c8651fd198e926d47bcc"}]},{"bom-ref":"3d65ccc3abae4178","type":"file","name":"/juice-shop/node_modules/errorhandler/package.json","hashes":[{"alg":"SHA-1","content":"7f55bed905c65a940ddbe84db895543a81f48f64"},{"alg":"SHA-256","content":"513961a14abb16d3dbdeccbabee88e42d412b273f55ebe31a8f1b82f9aa1f746"}]},{"bom-ref":"ed2f91e2090cb61a","type":"file","name":"/juice-shop/node_modules/es-define-property/package.json","hashes":[{"alg":"SHA-1","content":"f1a35cb43fefef0d0e60920c4df5313ba630ee6d"},{"alg":"SHA-256","content":"3a2cb30dae30a96705dcd9aa2d5fb190cf8200f27badccfa5a81a4374e5708b4"}]},{"bom-ref":"4d507c4d52063fe0","type":"file","name":"/juice-shop/node_modules/es-errors/package.json","hashes":[{"alg":"SHA-1","content":"d13bcb37ab6ab7f0911ce728148cb1c8485a81d1"},{"alg":"SHA-256","content":"1a0a0bcccc76b915cb64073317312840cf6363e9144b96f406d0059774dd5278"}]},{"bom-ref":"61203c915b39b5de","type":"file","name":"/juice-shop/node_modules/es-get-iterator/package.json","hashes":[{"alg":"SHA-1","content":"e5f87acaaa2bd7ba95797e07f31e74d503db6bfe"},{"alg":"SHA-256","content":"cce872f403e70751f0bc8dddb0f7d2e992eb624c9397f764fa7f2feae602ac3f"}]},{"bom-ref":"7fa9a4b4700f6d13","type":"file","name":"/juice-shop/node_modules/es-object-atoms/package.json","hashes":[{"alg":"SHA-1","content":"623e510034cf39440e8692aa26c9473765981674"},{"alg":"SHA-256","content":"9975f032714dd642d08c9b50129096f5daf878dbede1ca3544cdcdbf45b48eb0"}]},{"bom-ref":"7b54d225adeba404","type":"file","name":"/juice-shop/node_modules/escape-html/package.json","hashes":[{"alg":"SHA-1","content":"f9d3fd64a0196e77965489ce9b81fe4ce3a9ecb1"},{"alg":"SHA-256","content":"bd320a3e9d23249f5f7d3ce72f2fa426e28a6b2704bd2b281d0c92806a1f5223"}]},{"bom-ref":"58a99eb4bea33da2","type":"file","name":"/juice-shop/node_modules/escape-string-regexp/package.json","hashes":[{"alg":"SHA-1","content":"f794290e774669d83cae4e20a497fbf680d20859"},{"alg":"SHA-256","content":"c804f228dd0d4d3b9019ac361339f20cbb1664d62d6853aaa7c2855fbd60fd12"}]},{"bom-ref":"786fd862a71cf8cb","type":"file","name":"/juice-shop/node_modules/escodegen/package.json","hashes":[{"alg":"SHA-1","content":"b0e37a6a14f106b497b8708362e88a9555723fbe"},{"alg":"SHA-256","content":"c8d08b0f4dbb8cd4a30c7183fa247d67003d63749a1c46a430c1a265a8147cf0"}]},{"bom-ref":"98d5a4bdc5130f02","type":"file","name":"/juice-shop/node_modules/esprima/package.json","hashes":[{"alg":"SHA-1","content":"6c87daaded1f0130495358bdd1393757df2e9233"},{"alg":"SHA-256","content":"860df2e62153db26b370badf352d95edbf18e1eb54bdc2a479429b97155205b2"}]},{"bom-ref":"dc8d9e49d5e0390b","type":"file","name":"/juice-shop/node_modules/estraverse/package.json","hashes":[{"alg":"SHA-1","content":"0531d8f4becce53263ed592b54ee0e0abc53fbed"},{"alg":"SHA-256","content":"133a5be160a0123ad20ab8f2bdaa9da2fd94ebf3403996bf4cb69606e6a84a65"}]},{"bom-ref":"3ece4b11b17b0140","type":"file","name":"/juice-shop/node_modules/esutils/package.json","hashes":[{"alg":"SHA-1","content":"d547006ab2a948fe2bd6bde178a3e1eea51367ca"},{"alg":"SHA-256","content":"af08fd13ef49c88af75c5f4ad02812216028ad848f8354fd97346e7ddc816c0e"}]},{"bom-ref":"bc817419b2917df8","type":"file","name":"/juice-shop/node_modules/etag/package.json","hashes":[{"alg":"SHA-1","content":"e2debd5c6530254abe164bbd44f1e48b7c7c0018"},{"alg":"SHA-256","content":"836b9a5dd1c6af638f4602e83e2568277f9ab1f457db0b95d949c2a4ddb0462a"}]},{"bom-ref":"15eaa62c490a795f","type":"file","name":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json","hashes":[{"alg":"SHA-1","content":"13a7711d4838b588d34094c0a37ecb6fedb214f2"},{"alg":"SHA-256","content":"c1aa90e6c1160d2e56df181fe67670127c2aeab230a2754bc1d7fb2a653a5d68"}]},{"bom-ref":"867ab4c57325d718","type":"file","name":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"05934fe2d902bcf292a9675b70e58f0cf749baae"},{"alg":"SHA-256","content":"60a38b31b3dbe8a261fc525e7263a51df22af80c9800f09db0dd6e3d5bde3690"}]},{"bom-ref":"ec39b5ab465a3bb4","type":"file","name":"/juice-shop/node_modules/ethereum-cryptography/package.json","hashes":[{"alg":"SHA-1","content":"6918fc437098162bc861a0d407ca09983b0b1f0a"},{"alg":"SHA-256","content":"35687af30f8342f23dcde98ea0ad4ab020002199bafa5861f13f320a40678eed"}]},{"bom-ref":"4d869658eecd2bd3","type":"file","name":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","hashes":[{"alg":"SHA-1","content":"dde693dc49d0c144fe2402fb5031a5bfc32207d7"},{"alg":"SHA-256","content":"d57a323bf4705370a5e2f0ce927e2f265017d2479fd31e9b32e11334c1550308"}]},{"bom-ref":"48ecb18186915ee0","type":"file","name":"/juice-shop/node_modules/ethers/node_modules/undici-types/package.json","hashes":[{"alg":"SHA-1","content":"648c0c8889b843ccd3d07972c8cb535517966ad9"},{"alg":"SHA-256","content":"0635ace61c576d1297d05c344c4fab0a77e8c88ffa185c9f18b23d18f7387c40"}]},{"bom-ref":"e16666b3a22daf49","type":"file","name":"/juice-shop/node_modules/ethers/package.json","hashes":[{"alg":"SHA-1","content":"973ed5c2b66bbe1ea20c4d8435c132a23de15c0c"},{"alg":"SHA-256","content":"957d5092241ed59860532077633008c49852b98b384493bb0f04225a414eb601"}]},{"bom-ref":"afe18b36f2eec559","type":"file","name":"/juice-shop/node_modules/event-target-shim/package.json","hashes":[{"alg":"SHA-1","content":"ce8a2ce9da7170ce539fb64b1f91287aed3c5910"},{"alg":"SHA-256","content":"980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db"}]},{"bom-ref":"ccee62be137698d1","type":"file","name":"/juice-shop/node_modules/events/package.json","hashes":[{"alg":"SHA-1","content":"8aae12f382a34bc1dd6aae59d3f27e4098148e35"},{"alg":"SHA-256","content":"878ad3687fef7efe3757c1872a3af998c95197129a7445d632486a9591ee542e"}]},{"bom-ref":"ca12101e909fb721","type":"file","name":"/juice-shop/node_modules/exit/package.json","hashes":[{"alg":"SHA-1","content":"ff06cfc562bae46b67f745152b929ef2aa7c08c6"},{"alg":"SHA-256","content":"5e2cb677a865c02d0a626eea6a718b9dd528cfb45ea20914bb6c396a7291c5e6"}]},{"bom-ref":"c87a2913cfe1a667","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"0bd6e42cf23c98b6","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"9630fedbcbccc883892f78a2b21184ef87e6b9bd"},{"alg":"SHA-256","content":"b999a380ba13fef8b973f3df54c1f11f2c8d97d4f5f691600508fa2b7108fe52"}]},{"bom-ref":"4f5d7d05a3319c74","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"7503435c017b2a8e","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"5b25f9cf1b1cbe731ebc6a083375947c7961278f"},{"alg":"SHA-256","content":"b8498c15313f99506d9f9d2e99c98668c77260090fa9ea358ee9449ecc89436f"}]},{"bom-ref":"7f6a98b21f5bccfc","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"1caf66f424c8cfb4","type":"file","name":"/juice-shop/node_modules/expand-brackets/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"c7d82c47d09b3e8d","type":"file","name":"/juice-shop/node_modules/expand-brackets/package.json","hashes":[{"alg":"SHA-1","content":"405868b5edb0df6bf0f4ea689d50240d2002cebe"},{"alg":"SHA-256","content":"c08379bf0b9bf8ab4c47ce0a1afef511f8727cbdf6709840e3c1fb2f0a6f9e0c"}]},{"bom-ref":"b6fb3b401cdd1cf6","type":"file","name":"/juice-shop/node_modules/expand-template/package.json","hashes":[{"alg":"SHA-1","content":"9fc7d90a7f18b4996e21b82c4eaff325c6ba07b9"},{"alg":"SHA-256","content":"90f652967155275d9fab2887a845454ee797340b28cc0c1b00f1889aaa65f771"}]},{"bom-ref":"8f8fbf7b5dc85fac","type":"file","name":"/juice-shop/node_modules/expand-tilde/package.json","hashes":[{"alg":"SHA-1","content":"89622a13cd2bfce8992324f0dd2331d2e59d5eb3"},{"alg":"SHA-256","content":"b2d0ab00c2e5d4f6a4ecf0d6a43cb88ce72f44b1847f5c09088c2a485aac07db"}]},{"bom-ref":"975fba777b78a941","type":"file","name":"/juice-shop/node_modules/exponential-backoff/package.json","hashes":[{"alg":"SHA-1","content":"af54bb38a82b5a0d058c722fac83b3bf91fff3f5"},{"alg":"SHA-256","content":"630d7042b3b9935fdd01d4ac8ca459b568b098eadddd26a819190c672267116b"}]},{"bom-ref":"de962a49421162e6","type":"file","name":"/juice-shop/node_modules/express-ipfilter/package.json","hashes":[{"alg":"SHA-1","content":"6df6c471219637c24e0280a88e5b4593d418dbf8"},{"alg":"SHA-256","content":"c6c011ce0b953be723a4c8baa57eb0f5b5a11c3a0825f8e377cdc660a45bb095"}]},{"bom-ref":"cdb507c558dec8f6","type":"file","name":"/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json","hashes":[{"alg":"SHA-1","content":"a202ae6847862336ee80642647cd5b5f63c78c0f"},{"alg":"SHA-256","content":"b47e393c9f3a368a8c9721dac7f50f2bb8ec02e11347366f6c5e600ae65e2133"}]},{"bom-ref":"adc983c297482f8e","type":"file","name":"/juice-shop/node_modules/express-jwt/node_modules/moment/package.json","hashes":[{"alg":"SHA-1","content":"1256eb9bb42d4f145e4bcd9e95064d3b4943f1f1"},{"alg":"SHA-256","content":"b0a3d5ad3ee57c7bfc0803b6a38315c0b47501621742383a49af1b686f36a761"}]},{"bom-ref":"0a1ab33df8246ade","type":"file","name":"/juice-shop/node_modules/express-jwt/package.json","hashes":[{"alg":"SHA-1","content":"1360dc73f86f18b98bbfa0055fbf1d752740c055"},{"alg":"SHA-256","content":"ee2b6c1812872e159adc637a884c404e7a08eb31a49c4b0e93c808ab85219207"}]},{"bom-ref":"b491863e4bd6714c","type":"file","name":"/juice-shop/node_modules/express-rate-limit/package.json","hashes":[{"alg":"SHA-1","content":"1ebdeb0dec13e1ee5d489b19a778944b4c35dd30"},{"alg":"SHA-256","content":"859e9ad6910938c8175dd88c8a6ee30bdda86d1798f3ea48aec816164de2c9a0"}]},{"bom-ref":"2cb9d0d788a06a40","type":"file","name":"/juice-shop/node_modules/express-robots-txt/package.json","hashes":[{"alg":"SHA-1","content":"3907d897613ad72347322dd265a4bfb61bba700c"},{"alg":"SHA-256","content":"db4e0d720369876e778aa7b94a7a597f8e10690bec658af661d3b2d73f4e5ec5"}]},{"bom-ref":"7e0e91f41bc75ee4","type":"file","name":"/juice-shop/node_modules/express-security.txt/package.json","hashes":[{"alg":"SHA-1","content":"1d1f8efa7065c501ac19ce18c59773746c57698b"},{"alg":"SHA-256","content":"0309502f5ccd0218c615bc67d87263be0027d3c19860c9096a4917d823001033"}]},{"bom-ref":"cf23d22fdb1375ec","type":"file","name":"/juice-shop/node_modules/express/node_modules/cookie/package.json","hashes":[{"alg":"SHA-1","content":"527482067ae42ba612c2d9924834c32b507fc45a"},{"alg":"SHA-256","content":"44cfaeb0823a1e6c9fc1856b9bd99f574c32e038f8f6a8f44f8cb388de98b339"}]},{"bom-ref":"66dfeec523667fba","type":"file","name":"/juice-shop/node_modules/express/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"df41fa34910856da","type":"file","name":"/juice-shop/node_modules/express/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"0d41a093cd127c89","type":"file","name":"/juice-shop/node_modules/express/package.json","hashes":[{"alg":"SHA-1","content":"1304181ac2f300a392cf3c6df171e707d542107a"},{"alg":"SHA-256","content":"37ac624cec9a1a3d98596794bac913345ebb0b39c5dbab949fc84e5d9d500470"}]},{"bom-ref":"b19a8dcb864bb9c9","type":"file","name":"/juice-shop/node_modules/ext-list/package.json","hashes":[{"alg":"SHA-1","content":"ed4b7b5ad0481785ef315749f1bece88fbd43112"},{"alg":"SHA-256","content":"1aa02cbc277189344e32609c0f7e9303811a0ebbf1691607343468975257a2be"}]},{"bom-ref":"58cc0148a5d0249a","type":"file","name":"/juice-shop/node_modules/ext-name/package.json","hashes":[{"alg":"SHA-1","content":"9cc0d1f321318a0de7c63a80cb66222a60be6b16"},{"alg":"SHA-256","content":"b7dd56ec22b6e02488e6631f3e8d0812228161b6f02e04d5f7f25a9e58f4fa53"}]},{"bom-ref":"81c3ec530bdd461a","type":"file","name":"/juice-shop/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"6232c8f7d9adc4ac6e35119d522b15009100e682"},{"alg":"SHA-256","content":"8f71aa59dbc6c5111ed9dcef92fd710bbd82fcad47c495127ba136e0b7e78095"}]},{"bom-ref":"d924ed1d9dac208e","type":"file","name":"/juice-shop/node_modules/extend/package.json","hashes":[{"alg":"SHA-1","content":"b6cd42f3e1865fe04ed104d8798d40232f74702a"},{"alg":"SHA-256","content":"8d891b3f00bead114c4741d8a594e7aaa59114f53782ec9a9319a619709dc14f"}]},{"bom-ref":"28081c2a840c8633","type":"file","name":"/juice-shop/node_modules/extglob/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"ca2a7d4413c40ae9c669a82bf19b8cb2ae4a557c"},{"alg":"SHA-256","content":"03cce8ab627f9aa9d11af4a225523a9c7c67c51a135b630b85f5743920b312af"}]},{"bom-ref":"aeb141b0a3d5ccd2","type":"file","name":"/juice-shop/node_modules/extglob/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"e86da0b3209fbc8c","type":"file","name":"/juice-shop/node_modules/extglob/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"23893eba3fabca28","type":"file","name":"/juice-shop/node_modules/extglob/package.json","hashes":[{"alg":"SHA-1","content":"36c510930da9a9aca7850b89624992f195c4b237"},{"alg":"SHA-256","content":"fee3793043c3104a23b7061eabcfe6841dc25fe431797e7dfbcf9f1dfa593001"}]},{"bom-ref":"9906aa9d85333c82","type":"file","name":"/juice-shop/node_modules/fast.js/package.json","hashes":[{"alg":"SHA-1","content":"b488db397e98dd361707f8fa4d775f93c1254866"},{"alg":"SHA-256","content":"41ebff4b9f6a6598b47d69e2546ae3e5a439a72642ad3900669e39356d71477c"}]},{"bom-ref":"debcc4faf4205fff","type":"file","name":"/juice-shop/node_modules/fd-slicer/package.json","hashes":[{"alg":"SHA-1","content":"d8074c62f751ce835105f40fa0a95bcaa4979206"},{"alg":"SHA-256","content":"c765386ed427fcadd9ffd7ae1c7748d7127685098fdb85cde3d98df7e931ed2d"}]},{"bom-ref":"89186971fbd47a33","type":"file","name":"/juice-shop/node_modules/feature-policy/package.json","hashes":[{"alg":"SHA-1","content":"85ec5bca9bc6d37740ca0626180c1266da4ca3a0"},{"alg":"SHA-256","content":"4fe26f174b36bc2035107ee049a280444de8c2ad8e33106e3983dfe8aefe639c"}]},{"bom-ref":"2b4ffcd85cd96c05","type":"file","name":"/juice-shop/node_modules/fecha/package.json","hashes":[{"alg":"SHA-1","content":"217ec9bfd1608fa49904b38e4bd8e09291bffc1d"},{"alg":"SHA-256","content":"80ecd4a2611642303d3fdd2dcf480a806737c6b7e9b2306c9bb314fdf16c81d3"}]},{"bom-ref":"a26c4c492ee7d741","type":"file","name":"/juice-shop/node_modules/file-js/docconfig/template/package.json","hashes":[{"alg":"SHA-1","content":"a6c8a1966595cc5991361d76f01ccdf13a46c0f2"},{"alg":"SHA-256","content":"e8e79ce62b2b8becdc267471e65beb91412181147f736ae9a14026ac34332643"}]},{"bom-ref":"2c9575fc0cf9b7ca","type":"file","name":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"e3f1abdc5080e5c2","type":"file","name":"/juice-shop/node_modules/file-js/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"ca820d7c6cdab8cb","type":"file","name":"/juice-shop/node_modules/file-js/package.json","hashes":[{"alg":"SHA-1","content":"a6163b6bd656b99b52b732afbace2b17d563b327"},{"alg":"SHA-256","content":"df1e9d5549162bcdba9038c7468b9d9a03f0a746f0381c81dab4ca2cd9bf3af5"}]},{"bom-ref":"01cdc0b7ae81facc","type":"file","name":"/juice-shop/node_modules/file-stream-rotator/package.json","hashes":[{"alg":"SHA-1","content":"006a62bb3da1401fb420e93f831f9901d455e6a5"},{"alg":"SHA-256","content":"743a71077be1d7bd2181334b5259f97cf396edcc5b61eb92fb9b26995aab80c7"}]},{"bom-ref":"72f45cc6906efa29","type":"file","name":"/juice-shop/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"9bc985e64fa6cc889fd63347ce118082115fbe7a"},{"alg":"SHA-256","content":"812c4de8a1af4058d6a1f7e38b2687a545d7273a9103058e8cf1177b5c95803c"}]},{"bom-ref":"1cdbf97dab75bf6f","type":"file","name":"/juice-shop/node_modules/file-uri-to-path/package.json","hashes":[{"alg":"SHA-1","content":"5dee8a540c467ffbf9025481180c77a06a9f46f2"},{"alg":"SHA-256","content":"71eb1e24bb9694f89c613fa0aa307f977dd43f41d11794c7b48fabf6c55f66b0"}]},{"bom-ref":"88bb1246a91ae680","type":"file","name":"/juice-shop/node_modules/filehound/docconfig/template/package.json","hashes":[{"alg":"SHA-1","content":"a6c8a1966595cc5991361d76f01ccdf13a46c0f2"},{"alg":"SHA-256","content":"e8e79ce62b2b8becdc267471e65beb91412181147f736ae9a14026ac34332643"}]},{"bom-ref":"07d53cca3286a7ca","type":"file","name":"/juice-shop/node_modules/filehound/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"9135b9d09569cc371d550d097d00d7f1af4ac70c"},{"alg":"SHA-256","content":"9c5d4c52ad27d99c7195aefa388695604188861859ab80bedbb23568b092a3f2"}]},{"bom-ref":"5bdfe08f24fef3eb","type":"file","name":"/juice-shop/node_modules/filehound/package.json","hashes":[{"alg":"SHA-1","content":"3b2da39dbd6414f69d6e9ef986877ffcbd93229c"},{"alg":"SHA-256","content":"f04df0db871e270c361fd0bbd66dd8263973ea93a4a7d1440c07d33a54529d92"}]},{"bom-ref":"3681a1359772f2bc","type":"file","name":"/juice-shop/node_modules/filename-reserved-regex/package.json","hashes":[{"alg":"SHA-1","content":"9662d5519c4ea053d30cca8407bfe0e82c51fb76"},{"alg":"SHA-256","content":"cdbab11cec5a1837bda72ad9b1e91fa10cf22e634b4c1d550440b9a85e3dbd08"}]},{"bom-ref":"4685dd73cc65a5dd","type":"file","name":"/juice-shop/node_modules/filenamify/package.json","hashes":[{"alg":"SHA-1","content":"ac191eead429dc383ad2b6b379a0e8ff1837bf28"},{"alg":"SHA-256","content":"60ac75b25fe301fa718dec448dd812e5e64ff07aea1de630b934508aea8d9b98"}]},{"bom-ref":"fc55f70943a01be0","type":"file","name":"/juice-shop/node_modules/filesniffer/docconfig/template/package.json","hashes":[{"alg":"SHA-1","content":"a6c8a1966595cc5991361d76f01ccdf13a46c0f2"},{"alg":"SHA-256","content":"e8e79ce62b2b8becdc267471e65beb91412181147f736ae9a14026ac34332643"}]},{"bom-ref":"cffdfc011b1095fa","type":"file","name":"/juice-shop/node_modules/filesniffer/node_modules/sinon/package.json","hashes":[{"alg":"SHA-1","content":"80d6c11da0f310dd6a5cb4948e2669d424a31aa1"},{"alg":"SHA-256","content":"0809aba5cdf5e7e0f27f5c1195e8086a4bec547117ea1cf5a2557afb24771138"}]},{"bom-ref":"f250977f53b96f02","type":"file","name":"/juice-shop/node_modules/filesniffer/package.json","hashes":[{"alg":"SHA-1","content":"fe01ba3039fbd876271c259275a62f474327bf82"},{"alg":"SHA-256","content":"f20fa0cdd518e7c4f0fcf72a0f8de2d29a1002be1e372b1c3ec45307d9552832"}]},{"bom-ref":"590a2371fc2e197c","type":"file","name":"/juice-shop/node_modules/fill-range/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"0b69bd8fe22ab24e","type":"file","name":"/juice-shop/node_modules/fill-range/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"05191a715b1b68ba","type":"file","name":"/juice-shop/node_modules/fill-range/package.json","hashes":[{"alg":"SHA-1","content":"07f98cf172ebad2ebf7408b27c530ac6e64c8662"},{"alg":"SHA-256","content":"ede85b68d4d7c71dd301baec0cd14f4f34b5bd9539c4b7b04461f06316412ab9"}]},{"bom-ref":"d46aaf920ef02910","type":"file","name":"/juice-shop/node_modules/finale-rest/package.json","hashes":[{"alg":"SHA-1","content":"f9a24d135e58874e49a609e85eb002f28fb716bb"},{"alg":"SHA-256","content":"ef8d065b7073f5b58dc0f19f24263f0930dcf592e67ec4a94cd57b237b30a229"}]},{"bom-ref":"9da384a3c2ab7fe2","type":"file","name":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"15e4ffb6b05366f3","type":"file","name":"/juice-shop/node_modules/finalhandler/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"d303b812d99e42c4","type":"file","name":"/juice-shop/node_modules/finalhandler/package.json","hashes":[{"alg":"SHA-1","content":"03c0b50ec72f0d05fd6c677bc85e6d826d743d49"},{"alg":"SHA-256","content":"463f3f3c96617b114318f3d95a9dae423bfd961b50466a8f76d5041faf358f8c"}]},{"bom-ref":"3ac97b52690b1a1f","type":"file","name":"/juice-shop/node_modules/findup-sync/node_modules/is-glob/package.json","hashes":[{"alg":"SHA-1","content":"b924880c1dfe0a2d4fb2ed6fcd9bca8ca1286d96"},{"alg":"SHA-256","content":"688011659f41dc33dbc82ff0507a7b2bf3dfd8164691b925abc7977d0160f018"}]},{"bom-ref":"4b48ef37911e57b2","type":"file","name":"/juice-shop/node_modules/findup-sync/package.json","hashes":[{"alg":"SHA-1","content":"59e69b53021d04d994fdfa6e89d98eca3cda0dce"},{"alg":"SHA-256","content":"d525e8ddbfd84109bf8034763c56a8322471795372ad71df9600a8854d4e0225"}]},{"bom-ref":"7a333542fbeb2942","type":"file","name":"/juice-shop/node_modules/fined/package.json","hashes":[{"alg":"SHA-1","content":"a1f7ac68d3496f59d5428c268fd757fa1df105f4"},{"alg":"SHA-256","content":"8d8b10b51c047096ab925bb9bb538cee021a246f36c61d675d12afc4f7953d9c"}]},{"bom-ref":"c17161134ee7e22b","type":"file","name":"/juice-shop/node_modules/flagged-respawn/package.json","hashes":[{"alg":"SHA-1","content":"515caf1e8682c8a724c316e64553e908828231f5"},{"alg":"SHA-256","content":"6c04c192754301ec51a5506c3e6d6b89db47803a4f261abd49b4bd3dfcc7d6cc"}]},{"bom-ref":"abae0706c3ee6c7e","type":"file","name":"/juice-shop/node_modules/fn.name/package.json","hashes":[{"alg":"SHA-1","content":"339606d3e1f800255c7e03b02a94197f568cab3d"},{"alg":"SHA-256","content":"20d7245ef0121af63e27998ea2c1a477a712809f4a621ca5246869c32ff76cd9"}]},{"bom-ref":"cea1fa141d36239f","type":"file","name":"/juice-shop/node_modules/fontkit/package.json","hashes":[{"alg":"SHA-1","content":"1f933307496553b0ba751d5878ae0f0a8e661b40"},{"alg":"SHA-256","content":"ffece6cf3f8adcb72394784ccb3772696241a93ba64fcfb5c5f7226b24be0662"}]},{"bom-ref":"4afe6d898408b532","type":"file","name":"/juice-shop/node_modules/for-each/package.json","hashes":[{"alg":"SHA-1","content":"1eb80e2f5665bd24adc0caa46741c4d4c52f4c02"},{"alg":"SHA-256","content":"789a488ade1ea7535497f7c86fded54281c4e7ff861fe8e0e667772a00680711"}]},{"bom-ref":"d68a5d89d4ea03af","type":"file","name":"/juice-shop/node_modules/for-in/package.json","hashes":[{"alg":"SHA-1","content":"e68ca23447b0f106e434b1ca3071685929a40b7f"},{"alg":"SHA-256","content":"f0d68cfe65109d06cf02bcc45e4b8bc18678d530f580eb62d112d919473e2539"}]},{"bom-ref":"66d59107f7210ac9","type":"file","name":"/juice-shop/node_modules/for-own/package.json","hashes":[{"alg":"SHA-1","content":"9e3f16c5c1c13709aca01bc598b74d6ebb48d447"},{"alg":"SHA-256","content":"2a10071296eaf81bef9f031ef4bacbf7a9d38cc3d262486a17e266801c105921"}]},{"bom-ref":"78003a045778c045","type":"file","name":"/juice-shop/node_modules/foreachasync/package.json","hashes":[{"alg":"SHA-1","content":"f26165388b351226f15a9af7698ff5f7b9741e0f"},{"alg":"SHA-256","content":"5ea65195de8e3e84b0d005f186188ef895d92164b5e09f284e8697e7300221ff"}]},{"bom-ref":"f2edfb4bcd8e1c80","type":"file","name":"/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json","hashes":[{"alg":"SHA-1","content":"7ed47a76d7f1a65c0920cbf3d9f09c4adb9cc961"},{"alg":"SHA-256","content":"cd1c6cfa95782e432dd2affaa88c3a6dda7f46c8088d91f3acc0fba79dce5075"}]},{"bom-ref":"11317563381be166","type":"file","name":"/juice-shop/node_modules/foreground-child/package.json","hashes":[{"alg":"SHA-1","content":"ca2af14071df0e6084e5797f9fbcf179d51f9e5d"},{"alg":"SHA-256","content":"434959cc3a188aa891e21bc23f5684421425722faf2dec45b7cff2ca2934bd6a"}]},{"bom-ref":"f10cbd4039984dd2","type":"file","name":"/juice-shop/node_modules/formatio/package.json","hashes":[{"alg":"SHA-1","content":"b9afa684b10ac9ab941df9acf60f98c05570cce0"},{"alg":"SHA-256","content":"31149b0b03984237fded7806838e5f03242706b775d5031ab4a4a00b958851f2"}]},{"bom-ref":"41b2858b3a1ab0c7","type":"file","name":"/juice-shop/node_modules/forwarded/package.json","hashes":[{"alg":"SHA-1","content":"5d558cad52024d41373ae030c0d7ff67e8dfd7fe"},{"alg":"SHA-256","content":"550a78f64b6a76bc353d6a10152af5750613d0d910f8478943176c1a6196158a"}]},{"bom-ref":"c6772970d17bee9f","type":"file","name":"/juice-shop/node_modules/fragment-cache/package.json","hashes":[{"alg":"SHA-1","content":"ff5564883bb7cadf0e6066828739b3f4ae29adcd"},{"alg":"SHA-256","content":"6da5e4d4eca6ea544944bf3851f68fb948cf68d9e86910ec7612d0b01a748d89"}]},{"bom-ref":"03d224976d264e8c","type":"file","name":"/juice-shop/node_modules/fresh/package.json","hashes":[{"alg":"SHA-1","content":"6d90f7658279184066c5ee790cfa3dde6921951b"},{"alg":"SHA-256","content":"65f8ebd91560a3a6143f06bd9066d337bcf5f0c53e4a5329b98894f24eefb8b1"}]},{"bom-ref":"fdfeb9d4e72bd2fc","type":"file","name":"/juice-shop/node_modules/from2/package.json","hashes":[{"alg":"SHA-1","content":"9be6ddd4214e1de4ee7027c4ea14ff38571d62ed"},{"alg":"SHA-256","content":"df32d5ef7cad54b2d82a468b91e81e657fb132ce6698f5fe308947eba083a5e7"}]},{"bom-ref":"d55ca1933ce0e0b5","type":"file","name":"/juice-shop/node_modules/fs-constants/package.json","hashes":[{"alg":"SHA-1","content":"554513fbd310c245ec547539af3c2326f5d38bda"},{"alg":"SHA-256","content":"9cefec768b4f8c52591b840367d077a46a5a2b72ea2778dcf037afd96b234671"}]},{"bom-ref":"8f008db7463217db","type":"file","name":"/juice-shop/node_modules/fs-extra/package.json","hashes":[{"alg":"SHA-1","content":"dd47b6994e49f103b9c06ef05a5ef7fc210135a6"},{"alg":"SHA-256","content":"528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96"}]},{"bom-ref":"bb2c6ebc82715cf0","type":"file","name":"/juice-shop/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"2e472ead48322dd560133d10f39db20ee5e3fae1"},{"alg":"SHA-256","content":"e90117e65341117ce56ab6aaa8b59291210601f69c63996fbe446a9a30237fc6"}]},{"bom-ref":"56679740cc45993e","type":"file","name":"/juice-shop/node_modules/fs.realpath/package.json","hashes":[{"alg":"SHA-1","content":"2ec89eb99a2117211b3879fa1bf42a4aac964a32"},{"alg":"SHA-256","content":"2985019b1b3cf5894df9b831816f7b480833931da982489e3a98c346ce7da897"}]},{"bom-ref":"09a63312473beb21","type":"file","name":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"23cea9a46770804c","type":"file","name":"/juice-shop/node_modules/fstream/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"fe804eb966366c9d","type":"file","name":"/juice-shop/node_modules/fstream/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"7798e26164f53944","type":"file","name":"/juice-shop/node_modules/fstream/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"44ed68c9d570bf46fb09d444537a6520b60f77cd"},{"alg":"SHA-256","content":"8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859"}]},{"bom-ref":"cb2767fb25cf1e31","type":"file","name":"/juice-shop/node_modules/fstream/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"d1241a4f102aa0d377e63ee84d58b278677c3435"},{"alg":"SHA-256","content":"3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071"}]},{"bom-ref":"2ac6ee7b97ea243f","type":"file","name":"/juice-shop/node_modules/fstream/package.json","hashes":[{"alg":"SHA-1","content":"acaf9487d855ef39c8c80b58d5ccec1d78ad67a8"},{"alg":"SHA-256","content":"167ac6b41593c409b18eea3aeb4272a2e33168404ac605a39d025eeb1b7f0675"}]},{"bom-ref":"f27965c2c279b56d","type":"file","name":"/juice-shop/node_modules/function-bind/package.json","hashes":[{"alg":"SHA-1","content":"1fdcd92c6ad33cfab1c556504198e29a38759a7c"},{"alg":"SHA-256","content":"edb1c4faf4148e6e3d74ed8dbac1a1dc359a647ff4207aad4851396dc7a3559a"}]},{"bom-ref":"04e85a17aaaa2855","type":"file","name":"/juice-shop/node_modules/functions-have-names/package.json","hashes":[{"alg":"SHA-1","content":"e2328af43e01e155fde631bd72d8a7800289d67b"},{"alg":"SHA-256","content":"b821fe786f7afa6f8b2090ddbc053717528314ed39bdbff0e283a0b0103afee5"}]},{"bom-ref":"73f63ed71976f7a5","type":"file","name":"/juice-shop/node_modules/fuzzball/package.json","hashes":[{"alg":"SHA-1","content":"1a984d2076396995199c53e1a6e6efa8561eaefe"},{"alg":"SHA-256","content":"1c589c9ab5864dc0408c532ddf400fe32f7d0a820fd4448e09affcc5ccd8726f"}]},{"bom-ref":"f81ee62da45fdee6","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"e524c9686f08be87","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"d73a908990051ad245c6de40672de507997f8cf1"},{"alg":"SHA-256","content":"8bab82161f70f70214df34fdf7c1cdfcef69d9aea8e9a56a575991a5ed7d905e"}]},{"bom-ref":"5bd8814cb6f88ba1","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"0a17570915e73311d0800c28660e70971f5bff57"},{"alg":"SHA-256","content":"d33f936e64b142b548af5923f28d0e3bf1bc8cac3dca174bc0d1f8d068e91868"}]},{"bom-ref":"0d09eed2ab95e87b","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c9e0a8f6be8feff9265983acd92a0e76e12888c3"},{"alg":"SHA-256","content":"60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"}]},{"bom-ref":"33a0a71ab83a6bd7","type":"file","name":"/juice-shop/node_modules/gauge/package.json","hashes":[{"alg":"SHA-1","content":"35539d2558f25a9c424168ea7396c72433795656"},{"alg":"SHA-256","content":"df591d77a6915f63b1930765f13d437c7d075024a794ccc608de1b0d3544da86"}]},{"bom-ref":"960f89df90932495","type":"file","name":"/juice-shop/node_modules/geojson-utils/package.json","hashes":[{"alg":"SHA-1","content":"d9f6a7f819508087eeee64a0a125a76eaea897b6"},{"alg":"SHA-256","content":"4c3a2f48a5d486a8339f987ec4fb672be0c6e8d0baf382fbcf7d77dc4f635bc0"}]},{"bom-ref":"71aebc01324d077a","type":"file","name":"/juice-shop/node_modules/get-caller-file/package.json","hashes":[{"alg":"SHA-1","content":"89c75b65b2c80b295b9544b2c99086a517380f86"},{"alg":"SHA-256","content":"680a080d2885c05bc51dde429c80784bfb248ca3ef3685438079c5015721e2ae"}]},{"bom-ref":"6b437c77b761421c","type":"file","name":"/juice-shop/node_modules/get-intrinsic/package.json","hashes":[{"alg":"SHA-1","content":"43046e9d01abc17bd97dcfc2dd8fa25bf8f8619c"},{"alg":"SHA-256","content":"45b14763baacc59b0fd7b39e3ad983d5d2aaf7f5ed682f2fce9edb469826c999"}]},{"bom-ref":"f0815951ef98a4e2","type":"file","name":"/juice-shop/node_modules/get-proto/package.json","hashes":[{"alg":"SHA-1","content":"6dbd8c5f598b42b9445a7958c5749122e09158d4"},{"alg":"SHA-256","content":"73839e012ac7134a632c9d9fc6bdb700ac9ab5553cce39eb789ba2b65663e734"}]},{"bom-ref":"b2acd5fdd5c1e88a","type":"file","name":"/juice-shop/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"ecf5eff5c593b997a40265bad859940565f1cf22"},{"alg":"SHA-256","content":"34078f73f1cd1b680486d29881da4a4ab72aae9e8f39ef097e3bfd6c7ce2c88c"}]},{"bom-ref":"49469c27bccddf8d","type":"file","name":"/juice-shop/node_modules/get-value/package.json","hashes":[{"alg":"SHA-1","content":"2ea10cadb33b22d98d44e1dbbdd76140a66b009e"},{"alg":"SHA-256","content":"7d8f5eef1a7a47aa48adcd074edeefd2a0cd6ea2ceacc6e85772a3c42fb28a5f"}]},{"bom-ref":"ca4b5fa1746abcdd","type":"file","name":"/juice-shop/node_modules/getobject/package.json","hashes":[{"alg":"SHA-1","content":"36da365b15fcfbe8dc2db30ab127d2f153c85c72"},{"alg":"SHA-256","content":"5cceaa22701866be935d5fc0e14bbcfa13ebe30b756932fc918827a81c56b33b"}]},{"bom-ref":"877cf6fe021512de","type":"file","name":"/juice-shop/node_modules/github-from-package/example/package.json","hashes":[{"alg":"SHA-1","content":"34adfc587fde9ec7027c12386651c2b8d592646a"},{"alg":"SHA-256","content":"1b0a33ff4aad344b3d09605b854a4b5bcf1b79bef1dc821fc32d206ba7cc0cf8"}]},{"bom-ref":"304f26c17357c41d","type":"file","name":"/juice-shop/node_modules/github-from-package/package.json","hashes":[{"alg":"SHA-1","content":"72eb87470bfd738cfbaa08fdf06ec28b0c7f3775"},{"alg":"SHA-256","content":"67742aa2b856e3523c2f89132e41cc5026c49ffe7df58bd3ea906caaa217bd79"}]},{"bom-ref":"3bde1d2c77490d0d","type":"file","name":"/juice-shop/node_modules/glob/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"fad71756ee05319a797b6ec51669df8e01e76379"},{"alg":"SHA-256","content":"a10ab8ae3e75bfc4a70332c40d2a138ab1314e040edb84475610087206605e53"}]},{"bom-ref":"da0825984f5b143f","type":"file","name":"/juice-shop/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"fd815b4c5b195a178a7d55053a39c28202d6ce7c"},{"alg":"SHA-256","content":"16ee102fb72733130ec44c4636016d5b18c3039241b1be8f773e95427dac5131"}]},{"bom-ref":"0262519df784a195","type":"file","name":"/juice-shop/node_modules/global-modules/package.json","hashes":[{"alg":"SHA-1","content":"7eb8f441c47a7147a88af25e4b180c0b19c0756f"},{"alg":"SHA-256","content":"d91d8ab2abee8c24045e372400accd67b4212357d592ee99eb41567bd422047a"}]},{"bom-ref":"e753a4cd4054059f","type":"file","name":"/juice-shop/node_modules/global-prefix/node_modules/ini/package.json","hashes":[{"alg":"SHA-1","content":"14b52ea8911e4e9f89acb4d876e87755e54529e2"},{"alg":"SHA-256","content":"8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"}]},{"bom-ref":"d8daecf74bc02a13","type":"file","name":"/juice-shop/node_modules/global-prefix/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"6aa908dedff8d74053157a8a908db304252c8549"},{"alg":"SHA-256","content":"88269288cdfae9bec4232d6b4fdbb4f52ad5db216219d6d701b02a2fde14162a"}]},{"bom-ref":"a4aa8902ccfd9241","type":"file","name":"/juice-shop/node_modules/global-prefix/package.json","hashes":[{"alg":"SHA-1","content":"b819052d9650e51974f6e39f57bf125175b9860d"},{"alg":"SHA-256","content":"a58e288808740745879d771ed20d34c889572a6822709b545d661fa9a5555db2"}]},{"bom-ref":"c74999062aea606e","type":"file","name":"/juice-shop/node_modules/gopd/package.json","hashes":[{"alg":"SHA-1","content":"682b4b77bd041501546a485298d662b1a54de702"},{"alg":"SHA-256","content":"33ace32dc861f6da9d1fd9d0a44c66e8c6ff3b13358d070683c1c2978ff5f19f"}]},{"bom-ref":"1bd5b562c3c43717","type":"file","name":"/juice-shop/node_modules/got/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"000b39656a452f8e4ddcedb94597a6970c3f456a"},{"alg":"SHA-256","content":"08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"}]},{"bom-ref":"e140283dccf0422e","type":"file","name":"/juice-shop/node_modules/got/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"},{"alg":"SHA-256","content":"7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"}]},{"bom-ref":"f93970a4d85448a1","type":"file","name":"/juice-shop/node_modules/got/package.json","hashes":[{"alg":"SHA-1","content":"1f84f9ede8d91e4fdaede119e1cb6dfac7162b92"},{"alg":"SHA-256","content":"37caee779790d68f90ed8b63f3f9658da3c70ddc7cf6d282a87779196b7c42bc"}]},{"bom-ref":"a1bc20eaa9f4e697","type":"file","name":"/juice-shop/node_modules/graceful-fs/package.json","hashes":[{"alg":"SHA-1","content":"21a733b3f7e2ee153041de90fb03d5596934f346"},{"alg":"SHA-256","content":"5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181"}]},{"bom-ref":"4859ee0d5863c192","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"d48082883f64464b","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"27a33893272864564ee2ba8b810d0f2bf4e30065"},{"alg":"SHA-256","content":"787f6262b31a31ec91978ac4488de398a4e780a8ce1e3a6fbbe17e3bdd105672"}]},{"bom-ref":"26da4c0b0e785275","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"a1764894981b73b8c03d267fc59b5c2a8f46a25d"},{"alg":"SHA-256","content":"afb4ae5465de455d491b9ec2caac993f6c52b2c2b00d9817ef33077f6054316a"}]},{"bom-ref":"f9a03265ad38f095","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json","hashes":[{"alg":"SHA-1","content":"d4fe454f58534e1ef4b26586cce7560d0a0c1593"},{"alg":"SHA-256","content":"fb57051a060153501ecc4f0f405f694e4b8e354ff5a5e4a0e33ee47bdeca884f"}]},{"bom-ref":"e4f5f253e97b7677","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c9e0a8f6be8feff9265983acd92a0e76e12888c3"},{"alg":"SHA-256","content":"60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"}]},{"bom-ref":"99a2ceb3c79c9b67","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"e492fe816d79b77deea6b08e79f1dd725e31968b"},{"alg":"SHA-256","content":"9b672598114d476cd159f22a3048f92feb9e2a26e3c0a5f2b097b00db96f7360"}]},{"bom-ref":"a829e8d643555e45","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/package.json","hashes":[{"alg":"SHA-1","content":"74b3b66c0b882c2f6ad989971446ef680e558834"},{"alg":"SHA-256","content":"d75fe9bb9ea6398b82febadba5e93001a8be6a2f73d2ab77fd7783cf981ec19b"}]},{"bom-ref":"ccdcded1619f68e1","type":"file","name":"/juice-shop/node_modules/grunt-known-options/package.json","hashes":[{"alg":"SHA-1","content":"2f23630667ac2a43221ce73913f2a100444c9d3b"},{"alg":"SHA-256","content":"68aae8e3a01b7a135031a78b5f4f866a3613ae1d2e733d343d007d420f960412"}]},{"bom-ref":"69f174385bcb90f1","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"a53045a174c02417","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"651223fdfe370f7eeea056c8bb29f6303cabb3c1"},{"alg":"SHA-256","content":"9cd907d34a45cb73b5c8a459d5602a36ccd456794665c529a3a5b0f02e196f26"}]},{"bom-ref":"09356b2efb4dd9ae","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"1ddcdeb6fe6f9c1c","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"a51878a9ebd695ed","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json","hashes":[{"alg":"SHA-1","content":"688a5d7d9b58962757fdb849c4876e2ed534e12b"},{"alg":"SHA-256","content":"3fef4b52efbeabeadfffd5994e90b1025eb24263286e34170675956637d368b1"}]},{"bom-ref":"f8a3cd5273dfa3a2","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"3c4abe10bd7383f277a3eac3ce43359fd92ad32e"},{"alg":"SHA-256","content":"d410a772f9f64b224482ec13815a4bbf1837c533e1be04b3687755c48b2efa1f"}]},{"bom-ref":"d5ea2a5b98f2b948","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/package.json","hashes":[{"alg":"SHA-1","content":"2a2f6ee1f3336f86f2f68907787dcdce184e8c9c"},{"alg":"SHA-256","content":"a106e88549c9230be79eeb617d9f6d4223063ebca1b027d27fbd8875ee6abf99"}]},{"bom-ref":"9b24eabcd58f755a","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","hashes":[{"alg":"SHA-1","content":"1cd1c78691f7985f2a1b21d18698fcadcedef856"},{"alg":"SHA-256","content":"59591b6842c5175579cdb52ffb10c2cbda4bf4129755daa3bdc5d36059a65c24"}]},{"bom-ref":"7aa1c1bcc8d2b4a9","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log/package.json","hashes":[{"alg":"SHA-1","content":"0db444d99fc9cf981b2656f8748a6e7a8ba31606"},{"alg":"SHA-256","content":"249e01ebcd6fed7ae59de103831c735a979fc5631c1709b1d4933eff3422c72a"}]},{"bom-ref":"2912d936f8f0f6ae","type":"file","name":"/juice-shop/node_modules/grunt-legacy-util/package.json","hashes":[{"alg":"SHA-1","content":"8156ef848e5845b4fcddee2dea7fa88dc224710c"},{"alg":"SHA-256","content":"1360dbe45d0140c74e0846c66739210f87d1c0b2ec5b6bf817e3bb93226520bc"}]},{"bom-ref":"817a5fa6062509fa","type":"file","name":"/juice-shop/node_modules/grunt-replace-json/package.json","hashes":[{"alg":"SHA-1","content":"e3809536e511d1e2d35f1b474ecf83f0525a5488"},{"alg":"SHA-256","content":"48b4ef2e97791b7f824cf0d382e16ca0b3ab6b8f1a8554a17d214edfad8159e6"}]},{"bom-ref":"60cf08af4f47b8a5","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"505252554527a1cb","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/braces/package.json","hashes":[{"alg":"SHA-1","content":"124d44a7e3c5fd1b2370ff51929158c7c39c46c2"},{"alg":"SHA-256","content":"56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7"}]},{"bom-ref":"3763f8543021a4a1","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json","hashes":[{"alg":"SHA-1","content":"7e98b1c611c82c90901f8e7482d39e23a940976b"},{"alg":"SHA-256","content":"2d91894dee5ab72977f359cbce89ab9161675cd0db8cb56ad6a93fec9a33fa59"}]},{"bom-ref":"f161621839177c85","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/fill-range/package.json","hashes":[{"alg":"SHA-1","content":"1682e8ba503f3836b55fc5763adfd0605f0d1b6a"},{"alg":"SHA-256","content":"87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735"}]},{"bom-ref":"8aa25d7364880c93","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/findup-sync/package.json","hashes":[{"alg":"SHA-1","content":"f68cd5a7999712c9082df2201062980e9b28fa16"},{"alg":"SHA-256","content":"10a04ec68f05ab4a6cc47917431544ee7cfe7b760065913a3c65cc7b743b6857"}]},{"bom-ref":"e1e31a589be4f50a","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"331a7d4bcec851ac4e7c1cc6624117fcab2be3af"},{"alg":"SHA-256","content":"3c5a47bd1991588b045fbb54fb4def5d52d9bbf1a8abfca39d370eb2274f6733"}]},{"bom-ref":"0b8890e0ddb1ecca","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/grunt-cli/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"332100289a0b019f231d6066376efdfb85345547"},{"alg":"SHA-256","content":"d85eee455ed9a79caa4a91d52e89857e576d30eefc3c826f0bf4dfbe067d0679"}]},{"bom-ref":"099dabb364f127f7","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/grunt-cli/package.json","hashes":[{"alg":"SHA-1","content":"cb9d5d04ba929e5054fa494cee0e52c7372078fe"},{"alg":"SHA-256","content":"d408e070cd5c433915b65ae70d667ebb51eb74ecb13e34c0858a1d5c04e229f3"}]},{"bom-ref":"454eed5ec40e0fbc","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a3d90badf75db503f5dd3ff3fb76d120d1424978"},{"alg":"SHA-256","content":"3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"}]},{"bom-ref":"074ceeba18763321","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/is-number/package.json","hashes":[{"alg":"SHA-1","content":"2bd4ba6c07c12d2b7af0035e57b46cbb7e133477"},{"alg":"SHA-256","content":"51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620"}]},{"bom-ref":"fa070df5cce85cf1","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/micromatch/package.json","hashes":[{"alg":"SHA-1","content":"0ae8e81288771f32a5d752c97255f75cb2f48524"},{"alg":"SHA-256","content":"94dbc881c0329813f2481f35fcfa725a2285d45926d33e9b9b8b80b28487752b"}]},{"bom-ref":"f9f3e0957915c707","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"78693145587c276164e2e2b64ea9dba66d0ec367"},{"alg":"SHA-256","content":"1f7f4e0b1d038cf728f9e4ab00aaf0a172c666ba594dfcb6fdbec36954280c0f"}]},{"bom-ref":"8700c239e21a8b36","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/to-regex-range/package.json","hashes":[{"alg":"SHA-1","content":"c16a607925055788aae94f1123fa0d769af161bf"},{"alg":"SHA-256","content":"766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec"}]},{"bom-ref":"f2498ff44159d7b1","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/v8flags/package.json","hashes":[{"alg":"SHA-1","content":"e00fe16f35d58bc6a7f8693f8c828f5e3b671763"},{"alg":"SHA-256","content":"65d2eaabe28338b79bee4f0e46b01a21f7c7028cc6a350f4648cc81d50f1c36c"}]},{"bom-ref":"6f2bd0ac9d80e06f","type":"file","name":"/juice-shop/node_modules/grunt/package.json","hashes":[{"alg":"SHA-1","content":"8bca31c6e52170bb658fd0bdf71ad586bfd54b8e"},{"alg":"SHA-256","content":"ab664962ea7cd2aa35def4ae80020ee9493adbbb25c0f6c796943c8a4fe33a7d"}]},{"bom-ref":"dd6c76f3788e82bb","type":"file","name":"/juice-shop/node_modules/handlebars/node_modules/wordwrap/package.json","hashes":[{"alg":"SHA-1","content":"91c29dfbc287ca5f45c833a5ab47bd471f344ad2"},{"alg":"SHA-256","content":"4346d2850babb5ed5b1685510e007adc142384e6468613f32f460db2cfee1297"}]},{"bom-ref":"31db02193a4b0498","type":"file","name":"/juice-shop/node_modules/handlebars/package.json","hashes":[{"alg":"SHA-1","content":"e80caf413943645211f14c5642f253759b531da1"},{"alg":"SHA-256","content":"cca288bf4b41d4f09da79759b2d5c4212d576307018dad839dc3ce5c708521a0"}]},{"bom-ref":"8162829b33affab6","type":"file","name":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"d92ffc3f3b5918ab","type":"file","name":"/juice-shop/node_modules/has-ansi/package.json","hashes":[{"alg":"SHA-1","content":"6d2a70595a6482fc03d6615decd51e24073d5bc0"},{"alg":"SHA-256","content":"9ef1a1efe1471d262ecb5f55215109d051a1ef556e79fdd8fb31300f84d8ec5a"}]},{"bom-ref":"0aed9f89d3be5dbc","type":"file","name":"/juice-shop/node_modules/has-bigints/package.json","hashes":[{"alg":"SHA-1","content":"ac647a2de47db6928f257a8a1e3b4274c198e083"},{"alg":"SHA-256","content":"b811e76ed3775f79abd7ea695c4407d800678a71703762f50bdde6f1f03098d4"}]},{"bom-ref":"6ef1c5048493828d","type":"file","name":"/juice-shop/node_modules/has-flag/package.json","hashes":[{"alg":"SHA-1","content":"0a61b7395724eb79396b1cef110a74565de5ea88"},{"alg":"SHA-256","content":"5f786f6d16a53e7171fda89adc83bbd9c07fc17fb9de7ea78431283972593984"}]},{"bom-ref":"f6c487d9cfd502c6","type":"file","name":"/juice-shop/node_modules/has-property-descriptors/package.json","hashes":[{"alg":"SHA-1","content":"a3e6c1869a4e2f16574906fea431ce7a4bc1a022"},{"alg":"SHA-256","content":"59a91e2cf32e4303d248708999a9ec3afd8e3649a87ba7abcf2177dc1984e3d5"}]},{"bom-ref":"e5db335525eae6f3","type":"file","name":"/juice-shop/node_modules/has-symbol-support-x/package.json","hashes":[{"alg":"SHA-1","content":"2b9c85c4a1a16c5ebb307019bfadddbebba06a72"},{"alg":"SHA-256","content":"55cc66bb9aa16da08a9e70e21d258108b9b510b2fe39310959c54711b78dcba0"}]},{"bom-ref":"11382e535537929f","type":"file","name":"/juice-shop/node_modules/has-symbols/package.json","hashes":[{"alg":"SHA-1","content":"8e49a565463e9e23d9c32d8ccc18009321af19bf"},{"alg":"SHA-256","content":"5190268c0e3308d7446d1f7c036238f329f786938453e6017cb90980b3612e7a"}]},{"bom-ref":"83fee66c515e8714","type":"file","name":"/juice-shop/node_modules/has-to-string-tag-x/package.json","hashes":[{"alg":"SHA-1","content":"efa6ac5d32b7cf37e677de7c59bec08dfa68aefb"},{"alg":"SHA-256","content":"cfe639d187fa85a2ae2f8c0b5490ed8d26cee136ec7a18dbec93442805bb9172"}]},{"bom-ref":"20be5400777141d2","type":"file","name":"/juice-shop/node_modules/has-tostringtag/package.json","hashes":[{"alg":"SHA-1","content":"75aeb5fec79dabebcda93a54b809a899fac1e214"},{"alg":"SHA-256","content":"30ab773c52021a6b800ea48f251abeeb1f6e378300f819204dfbb38d6e43f3ad"}]},{"bom-ref":"d57a25d964605fad","type":"file","name":"/juice-shop/node_modules/has-unicode/package.json","hashes":[{"alg":"SHA-1","content":"f25b286b591e5aa36e855957980e27569961d706"},{"alg":"SHA-256","content":"f106bbff8f1aed94ef54031d8a4e5ebd0275b3fefc15361a96150d9029a9d510"}]},{"bom-ref":"83ea2f6967f6b54d","type":"file","name":"/juice-shop/node_modules/has-value/package.json","hashes":[{"alg":"SHA-1","content":"917d3f314ae689839b0fa5481c3d66f787a01865"},{"alg":"SHA-256","content":"4e96fe8f20a39776d1470c61f045fc8a298ea505ba39167373d924ac2e22eba2"}]},{"bom-ref":"07c4229b83f45d3e","type":"file","name":"/juice-shop/node_modules/has-values/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"5ae1e06a50abe22e7c61a05c4027016319c415d5"},{"alg":"SHA-256","content":"55b4ec530b8370e10e52e8f917fd26c851c8b752f6cc01dac7a2285988772391"}]},{"bom-ref":"f159675bd710851c","type":"file","name":"/juice-shop/node_modules/has-values/package.json","hashes":[{"alg":"SHA-1","content":"dcf1056ce7d8ad6410e843c638aece64bc6b33d9"},{"alg":"SHA-256","content":"b0f03ba25ac08af249163b7459e953292a70168ab38ca9b488fa485f79f2f695"}]},{"bom-ref":"b566bf032c07ddbf","type":"file","name":"/juice-shop/node_modules/hashids/esm/package.json","hashes":[{"alg":"SHA-1","content":"dbd2cf3b837c1ed989df0bd7c68e7e3afc422110"},{"alg":"SHA-256","content":"dc5dc8f11f4b9b6d3fce9aff5d9ca80a33a8fae0f3dbc936ca46c34544b9e193"}]},{"bom-ref":"6d9bb966efd92a28","type":"file","name":"/juice-shop/node_modules/hashids/package.json","hashes":[{"alg":"SHA-1","content":"f80c92184acd8d5f637070d27846932cbed990ae"},{"alg":"SHA-256","content":"a259d571296946d349a9b2f60dccd26e3a212b122799b26e422c5c89989e42c5"}]},{"bom-ref":"0b9d0c68be66f539","type":"file","name":"/juice-shop/node_modules/hasown/package.json","hashes":[{"alg":"SHA-1","content":"2aab9e964e19edf340c8e8978d9bd7eacd6bfc4e"},{"alg":"SHA-256","content":"e96d24e4dcec86a4f769f41174b1cc79f70b4ab77b83aac4dfe646242bf76abb"}]},{"bom-ref":"517b762575ce1332","type":"file","name":"/juice-shop/node_modules/hbs/package.json","hashes":[{"alg":"SHA-1","content":"bdbd18d598642cb1b9082680fdbd028d26588ccb"},{"alg":"SHA-256","content":"9296da119987c7928bd756b0df760072c08b6b29318039f1d038c43900005d30"}]},{"bom-ref":"08b05b060bb9f0fc","type":"file","name":"/juice-shop/node_modules/heap/package.json","hashes":[{"alg":"SHA-1","content":"8e6e9b522de337a1ac533d69931aa93f29684e72"},{"alg":"SHA-256","content":"3dc357d6c978adbabf22c9ddebefe394815ba558123e4f9b824caa05269fdd92"}]},{"bom-ref":"98c4625dabd82ecb","type":"file","name":"/juice-shop/node_modules/helmet/package.json","hashes":[{"alg":"SHA-1","content":"f45fd39929e3c9ca97a65bbcaf3d1567920807a7"},{"alg":"SHA-256","content":"a4f9450eb1a4a5cf7615b6e6869daf0e15cb93b543c5468ccdc17bfb4b01060f"}]},{"bom-ref":"2333042e67326903","type":"file","name":"/juice-shop/node_modules/hoister/package.json","hashes":[{"alg":"SHA-1","content":"cf8c5433ce82de1669c33ced53ca7921137caaf7"},{"alg":"SHA-256","content":"f933fea588f1f4793a42af6167cb2eda0e8870482e63e578117b1bbd9cca40ee"}]},{"bom-ref":"e6e431e939388033","type":"file","name":"/juice-shop/node_modules/homedir-polyfill/package.json","hashes":[{"alg":"SHA-1","content":"90510f253e4efff50c5b4abb632aabb3ece8a9ca"},{"alg":"SHA-256","content":"b841920660c6b6a524d764904a766cc59c401ebaa523b12a3fd429f7774d7159"}]},{"bom-ref":"9284cd45124a157f","type":"file","name":"/juice-shop/node_modules/hooker/package.json","hashes":[{"alg":"SHA-1","content":"67494ba80a66767922c1d09ad788b0942f13e20f"},{"alg":"SHA-256","content":"6e06c9d7c91cf44224f8d3032172ac0b653728eee2e020ea6e0c6ab95d1f00de"}]},{"bom-ref":"76386419c8c547ab","type":"file","name":"/juice-shop/node_modules/html-entities/package.json","hashes":[{"alg":"SHA-1","content":"bc9154a0b80955c1b19d667648d70cc2624d64e6"},{"alg":"SHA-256","content":"26f25169d8e5b02059de306c648403c215fc5e26251ad6be2717b5731bfb2ee8"}]},{"bom-ref":"912b7321ac3fe20f","type":"file","name":"/juice-shop/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"5d4b738e14b91ea4619d48058717be58524ebed7"},{"alg":"SHA-256","content":"5b7911fc41261e41b08d55a9586b8fca73b22d61496c39d46be353033d2867f3"}]},{"bom-ref":"a3f7eb25a5bd5a14","type":"file","name":"/juice-shop/node_modules/http-errors/package.json","hashes":[{"alg":"SHA-1","content":"bcb1768525f7f5e1af75c272867bfed66dd983c7"},{"alg":"SHA-256","content":"dda88273810ec9e624bf08d4815cb6aa4007135bf98ce11706d2e1b2f2a6690a"}]},{"bom-ref":"a613ec5b8f2c615c","type":"file","name":"/juice-shop/node_modules/http-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"46c1370c1b73ca9e8097772507030fc65bf0a133"},{"alg":"SHA-256","content":"7c6265385a57a724d42f1c365d3af5b3e61cfec4e5007c67a1719de939c74072"}]},{"bom-ref":"9df82fde368d6f1e","type":"file","name":"/juice-shop/node_modules/https-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"8c0a375492fc2b2fc37efae92d78ddd0b07de53a"},{"alg":"SHA-256","content":"d41d9127cbed43df8e2d404bfaf41361942a8afeb82eb57ccf8515e04eb33d1d"}]},{"bom-ref":"d6aefb8f6690056f","type":"file","name":"/juice-shop/node_modules/humanize-ms/package.json","hashes":[{"alg":"SHA-1","content":"e6e3f6368e65173263dd3f9fa806de8e74c54217"},{"alg":"SHA-256","content":"b5cf746b84d4d4afcda0f9fd59c2120fed5e7f7be1ec52293879a8c13f30eced"}]},{"bom-ref":"a3a0d42177986935","type":"file","name":"/juice-shop/node_modules/i18n/package.json","hashes":[{"alg":"SHA-1","content":"0893936ce514e10f9e39f4173ec28715250a6baf"},{"alg":"SHA-256","content":"ea677f104de62c409c47338fbda0b12a31c074de2aec35a134ab07191f0f49e9"}]},{"bom-ref":"eaed3c49d6260cc9","type":"file","name":"/juice-shop/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a1e76edb6428e44345ed3851ff7af5d850434cf5"},{"alg":"SHA-256","content":"6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384"}]},{"bom-ref":"2001a93a0958edd9","type":"file","name":"/juice-shop/node_modules/ieee754/package.json","hashes":[{"alg":"SHA-1","content":"19b82f401d4e2ef5db8528a35b2e12d1a2630d65"},{"alg":"SHA-256","content":"a8004b9c8dffe2e1b01a058ecf968a5d50beabcabc43cc98c655184ba6afc050"}]},{"bom-ref":"307b441d01d1b445","type":"file","name":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"ffe100481c4a5d0d","type":"file","name":"/juice-shop/node_modules/ignore-walk/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"787ae033ec057491","type":"file","name":"/juice-shop/node_modules/ignore-walk/package.json","hashes":[{"alg":"SHA-1","content":"90dc22d9d2ed240a66e727ea9b8931ebcb8ae1eb"},{"alg":"SHA-256","content":"e7ebec436cd93ccc3827d6a2b4d4e30da28d063604a4e4640cdfe9116b82a9b3"}]},{"bom-ref":"9707bd4e56d25838","type":"file","name":"/juice-shop/node_modules/iltorb/package.json","hashes":[{"alg":"SHA-1","content":"6567bb730f22b22008933aee31fa214b59532e2f"},{"alg":"SHA-256","content":"8770f6e48b68a8c6870ee796c921140bd48879772b1917bd9bc3b5b7f9f47e28"}]},{"bom-ref":"612ff1ca264b8c09","type":"file","name":"/juice-shop/node_modules/imurmurhash/package.json","hashes":[{"alg":"SHA-1","content":"a28f2b413385af4188c4fc0ad1e0c38c2cd03cf4"},{"alg":"SHA-256","content":"aa3b07e7fa3d63aa96e401c3842b8cca1dd3247954baf92377094766e903c185"}]},{"bom-ref":"24909f4294dc173f","type":"file","name":"/juice-shop/node_modules/indent-string/package.json","hashes":[{"alg":"SHA-1","content":"8e67654392f062ebc5cd54e0f7d06427700e73b9"},{"alg":"SHA-256","content":"5b15d951490ea56f6309d9203e1c3cfd036ad1c67ca1c7f372cbfdfbf3faecb7"}]},{"bom-ref":"98310c6708cea39f","type":"file","name":"/juice-shop/node_modules/infer-owner/package.json","hashes":[{"alg":"SHA-1","content":"520dabd4fd509ef15c618b6a8dac1f070f82a4dc"},{"alg":"SHA-256","content":"84793570c7d0565481a1a713f9430d01987103e2e7d6c3121b1e6054eec1f625"}]},{"bom-ref":"93414e550f310c84","type":"file","name":"/juice-shop/node_modules/inflection/package.json","hashes":[{"alg":"SHA-1","content":"a346ba8ba91330083e37d70e74f0ac7300a07797"},{"alg":"SHA-256","content":"658ab85279b559d1126b7fb7ec389a22eefdbb186378c672ccb1524b51fc6986"}]},{"bom-ref":"99f8bc1cd1196c3f","type":"file","name":"/juice-shop/node_modules/inflight/package.json","hashes":[{"alg":"SHA-1","content":"40e50820beed8bfee8ce186d5be617a8c213e7e1"},{"alg":"SHA-256","content":"5f2489e13f73e9ebad999134fae8a591f6d8b58e8341ec8e3b33397c4d1ef817"}]},{"bom-ref":"443caf05eed40574","type":"file","name":"/juice-shop/node_modules/inherits/package.json","hashes":[{"alg":"SHA-1","content":"62b11dd736a0047fbd8d2dc0406d2118a549a359"},{"alg":"SHA-256","content":"be645800bc94fd8de29c8ae91690549b316cc437100108aeea7b2f347693cc80"}]},{"bom-ref":"fdfef88e33780a01","type":"file","name":"/juice-shop/node_modules/internal-slot/package.json","hashes":[{"alg":"SHA-1","content":"696536e795e6ff3c47d56b9e644e5e35d132a691"},{"alg":"SHA-256","content":"c75e491911f4ec299ffa5415dd20e914feea1b69ddccea2a58c82b6e4c7a714c"}]},{"bom-ref":"63610978f2e75f6f","type":"file","name":"/juice-shop/node_modules/interpret/package.json","hashes":[{"alg":"SHA-1","content":"40169e9ec112583cdb2c363d627b7a16ea7fe3d1"},{"alg":"SHA-256","content":"b768bb2ae4ceec49a06dadb163165eb2af172baf43288f94e2c2d53b187175f6"}]},{"bom-ref":"f8691a272da8737a","type":"file","name":"/juice-shop/node_modules/into-stream/package.json","hashes":[{"alg":"SHA-1","content":"71a5a430e9790858c3a6c90e6d9d072353ce2e40"},{"alg":"SHA-256","content":"882d4f5836f96d6c6a801aac00c2b928588508ca1d43fbea337602afa6fd607f"}]},{"bom-ref":"3f481dd60b759b20","type":"file","name":"/juice-shop/node_modules/invariant/package.json","hashes":[{"alg":"SHA-1","content":"59f8a398ae23614df8c1d975429934fdf9bc1949"},{"alg":"SHA-256","content":"ef0c08d9f91029e247bb570a04903f3a9bd646c1f2128d29e69ee171794cd2a3"}]},{"bom-ref":"ca6e5326fb93ce80","type":"file","name":"/juice-shop/node_modules/ip-address/package.json","hashes":[{"alg":"SHA-1","content":"c08d23fa891935fb24a5e1a07334197e8974138a"},{"alg":"SHA-256","content":"ef55e88e1a55e286661bb9f54d6f544629d799b28a9e729b839e4ead63e25209"}]},{"bom-ref":"4cf82bfb9d798b15","type":"file","name":"/juice-shop/node_modules/ip/package.json","hashes":[{"alg":"SHA-1","content":"b9b976a06f7e100d53af77c8eef29aefdbb6fe54"},{"alg":"SHA-256","content":"fbb3c09f5eddbff99bc2feb9745b91cc3360098255d58b824bb412cdb598f41b"}]},{"bom-ref":"c6363263f7ef7671","type":"file","name":"/juice-shop/node_modules/ip6/package.json","hashes":[{"alg":"SHA-1","content":"408b81d2a504d9b339370b41546cac5ae7131478"},{"alg":"SHA-256","content":"65ebfaf142aa301b15b10fe5be4aa190341a2d39cfb856e24fd8ce0f83e3b6c9"}]},{"bom-ref":"2205b2cbe6a5f91d","type":"file","name":"/juice-shop/node_modules/ipaddr.js/package.json","hashes":[{"alg":"SHA-1","content":"532be044ce57a9f81fed35f3742767f587cfbc95"},{"alg":"SHA-256","content":"fc1071893728a0e78fa40ce0dbe04c5a1021179fdcb5b229f274e3556d6a87cd"}]},{"bom-ref":"513f07402c6b028e","type":"file","name":"/juice-shop/node_modules/is-absolute/package.json","hashes":[{"alg":"SHA-1","content":"4bb791bb15f2343372fbbce4a46304777cd7704d"},{"alg":"SHA-256","content":"fdd72b01eac6f6d37dae881d90cb127758f9c5053e85c8487d323aac1e45cac0"}]},{"bom-ref":"f874006ff6e25440","type":"file","name":"/juice-shop/node_modules/is-accessor-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"2decfbdde6152eb283952d8447861e52fb81140d"},{"alg":"SHA-256","content":"dcdaa5afe82ff004ca8f29c8ba237c7b6562b19e265241a8bfa3fbd418d653b9"}]},{"bom-ref":"a3246267fdb59a88","type":"file","name":"/juice-shop/node_modules/is-arguments/package.json","hashes":[{"alg":"SHA-1","content":"8c0d7ca0e6fe66cd74d472528d04778eb7cc50d9"},{"alg":"SHA-256","content":"8962afc6bca1e62fc8d6413c1c82b0e060ff51fec9cb1d00d7c6b82337666e52"}]},{"bom-ref":"6b8728ebb3ebd8f3","type":"file","name":"/juice-shop/node_modules/is-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"44fd3e5dfa707791be92aeeecc0fb3533b39bc71"},{"alg":"SHA-256","content":"38a3c4698e3f4f2235481483558a96e67be7e4e90ce5647950da73efd7ccfb1a"}]},{"bom-ref":"c753e5c7fb62e438","type":"file","name":"/juice-shop/node_modules/is-bigint/package.json","hashes":[{"alg":"SHA-1","content":"68ec3664ed0d57b4cbbe598a49fadeef06b82fad"},{"alg":"SHA-256","content":"079916fe1d9e42dd3ed230521911d4ffa718f3bbd7efcc53d4bd8803b0cd11d9"}]},{"bom-ref":"593edeadaef41252","type":"file","name":"/juice-shop/node_modules/is-binary-path/package.json","hashes":[{"alg":"SHA-1","content":"1d072ae15e9958d46909b3f3853dc2b17ca57f19"},{"alg":"SHA-256","content":"35e07770a839325f659cd533abf346934f4544cb6f42ce9bc852abd22999c20c"}]},{"bom-ref":"e12cefaa2c5d8f48","type":"file","name":"/juice-shop/node_modules/is-boolean-object/package.json","hashes":[{"alg":"SHA-1","content":"d8e80fa1a4ea5a6e58e4be826e5496a24df823e1"},{"alg":"SHA-256","content":"908dcc16536fcfa62185c80010d9e92891f41e1d279b337d830d99a8dae9aed5"}]},{"bom-ref":"921c46fdfde35c69","type":"file","name":"/juice-shop/node_modules/is-buffer/package.json","hashes":[{"alg":"SHA-1","content":"2363bf1c5941cf35d7be5fb35b82e6f793d8421d"},{"alg":"SHA-256","content":"c3f4ad9709465baf192e2ee4ae1a113addc1843e044eee520c71eb5fd3c9ec85"}]},{"bom-ref":"1f925a8633a43742","type":"file","name":"/juice-shop/node_modules/is-callable/package.json","hashes":[{"alg":"SHA-1","content":"1f39ab1f57f84f43ff79dda15e9b93d7f138d73d"},{"alg":"SHA-256","content":"0d0981565f03ca488d263c94d038717ec4face8b129b8ff18e792dabae2af755"}]},{"bom-ref":"1fbb081cfaff18ba","type":"file","name":"/juice-shop/node_modules/is-core-module/package.json","hashes":[{"alg":"SHA-1","content":"bc3dd6412950636f30edccd45de49f5ca359e890"},{"alg":"SHA-256","content":"8b333baea62199fce87af28ba70632e093623ae3b8888e86f2dd525f2de0f69d"}]},{"bom-ref":"464f353f2be6fa21","type":"file","name":"/juice-shop/node_modules/is-data-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"4a01e13858798f024ec198383c8f955cebc76d56"},{"alg":"SHA-256","content":"a492c0eddcf9ca4530f07ac2ccae041e6dcf8da24a2275d5a1339c6f1ad653fc"}]},{"bom-ref":"8c3989c92d318f34","type":"file","name":"/juice-shop/node_modules/is-date-object/package.json","hashes":[{"alg":"SHA-1","content":"0fdae008400e5f301759c2465a5776cef0d74193"},{"alg":"SHA-256","content":"224b3f8b6f9564aba91aefa417a925e00f3be92896af5bbeecf1e9e669e05ba5"}]},{"bom-ref":"4342ee0e76ee3f94","type":"file","name":"/juice-shop/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"4ef4f0a4493126bb7855c2999c3f4df0fa25bb8f"},{"alg":"SHA-256","content":"86e085672deef46afe78e640afc550beb0b3e9d103ffb1bacbdbc3787b55f29f"}]},{"bom-ref":"43d43367b570eb4e","type":"file","name":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","hashes":[{"alg":"SHA-1","content":"f1ed049ec2757f4914862b3854b26363806c4859"},{"alg":"SHA-256","content":"dfcd42c47d09aa794214c28476d5b519c157e17d9490eb2c50faee3defd041bc"}]},{"bom-ref":"9eff155a73428d22","type":"file","name":"/juice-shop/node_modules/is-expression/package.json","hashes":[{"alg":"SHA-1","content":"a58f5d6e36c8bede8f377c6ade9bea70208318be"},{"alg":"SHA-256","content":"a87a48e8070af76c07b15557619ffbb6975f093121f5636fe69fa2f7f7d3ee81"}]},{"bom-ref":"8cc3f83f1088287c","type":"file","name":"/juice-shop/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"88d2889532b3a6eae4e6f38adc6ff95edec75264"},{"alg":"SHA-256","content":"56db61dd1d881e3e024e21a7009ac4ae83eb1651c9eb97bd16d20135a042bdfb"}]},{"bom-ref":"50c674871a188aee","type":"file","name":"/juice-shop/node_modules/is-extglob/package.json","hashes":[{"alg":"SHA-1","content":"3f1247dc7f917eba16d9607c17eb9818d2bf43eb"},{"alg":"SHA-256","content":"8031afcd87f448d75ba8a5dd2cde9c68f982a94f406ebae8e5fb7cf6dfdeede2"}]},{"bom-ref":"dfae0a576f9c35ea","type":"file","name":"/juice-shop/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"49dbcba3eb3e3cba5b97bce28eb6194775d23c88"},{"alg":"SHA-256","content":"5b48496ca129073ed44a677b777ea3b91366c8bc228bc75fe858749a78ac1a32"}]},{"bom-ref":"dcde26528217d810","type":"file","name":"/juice-shop/node_modules/is-generator-function/package.json","hashes":[{"alg":"SHA-1","content":"10c85af54c0873444c3936620182fac80e322ebd"},{"alg":"SHA-256","content":"9cc1833690ca649a828ff1f71772c1112562d03a7b85156ab0a8944c685e09b5"}]},{"bom-ref":"631ed29b3a5a65fc","type":"file","name":"/juice-shop/node_modules/is-glob/package.json","hashes":[{"alg":"SHA-1","content":"57a53965f8f746a1f0f29696ad6e770a8beff7e5"},{"alg":"SHA-256","content":"1cce62b80db12fc033d85250b5881b1a288476229abda8e1abd983724befd56f"}]},{"bom-ref":"1725216c4475b922","type":"file","name":"/juice-shop/node_modules/is-lambda/package.json","hashes":[{"alg":"SHA-1","content":"d7d1ac3b9e27615002074f87da8c39e91995ee88"},{"alg":"SHA-256","content":"55c72a97449e2b52a5b763bf6cfa7de3b9603fe2a57074066ddcbf522578c9b6"}]},{"bom-ref":"eb8e3b74c869ff20","type":"file","name":"/juice-shop/node_modules/is-map/package.json","hashes":[{"alg":"SHA-1","content":"ed28234ea9e98bffdfbf923897ff644aa9e154d7"},{"alg":"SHA-256","content":"b2d7c205058919c957fed69cbf8cdcd589dfc82c0aadc4c2e298f9ee3afd296a"}]},{"bom-ref":"e7b2bb107e621dbf","type":"file","name":"/juice-shop/node_modules/is-natural-number/package.json","hashes":[{"alg":"SHA-1","content":"096ffbf63a49e913e7758b58ceb3b64305517ba9"},{"alg":"SHA-256","content":"9170a51c5342b4a707c55517d66f7459ee82efa50169f1d9a1d98b345fbf6acb"}]},{"bom-ref":"fade5885f40e6b0b","type":"file","name":"/juice-shop/node_modules/is-number-like/package.json","hashes":[{"alg":"SHA-1","content":"fbfa13f628360f4178cca9025b4df52da7e81863"},{"alg":"SHA-256","content":"34ac5ec903e8f8eae2536d33611a0003ac66e8bae7dabb2706b42af74b54578c"}]},{"bom-ref":"0ff09f1b13707630","type":"file","name":"/juice-shop/node_modules/is-number-object/package.json","hashes":[{"alg":"SHA-1","content":"64ce0f3ea95faf731a61339f0cdf8586ee2e7e15"},{"alg":"SHA-256","content":"0f647c3741eea832398ec6d2fab6dfc7d431e3a66e3def47ef01dae9ac79eb53"}]},{"bom-ref":"cf33a817997d2b90","type":"file","name":"/juice-shop/node_modules/is-number/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"54d030d54e9eb97c0ba0aedc39a45f169857672d"},{"alg":"SHA-256","content":"4fbd705c00cde2b9b29cf368f9accf1a057065ab8a349f1a5d27e5f10eee36ff"}]},{"bom-ref":"b8ef39daa41cdf2f","type":"file","name":"/juice-shop/node_modules/is-number/package.json","hashes":[{"alg":"SHA-1","content":"2fbcc9642a2f9790b1b34b2251e86da6bb902186"},{"alg":"SHA-256","content":"c0f47a24ff52fabe0bbaa316994e2a828a56f2cb0f94bf031bd9884e320cfd0b"}]},{"bom-ref":"405a91f0b29e2323","type":"file","name":"/juice-shop/node_modules/is-object/package.json","hashes":[{"alg":"SHA-1","content":"84ae32267e3fa601a9457e3361fd63c48a864595"},{"alg":"SHA-256","content":"23bab3622439df0c6ade1d7671e6609eb55abe359b559da21c6ac1e8ba92754c"}]},{"bom-ref":"1ada3b2407b6be1d","type":"file","name":"/juice-shop/node_modules/is-plain-obj/package.json","hashes":[{"alg":"SHA-1","content":"96165e985c551894f224d8ef606b1cf98689b7ac"},{"alg":"SHA-256","content":"3f2d9ecc4ad7921576d65361b4fce21c5cfee72a4fc18e38b6c2050738df67d1"}]},{"bom-ref":"910fd9c7600d7e37","type":"file","name":"/juice-shop/node_modules/is-plain-object/package.json","hashes":[{"alg":"SHA-1","content":"1793cde25acd0f4f2d9f820d34c8675543770b93"},{"alg":"SHA-256","content":"9d230b1f721ff1453f40e10824eb4048072ba04c3d63979c48d59c20fabdbb96"}]},{"bom-ref":"ed74ca942ba8d08b","type":"file","name":"/juice-shop/node_modules/is-promise/package.json","hashes":[{"alg":"SHA-1","content":"204b9c0844ad7952b8c714a076936074a9813263"},{"alg":"SHA-256","content":"ebb992f44a73d06d3af839970ae14fa2a5a70a5dad61b527c21a9d89a774a617"}]},{"bom-ref":"6f4babe9bc287709","type":"file","name":"/juice-shop/node_modules/is-regex/package.json","hashes":[{"alg":"SHA-1","content":"5693e910887ef21be281e8860ca0c3a29e59e794"},{"alg":"SHA-256","content":"b99ff9cb5a079a1d6060bce2d31f06780d4296539a5b57106047a86561cd4db3"}]},{"bom-ref":"d273e72565a9d32f","type":"file","name":"/juice-shop/node_modules/is-relative/package.json","hashes":[{"alg":"SHA-1","content":"259ca538dacebc5458a1deef3600da0469f1f5de"},{"alg":"SHA-256","content":"b4059db81cb29586779cb6281b3ca0605774e1185e0b92432d6da2e8da3ad45c"}]},{"bom-ref":"f0d408b2a02d7d7f","type":"file","name":"/juice-shop/node_modules/is-retry-allowed/package.json","hashes":[{"alg":"SHA-1","content":"b8190b0addd0dde7253ba68348942036fc545ee5"},{"alg":"SHA-256","content":"b9c34d3385c5f3050b73c5650977c0af8963165ecbba9f3c85d618c55b4f3486"}]},{"bom-ref":"69374aede277413a","type":"file","name":"/juice-shop/node_modules/is-set/package.json","hashes":[{"alg":"SHA-1","content":"e0bfd95803a081436377c6057b747d27d1ce1fb9"},{"alg":"SHA-256","content":"1e23457a11d7836233f8a98ee97dd7a2cfdde4381e46a92b160ffeffe2c3d001"}]},{"bom-ref":"3a39b65accf4cd01","type":"file","name":"/juice-shop/node_modules/is-shared-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"983f03d977afdaa38aca26493740f8eaca2f6d04"},{"alg":"SHA-256","content":"a8c03e6ca8d6879d13cd4bc2cfd1e14c634006532a295016f4abdee27f5877e8"}]},{"bom-ref":"d8258b442754e251","type":"file","name":"/juice-shop/node_modules/is-stream/package.json","hashes":[{"alg":"SHA-1","content":"f2f490f635a13ed709ee5c0605df8067905ddec1"},{"alg":"SHA-256","content":"8cab336575fb9e86b6f6473b57fe06b734e7443a2f25359b542b289e9cb2c010"}]},{"bom-ref":"7752bf24946c9c80","type":"file","name":"/juice-shop/node_modules/is-string/package.json","hashes":[{"alg":"SHA-1","content":"1631d23f33757d6197f8ad6d696832b1a2759059"},{"alg":"SHA-256","content":"e34f86b9cc8a1811587ca3eb5efdb7f158f3646693b5e657e7188c52b54a696c"}]},{"bom-ref":"31afff698b0fdd5f","type":"file","name":"/juice-shop/node_modules/is-symbol/package.json","hashes":[{"alg":"SHA-1","content":"25682cb00f7d9b3167931c5bb00906dad9973d42"},{"alg":"SHA-256","content":"ae8d1155c6252e4b7077944b25b03a2c175ae632e3ee78508f12cc1c94f8296a"}]},{"bom-ref":"6656bab47c2a7aaf","type":"file","name":"/juice-shop/node_modules/is-typed-array/package.json","hashes":[{"alg":"SHA-1","content":"a069bc3c4312b2c2911625277a938f265f8b80c6"},{"alg":"SHA-256","content":"51dcf15ccc424ce76b36bef2ef64df7a53e75294cbddf08b4f7e639133145cc5"}]},{"bom-ref":"dc9b269cd979c734","type":"file","name":"/juice-shop/node_modules/is-unc-path/package.json","hashes":[{"alg":"SHA-1","content":"56e3e8226782aa420417222268679e375aea5155"},{"alg":"SHA-256","content":"b2edd3e5cf18fc0076ac78ca155cf7d892cd6525b5cc8995cdd57d2d40051860"}]},{"bom-ref":"9e85e569f9fcedc7","type":"file","name":"/juice-shop/node_modules/is-weakmap/package.json","hashes":[{"alg":"SHA-1","content":"18426dc3cc1e36705e80b9508a7c45f0f7d1e8f8"},{"alg":"SHA-256","content":"483ce3a97e913446c2e43013b79ae03240d583d938a61c3c3c0e2f095f56b553"}]},{"bom-ref":"ac8a6d4382fd06cc","type":"file","name":"/juice-shop/node_modules/is-weakset/package.json","hashes":[{"alg":"SHA-1","content":"70492aadf02d82ca5637e0ba90fa98040501ba27"},{"alg":"SHA-256","content":"689f191f14c6dd30bfc0325475a738cd9633cf632c8e4ec81714591817b4ad36"}]},{"bom-ref":"25eac7f037a11621","type":"file","name":"/juice-shop/node_modules/is-windows/package.json","hashes":[{"alg":"SHA-1","content":"f452f4328f713c711a0e207be3d8a0958222c892"},{"alg":"SHA-256","content":"78963f69e47d6fb7b090bddd4e4eba074627fa32d5c4841a1839be88cf1418e1"}]},{"bom-ref":"9a94fa972f21d49f","type":"file","name":"/juice-shop/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"73e13702b019b992300caa912bc2322a9093e21e"},{"alg":"SHA-256","content":"b0802c09bce6bf067d3e5f52390ea26972e11c88bb6ae38991316ac83ca14127"}]},{"bom-ref":"5b7425ac3d112a33","type":"file","name":"/juice-shop/node_modules/isexe/package.json","hashes":[{"alg":"SHA-1","content":"3b3eab80c4ffd08eef6b3381b98de7be3649d06b"},{"alg":"SHA-256","content":"395c2af9abeeaafe7391974c1eacfb2a2bdeef187f21c3f5582c49e0368e59bf"}]},{"bom-ref":"02f69f59a98b9f26","type":"file","name":"/juice-shop/node_modules/isobject/package.json","hashes":[{"alg":"SHA-1","content":"dd20c4d536aa7a67fb5ed1eb4e5122ecd57534a9"},{"alg":"SHA-256","content":"c66c0936c8ac63e97aca4e747fe0da8df7d6f093eeb47fb29d4d186c41272465"}]},{"bom-ref":"de765373a29f472a","type":"file","name":"/juice-shop/node_modules/isomorphic-ws/package.json","hashes":[{"alg":"SHA-1","content":"332fbfbd0e852e6ad3c9076573006b1608eff806"},{"alg":"SHA-256","content":"dd92171c67f243d981a78204ffd0d64247267b97e6a261a4c6b5f1668c05d21c"}]},{"bom-ref":"5ea7008b96a79c4d","type":"file","name":"/juice-shop/node_modules/isurl/package.json","hashes":[{"alg":"SHA-1","content":"cd24cb01b3ad1b0497249531912561ccd258c46a"},{"alg":"SHA-256","content":"9396a58aa6e42df65f7aecb92a08e6b5a84ecd6485ddfe9a3d481e7fd2cf1251"}]},{"bom-ref":"e781c0c50e126c03","type":"file","name":"/juice-shop/node_modules/jackspeak/package.json","hashes":[{"alg":"SHA-1","content":"15e15f7f7565d0a355be813b2e68eb35e65102a5"},{"alg":"SHA-256","content":"3379e9c1be25729a6c7fc160e840108e15895c368e8060e42f68598f9f3065cd"}]},{"bom-ref":"f13cf733d4f950ad","type":"file","name":"/juice-shop/node_modules/js-stringify/package.json","hashes":[{"alg":"SHA-1","content":"8828486a7978be6f38eb93353a990f4b00a7fc66"},{"alg":"SHA-256","content":"133b036b739bb71c44008eb9c2bee9fd3169327fff26d2b390c63ccd70f8c3fc"}]},{"bom-ref":"3c7f313bcf2787e5","type":"file","name":"/juice-shop/node_modules/js-tokens/package.json","hashes":[{"alg":"SHA-1","content":"6704feb8cbaf803288d9185a2fc86017e24ba55b"},{"alg":"SHA-256","content":"47345931827b3e26db9fe690abb81f856a0d040cbca8af1e69711a64cd58ce0d"}]},{"bom-ref":"4b488f083c9f815f","type":"file","name":"/juice-shop/node_modules/js-yaml/package.json","hashes":[{"alg":"SHA-1","content":"1fa37a328c77e8baadb3f56ab240cd01da742d69"},{"alg":"SHA-256","content":"e5f7d1f23067e9422fbdda594386dc663442451a96785195fc27c7cd826fdf63"}]},{"bom-ref":"2e6b8197dfb84f30","type":"file","name":"/juice-shop/node_modules/json5/package.json","hashes":[{"alg":"SHA-1","content":"7a38f8d159bc79dac6ac618707de02fcd3063f2e"},{"alg":"SHA-256","content":"1927c4592e3811cf9b8c86e568df1c41a373b628b4b322f88872395ef87e2ba5"}]},{"bom-ref":"8e0aad266f146be6","type":"file","name":"/juice-shop/node_modules/jsonfile/package.json","hashes":[{"alg":"SHA-1","content":"90ab4e3699e9eb9e2df7b9e849f35910f1fa35db"},{"alg":"SHA-256","content":"33e801b5edd313d727b299d8c5cc826f045a3b93e1dcadf2ce5672726c5cbcd4"}]},{"bom-ref":"764daa9bf34752c6","type":"file","name":"/juice-shop/node_modules/jsonwebtoken/package.json","hashes":[{"alg":"SHA-1","content":"305242068c0654ec18802417c31771ea78dd1dd1"},{"alg":"SHA-256","content":"5f6505d0fae5a241cbdd3cf6fa841034db7d9870ae774c59c342fad8cfb82eaa"}]},{"bom-ref":"01b2932fa8b3bf6d","type":"file","name":"/juice-shop/node_modules/jssha/package.json","hashes":[{"alg":"SHA-1","content":"16d29aff64b36ea45a293b87f2b9669cdadc1013"},{"alg":"SHA-256","content":"4372166dc7877fd0cb43c8dda9453cd155277dd7b845c1b9b01ccb2c4e9a12c2"}]},{"bom-ref":"b1958a77e3bbe215","type":"file","name":"/juice-shop/node_modules/jstransformer/package.json","hashes":[{"alg":"SHA-1","content":"b289d2aee71af7c52388667c93a40409604d0c86"},{"alg":"SHA-256","content":"47dd1297b10e67e178c2a788856a518fd05a0e0b0919f1f9f12b777dd458c454"}]},{"bom-ref":"f97d240ff29309e6","type":"file","name":"/juice-shop/node_modules/juicy-chat-bot/package.json","hashes":[{"alg":"SHA-1","content":"554ce223ca82ae5cf1e13fb4caae6c06f84a0ad0"},{"alg":"SHA-256","content":"4ff88de5f00dd9b370da52afb5a0886430d253d4151bf8b2dfc5af7fc3baa1f1"}]},{"bom-ref":"81747daa83e6e432","type":"file","name":"/juice-shop/node_modules/jwa/package.json","hashes":[{"alg":"SHA-1","content":"eab0e2efcf0c2ad608521805b5989c409723f9dc"},{"alg":"SHA-256","content":"c2e3758f078a67c136a198241daba4fd306a75c474e8358d375807f350a159a6"}]},{"bom-ref":"ee7993b5ec5e79f3","type":"file","name":"/juice-shop/node_modules/jws/package.json","hashes":[{"alg":"SHA-1","content":"515e309b1f538c91d0be3ec2334bd3a138f920f1"},{"alg":"SHA-256","content":"897314a2d7de9b7096761af9694c4b6685dde9f82f39326510c5862e1f15c882"}]},{"bom-ref":"a905b064dcdaa602","type":"file","name":"/juice-shop/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"5cee1955868ef17a2d4c51f75f412419cc89e915"},{"alg":"SHA-256","content":"0710f74718210573ae878c0a733775d2ad9e9d5a5053f0521cbf9347a39a01ec"}]},{"bom-ref":"d972da5dda9889f7","type":"file","name":"/juice-shop/node_modules/kuler/package.json","hashes":[{"alg":"SHA-1","content":"c64c52e6c65728378f338e75e3278ebe469916af"},{"alg":"SHA-256","content":"7c22c6fe3ddd0ba047218d864008b002eab3fce6b499351e7a4c63e2cf703ae7"}]},{"bom-ref":"e1f0905aa610d8c4","type":"file","name":"/juice-shop/node_modules/lazystream/package.json","hashes":[{"alg":"SHA-1","content":"799982547b24774bfefb32bfc82e2c98d77329f3"},{"alg":"SHA-256","content":"cf0860e26be0d5c9098d1bd0ce5c5faf1e02d6c6b050a14bbb40c2fc1c087fec"}]},{"bom-ref":"0998ce6b1411ff82","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"ac9fad510ffaa52eccff29729383a2f0ed602bec"},{"alg":"SHA-256","content":"8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"}]},{"bom-ref":"2adb0c1683f7794c","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"c0d55f8b28bea19d1fbed323da70e9857ddaa74e"},{"alg":"SHA-256","content":"95e29f682649caf233b4ac9729efa0c1b3718ef179e7b44e21ea01a0941af071"}]},{"bom-ref":"413619c6a4f13300","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"},{"alg":"SHA-256","content":"ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"}]},{"bom-ref":"b0a8e880dcb67d86","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"35b672da35e299376d0ffc4f22fd57088150a835"},{"alg":"SHA-256","content":"001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"}]},{"bom-ref":"54c7b49fb98ab319","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"9aea9b0daad0699494a286e8b104317015f9827a"},{"alg":"SHA-256","content":"1eb7b17d626d6201c70af32e684302ff3219d6fe583a2611a8a3119d98a68956"}]},{"bom-ref":"a0847e2d8906a7c9","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"53b43dd098da8d4b0606d47cc71bbce0f9326251"},{"alg":"SHA-256","content":"d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"}]},{"bom-ref":"ffbe5de5c7eadbae","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"},{"alg":"SHA-256","content":"8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"}]},{"bom-ref":"f3363b8164c0945a","type":"file","name":"/juice-shop/node_modules/libxmljs2/package.json","hashes":[{"alg":"SHA-1","content":"f1f8578eadc922aad04a6d7c7b0c34d52859ba76"},{"alg":"SHA-256","content":"9f6e576adad1199ac47aaf3c8b2ecd28c4acbb9bd70c01d2772f319757e7102e"}]},{"bom-ref":"4d2797297ee59f22","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/braces/package.json","hashes":[{"alg":"SHA-1","content":"124d44a7e3c5fd1b2370ff51929158c7c39c46c2"},{"alg":"SHA-256","content":"56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7"}]},{"bom-ref":"38c4fb68a51dda59","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/fill-range/package.json","hashes":[{"alg":"SHA-1","content":"1682e8ba503f3836b55fc5763adfd0605f0d1b6a"},{"alg":"SHA-256","content":"87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735"}]},{"bom-ref":"df5d6fe3977bd328","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json","hashes":[{"alg":"SHA-1","content":"990b9b7b1e0c10a10b929022ea7d2c7123a69dc2"},{"alg":"SHA-256","content":"d2a8fd0bcd4b5a28fd7132b036e909998b63f5c98614efc25997705f85481381"}]},{"bom-ref":"d205ebdb74650543","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/is-number/package.json","hashes":[{"alg":"SHA-1","content":"2bd4ba6c07c12d2b7af0035e57b46cbb7e133477"},{"alg":"SHA-256","content":"51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620"}]},{"bom-ref":"98b99fdf5e43fafd","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/micromatch/package.json","hashes":[{"alg":"SHA-1","content":"0ae8e81288771f32a5d752c97255f75cb2f48524"},{"alg":"SHA-256","content":"94dbc881c0329813f2481f35fcfa725a2285d45926d33e9b9b8b80b28487752b"}]},{"bom-ref":"50cbde01f4231f72","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/to-regex-range/package.json","hashes":[{"alg":"SHA-1","content":"c16a607925055788aae94f1123fa0d769af161bf"},{"alg":"SHA-256","content":"766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec"}]},{"bom-ref":"347c74fea1bcf1c9","type":"file","name":"/juice-shop/node_modules/liftup/package.json","hashes":[{"alg":"SHA-1","content":"647850b8fba294d8450e62ae576687219a9d92e8"},{"alg":"SHA-256","content":"6e8687bb4f371e6a5a0316bc221394442e4fe55cf0c19f901b917e7765c6eeb5"}]},{"bom-ref":"510c9fd283444fa4","type":"file","name":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","hashes":[{"alg":"SHA-1","content":"c5e890ef1a0688476da2fac589b8d70ee8b9e64d"},{"alg":"SHA-256","content":"c02b020c7ee58e1dd08812e7fe2808881433a4aaa4331b0a440961e8ce853e3e"}]},{"bom-ref":"af5d3053b79e1c63","type":"file","name":"/juice-shop/node_modules/linebreak/package.json","hashes":[{"alg":"SHA-1","content":"7f0f13cabdaa4467eddc525051411330fb1b9536"},{"alg":"SHA-256","content":"53f67b29d3d0c3bc43501bf17d658aa611a668128eeba39ae9eabeb1cdb505d0"}]},{"bom-ref":"f489576007776cd1","type":"file","name":"/juice-shop/node_modules/listenercount/package.json","hashes":[{"alg":"SHA-1","content":"39b628e6e8b9f8e088189bc3be32981b305de75d"},{"alg":"SHA-256","content":"5a86ab80928808eeb15b05c191e506282760ac13059a9f0e80f4cc215e463e99"}]},{"bom-ref":"7f2b5c30613bdd72","type":"file","name":"/juice-shop/node_modules/lodash.camelcase/package.json","hashes":[{"alg":"SHA-1","content":"2ad584413c18f3e37b0b8481b84314d58e850e2f"},{"alg":"SHA-256","content":"9efa0aaf45881a9b6f8150e72e399a7d17732c8bdb772bb501204204821a22dd"}]},{"bom-ref":"65a69421597a96ce","type":"file","name":"/juice-shop/node_modules/lodash.isfinite/package.json","hashes":[{"alg":"SHA-1","content":"c663108fc530fc52e8ce946399b099dad2f6114d"},{"alg":"SHA-256","content":"2abd2380279a93b32995b706fdb633fc9ac4f53166a770b1d146c17612444a84"}]},{"bom-ref":"3ab8c595062ee99a","type":"file","name":"/juice-shop/node_modules/lodash.set/package.json","hashes":[{"alg":"SHA-1","content":"1ee3b14200998ff446e2f7c90f6422cb02185980"},{"alg":"SHA-256","content":"bb7cee8203b5e5ce6d1d38222d558f7862fb5df28ae57d27faae5bd2bc0b2f53"}]},{"bom-ref":"e71dcea371c7e1c6","type":"file","name":"/juice-shop/node_modules/lodash/package.json","hashes":[{"alg":"SHA-1","content":"2c1ec9f730323c72f6f76e73f48b24902cc853c2"},{"alg":"SHA-256","content":"8e41b07c744a0de0d2c1c23ed41418ecb0849abb56395d28802e601b4730d7c2"}]},{"bom-ref":"9b02d8ae5ab124c3","type":"file","name":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","hashes":[{"alg":"SHA-1","content":"bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"},{"alg":"SHA-256","content":"af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"}]},{"bom-ref":"f530cb5217d703e6","type":"file","name":"/juice-shop/node_modules/logform/package.json","hashes":[{"alg":"SHA-1","content":"ee3e0f5dfcca636f59f35b524c6cfee6f3839835"},{"alg":"SHA-256","content":"7fe3c68c465efc9460ce9abfbf95d5cacefc76fe159c7b171bf8923aa27e2660"}]},{"bom-ref":"b15a93167571fc64","type":"file","name":"/juice-shop/node_modules/lolex/package.json","hashes":[{"alg":"SHA-1","content":"0243202664431af83621b42972b81a462cac173c"},{"alg":"SHA-256","content":"6e38fbe01194df78feb125f0413b770a58ac7c9268bc81376266dc4a8c512a02"}]},{"bom-ref":"f17a6fcd785ef8d7","type":"file","name":"/juice-shop/node_modules/loose-envify/package.json","hashes":[{"alg":"SHA-1","content":"2162096bfa92a2ab1ab7bcde6fe70e590adb7eaf"},{"alg":"SHA-256","content":"8c2e27dae366396ced36fe0f7c6d35d71a1440fd8e82df5f2005a5297888a0d4"}]},{"bom-ref":"90f2270c116fdbe2","type":"file","name":"/juice-shop/node_modules/lowercase-keys/package.json","hashes":[{"alg":"SHA-1","content":"094e1a4133dcde74b82f3517eecd3acbba0ce722"},{"alg":"SHA-256","content":"b93a86a7d0bcaf9f4fbc2ff2732cecb237a70d541a5a8a3cd8c8b6b2829311dc"}]},{"bom-ref":"dd6ce1dfd771a8ae","type":"file","name":"/juice-shop/node_modules/make-dir/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"72c6fffd0e03d58d","type":"file","name":"/juice-shop/node_modules/make-dir/package.json","hashes":[{"alg":"SHA-1","content":"efaeb3af11445ed86a3b422c6779425597aedf92"},{"alg":"SHA-256","content":"d97dcd396bb3397b3e6651032ed52fd937dcfc6da85bd792792f3ecfb8206326"}]},{"bom-ref":"27db6f53525b6f18","type":"file","name":"/juice-shop/node_modules/make-error/package.json","hashes":[{"alg":"SHA-1","content":"e83b2183c8ea3ce675ef5fead31c1290015f32fe"},{"alg":"SHA-256","content":"50c34173c986be81cb3efe6a2663cca1cc84ecc6ab2d8fd33ddd234e59012bee"}]},{"bom-ref":"532670a832e4a38b","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"563b0d8af1a9641083e8f6cefbf4259fa845e7ca"},{"alg":"SHA-256","content":"bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"}]},{"bom-ref":"7e3d1cd2ebba5ac0","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"046524b23a7aefb2b0cfd3ebbd0fd84c0f7df3f6"},{"alg":"SHA-256","content":"a33b5a293825b22957629dafe778ea4164e577499418cd907d937b874f27675a"}]},{"bom-ref":"26659a0d30b1f82a","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/package.json","hashes":[{"alg":"SHA-1","content":"4e321611ef7ad4a60c9b8db56a8e49c35f4624f5"},{"alg":"SHA-256","content":"279b653b3c792aefb9cef4f0822747a5d81c1fd135bc92bc1251112ddc695b84"}]},{"bom-ref":"e4ca902cadd3b4de","type":"file","name":"/juice-shop/node_modules/make-iterator/package.json","hashes":[{"alg":"SHA-1","content":"4d4a1468c0616ef8d46d346b089bcb5d03ffe180"},{"alg":"SHA-256","content":"40aa14a22aba7bb3f924fcf0fd9228bc957318fcfeadf357533ee3d86782acec"}]},{"bom-ref":"db743d21b6fbea95","type":"file","name":"/juice-shop/node_modules/make-plural/package.json","hashes":[{"alg":"SHA-1","content":"d39bcf894b551faefa974cf0f466849a7c416c2c"},{"alg":"SHA-256","content":"dea92be18b2be286d23fee583b178685ecd7e18c49d2535d0ba625a02722553b"}]},{"bom-ref":"a9748b28cb4993e6","type":"file","name":"/juice-shop/node_modules/map-cache/package.json","hashes":[{"alg":"SHA-1","content":"59f4b9e44939cd98fa3853cd0437d509aed52b92"},{"alg":"SHA-256","content":"6f7a40df8df45e11963987035e12955b2e4a5fba23c8768fe1952d034680492d"}]},{"bom-ref":"7226864c939c21a7","type":"file","name":"/juice-shop/node_modules/map-visit/package.json","hashes":[{"alg":"SHA-1","content":"c6bc75728b734e76e5bae9cc912813bf5e7881c4"},{"alg":"SHA-256","content":"ccdc56c6d8e9bd165f7a83d8b94b327582b7ea31807a6aad40decdb8e49ae6a0"}]},{"bom-ref":"f66dbe519b6167f8","type":"file","name":"/juice-shop/node_modules/marsdb/node_modules/eventemitter3/package.json","hashes":[{"alg":"SHA-1","content":"9735c2bc0d60a2aaa6d810d4cf1c47774b914f9c"},{"alg":"SHA-256","content":"675f6e2380c3118ca2c7e1bf39a2720b0eda169a282adabb0f38d27049a8283b"}]},{"bom-ref":"9ca0c99b436cdb50","type":"file","name":"/juice-shop/node_modules/marsdb/package.json","hashes":[{"alg":"SHA-1","content":"05593b5112e981dce1e0cc9fab47651e53dda0b8"},{"alg":"SHA-256","content":"3f66481f2e5de498a9b36561856a2e689ba4ed420d7f552887783b3a44e3d2f9"}]},{"bom-ref":"c89443375bf9a836","type":"file","name":"/juice-shop/node_modules/math-interval-parser/package.json","hashes":[{"alg":"SHA-1","content":"1e2f73e92f8caa8815589e89dcba720f53f0b218"},{"alg":"SHA-256","content":"5db4e0e76fdf0f85f164380a4d113ae51c34752d0d4f57a9e360ac88d199a33b"}]},{"bom-ref":"231110a380b7bffb","type":"file","name":"/juice-shop/node_modules/math-intrinsics/package.json","hashes":[{"alg":"SHA-1","content":"017b2996c50a49f073f75e2cb92b61b9d4258bce"},{"alg":"SHA-256","content":"39d74aa5a354153130706286dd60a2d8409ce0c8f66546eff2edcac0afff17e1"}]},{"bom-ref":"e161ce91d6d47f48","type":"file","name":"/juice-shop/node_modules/media-typer/package.json","hashes":[{"alg":"SHA-1","content":"866c9ea28a167b6800da67cdbe18cc9f0ec5cbab"},{"alg":"SHA-256","content":"8ccf875e488e700b79ec48386e2f47c51c5f26297ec74e5e4e5d92dc5d70ef30"}]},{"bom-ref":"aeb042fedc33011e","type":"file","name":"/juice-shop/node_modules/median/package.json","hashes":[{"alg":"SHA-1","content":"9cbbd09b97f16663e8695325d1ce0c44ae624cf5"},{"alg":"SHA-256","content":"48ae606a70183af9efa60fba296cfe1fdc103c06d3d5073e1b6c88312492bbe7"}]},{"bom-ref":"5524bc75ab5dd59c","type":"file","name":"/juice-shop/node_modules/merge-descriptors/package.json","hashes":[{"alg":"SHA-1","content":"d393c91c5d7c5291956c48571625b13cddd28990"},{"alg":"SHA-256","content":"6321e7d658510186de8976bd577ef59a1dcc4f1371d238ce2e676e484d1ebbed"}]},{"bom-ref":"e2b7bc4ba91f70c2","type":"file","name":"/juice-shop/node_modules/messageformat-formatters/package.json","hashes":[{"alg":"SHA-1","content":"97ee08ab442ed44e08cfc000ed6f5a9f57795c1a"},{"alg":"SHA-256","content":"a29374a4688c850e080f311c796e3875a2c860c21389f59e82e5a17791c8aac2"}]},{"bom-ref":"8e1068e268c22381","type":"file","name":"/juice-shop/node_modules/messageformat-parser/package.json","hashes":[{"alg":"SHA-1","content":"d65d6a13fa614fdd498350e8839e76bbd3259ff3"},{"alg":"SHA-256","content":"7d4f82a9c3781764f348c4bae11f4466f0ef8de8557fcb955a9246f14e2fffc0"}]},{"bom-ref":"901671a0be17bf75","type":"file","name":"/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json","hashes":[{"alg":"SHA-1","content":"4c9ce9e1ead0092177f7ce3e2dc6f5c6ebf04c33"},{"alg":"SHA-256","content":"2ff54f256f10f5f7d6d5542b83a1b659897f6b8620521eb8df01dbe83cc57b49"}]},{"bom-ref":"3e26c9e46ccbe79d","type":"file","name":"/juice-shop/node_modules/messageformat/package.json","hashes":[{"alg":"SHA-1","content":"8d0f9e8b22ad0e4931d7109d2b8075fa34d07b0d"},{"alg":"SHA-256","content":"9a3b8590efa611ef114b154994715e4f9c1226f16592922e48ab86245dd8c6b5"}]},{"bom-ref":"e15a35f7d48cc307","type":"file","name":"/juice-shop/node_modules/methods/package.json","hashes":[{"alg":"SHA-1","content":"93fab7b874afa4232986a2cab9a7e900b5eaee5a"},{"alg":"SHA-256","content":"1aea21641646c87a589208a9363141cd2acd503db45c635f8217613c45837c09"}]},{"bom-ref":"7659fbe758e85333","type":"file","name":"/juice-shop/node_modules/micromatch/package.json","hashes":[{"alg":"SHA-1","content":"6d6680424a952f00748d4adeab90cba48e7f34e3"},{"alg":"SHA-256","content":"1ee68d25837f01bf38614622496b3675070fb8f05daac0ceaa4a06e29c29355f"}]},{"bom-ref":"0d2d7f5d78e0c057","type":"file","name":"/juice-shop/node_modules/mime-db/package.json","hashes":[{"alg":"SHA-1","content":"192a69685a32f1ccc5df8a54ea0f117c48bd87f1"},{"alg":"SHA-256","content":"d03e37b915a050af548d543f4e45ff5de06ec767c19e745f18c431d9dc26b5bf"}]},{"bom-ref":"1b4613c54af5247b","type":"file","name":"/juice-shop/node_modules/mime-types/package.json","hashes":[{"alg":"SHA-1","content":"ee2c9eae301358bf7d646b5b7ede6c28fed4bf96"},{"alg":"SHA-256","content":"5053cc10259c3913ab6b6c8f13170a619c0d1836c1d9081238329a559fafeb3a"}]},{"bom-ref":"c8feb8c4f86d517d","type":"file","name":"/juice-shop/node_modules/mime/package.json","hashes":[{"alg":"SHA-1","content":"0779ea22afe593a2ec0223d16e9ccb5d0e01e45f"},{"alg":"SHA-256","content":"f6a871d6ab40d2f2945d626a4d75da2fce78a35737c0870a0a4da9bee43f9d4e"}]},{"bom-ref":"7ab639e3e0a1bbbe","type":"file","name":"/juice-shop/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"082938445f1ca0117cf3c38752fb121b427d382b"},{"alg":"SHA-256","content":"a3c32b6656683020a9458474c9536dcbf37b873668b87635c19ff10b58f362ae"}]},{"bom-ref":"a9aaa15f59adceb4","type":"file","name":"/juice-shop/node_modules/minimist/package.json","hashes":[{"alg":"SHA-1","content":"2bec91d11358048bff848e353df12837beb6ad94"},{"alg":"SHA-256","content":"252881f6a068a3e70386706d88a694b5e8e9e053b6d9f309fd9a329e651bbf81"}]},{"bom-ref":"55db0940d602c014","type":"file","name":"/juice-shop/node_modules/minipass-collect/package.json","hashes":[{"alg":"SHA-1","content":"7ca3a77ca7b795148ecee5d9ebbe96e968dddb15"},{"alg":"SHA-256","content":"042ab826c5440a7d01a1cafae44c54840618319e2e64ed40df006c542b0768f8"}]},{"bom-ref":"2ecdb68d32378a4a","type":"file","name":"/juice-shop/node_modules/minipass-fetch/package.json","hashes":[{"alg":"SHA-1","content":"20a8b7cdd0d9df659a448aef3a4589ca2a95d39e"},{"alg":"SHA-256","content":"75e1d21fe4253c6a01b012e347900cf44c13f0ff541a5e000ff930faa504d84b"}]},{"bom-ref":"58827b7182b1b7b7","type":"file","name":"/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"38cea6b6bb502962","type":"file","name":"/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"cd3ca3f61ae30f11","type":"file","name":"/juice-shop/node_modules/minipass-flush/package.json","hashes":[{"alg":"SHA-1","content":"c89612a2a9c68141b8271bbc94bcc88067c29790"},{"alg":"SHA-256","content":"822c46377be9b8a54b3565210b03f874f65f28c88cca59168368fd11842219cd"}]},{"bom-ref":"3011886023cee085","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"3e765795292d1046","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"882258caab61b5c8","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/package.json","hashes":[{"alg":"SHA-1","content":"e30c58465801deaceb4b81898e531c75679563b1"},{"alg":"SHA-256","content":"c20f059ca6012af5a3d255948c7ab1fccc06ad1d0019c669b08ba251cd4b281d"}]},{"bom-ref":"797912f8403f6ecd","type":"file","name":"/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"30dc4577e768a230","type":"file","name":"/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"696e201942ff9efc","type":"file","name":"/juice-shop/node_modules/minipass-sized/package.json","hashes":[{"alg":"SHA-1","content":"615e0e93dfdbc65b217029380591abc9e9b64136"},{"alg":"SHA-256","content":"55b337582c4192528f19eea2ababf77b18fe2ada15f346b25a2c1d276fec182b"}]},{"bom-ref":"eb8af0cee26a6530","type":"file","name":"/juice-shop/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"798df22ae1185484c372b4da30c4d75a0e7ea572"},{"alg":"SHA-256","content":"f6cfe184c40e1c08eac8f614d7ca6888fee9654259668ad0670bb6011f74a005"}]},{"bom-ref":"472c63e6460b386a","type":"file","name":"/juice-shop/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"84d8d3aa79f268476fb7904393588b04eead52ed"},{"alg":"SHA-256","content":"e3be75cf1475cf676d2aeb5a91e3afa3975018565f654b61906c6ca5565e68e0"}]},{"bom-ref":"41f5c9660fb21936","type":"file","name":"/juice-shop/node_modules/mixin-deep/package.json","hashes":[{"alg":"SHA-1","content":"dd2586b0c55f1abfdf46028249cad10d37b6d18a"},{"alg":"SHA-256","content":"90b077cff5552f5ea9594b64ca6a48b7ece1db0948fe0467b89b86c0592cb555"}]},{"bom-ref":"1db203f5bd55c29c","type":"file","name":"/juice-shop/node_modules/mkdirp-classic/package.json","hashes":[{"alg":"SHA-1","content":"1038c88acb879de67ec347d0c4e1639e6ddc6f17"},{"alg":"SHA-256","content":"dd81e4703dc7005247e7c2dc056c67c936923a40b4dc9b266cf8acf3442ba89c"}]},{"bom-ref":"612d9361308fa3b3","type":"file","name":"/juice-shop/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"46da394a85c88f3288e19ccd89c03174e1360c52"},{"alg":"SHA-256","content":"a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2"}]},{"bom-ref":"7fee63d75c40673b","type":"file","name":"/juice-shop/node_modules/moment-timezone/package.json","hashes":[{"alg":"SHA-1","content":"f63ec700f7f848f155b904f161a24db413a96aed"},{"alg":"SHA-256","content":"4b5a6218fe37ea04bbe19f463fc2477e141bfb8ee18506bd99e871a0d25c3dad"}]},{"bom-ref":"b77eb21ca0b44ee5","type":"file","name":"/juice-shop/node_modules/moment/package.json","hashes":[{"alg":"SHA-1","content":"d32c71de37d4b9dffede0ee39dedd2eca5b4bb12"},{"alg":"SHA-256","content":"5e2f0870f4d1bbef11e8bf90babd72a4399b86b19da81de796a58457a37b8e13"}]},{"bom-ref":"e0aa22860cba3d49","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json","hashes":[{"alg":"SHA-1","content":"b2df92eda0861bfdf03b3689d8e6a53bbd607901"},{"alg":"SHA-256","content":"eacbd5624f044dbbdd9daf971ee004012e835368f7002f2dee742275e463eeea"}]},{"bom-ref":"10377e07e072bb9b","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"b060a05a5a82cecb","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"5df4ff772f122c84","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/on-finished/package.json","hashes":[{"alg":"SHA-1","content":"c29040f7d6143d368f7373aa6cced5817b070c87"},{"alg":"SHA-256","content":"c67ecda258b136ba8f9bc2b6600979bde85308c2a27ea0941465d9cb12239cf3"}]},{"bom-ref":"2f0aa1268f26c27d","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"5659b211ca0e14a6","type":"file","name":"/juice-shop/node_modules/morgan/package.json","hashes":[{"alg":"SHA-1","content":"12b5f22ea2a5cfefd023b561d82364d939346484"},{"alg":"SHA-256","content":"4b0296a5e97c48109500944481c91bc6548a3fa2d8cffe3eadb2efad148859e2"}]},{"bom-ref":"67e4877b3d323bfb","type":"file","name":"/juice-shop/node_modules/mout/package.json","hashes":[{"alg":"SHA-1","content":"961312a129ca9ff8ba04623b6507d91a2f95ea3f"},{"alg":"SHA-256","content":"fc5a7da4bdd4f1d2b7db11588b90c77f0de25b0e16b4b3342706fb677fb70c08"}]},{"bom-ref":"978406924c88c1e6","type":"file","name":"/juice-shop/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"1bb01f6ee1e4216c","type":"file","name":"/juice-shop/node_modules/multer/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"44ed68c9d570bf46fb09d444537a6520b60f77cd"},{"alg":"SHA-256","content":"8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859"}]},{"bom-ref":"bfb6890c59075d9c","type":"file","name":"/juice-shop/node_modules/multer/package.json","hashes":[{"alg":"SHA-1","content":"9d5f9e911709c067c01dc860c8f6e35a7429a6ab"},{"alg":"SHA-256","content":"49eef045324ab4b414b473dd93dd471f68dbc68eaa7003e88e85b6f70c5b4873"}]},{"bom-ref":"bf84d96078485552","type":"file","name":"/juice-shop/node_modules/mustache/package.json","hashes":[{"alg":"SHA-1","content":"7388b74f1debb1f95b9fd3f1d61102a98c28909f"},{"alg":"SHA-256","content":"6cd082a032f4c79c9f57d1bbd0ebbf9626d05e25f3347b20d3745708b57ecfae"}]},{"bom-ref":"aabf4201c9743423","type":"file","name":"/juice-shop/node_modules/nan/package.json","hashes":[{"alg":"SHA-1","content":"0e0bd529c8f4d49238fb7e91741829cf7b0d2686"},{"alg":"SHA-256","content":"9be1db68926741824af69344a811048ea7f236090ee7b39fd639aec9e0a1f2c7"}]},{"bom-ref":"608a9af0b89d7240","type":"file","name":"/juice-shop/node_modules/nan/tools/package.json","hashes":[{"alg":"SHA-1","content":"c8b6de0212f33be85f01aea1581791bd14aa2a73"},{"alg":"SHA-256","content":"26c59824a231aa81659c1d72c0a359e271889881218212ececcd4b393dfe13aa"}]},{"bom-ref":"862e7bd94e0fd7ec","type":"file","name":"/juice-shop/node_modules/nanomatch/package.json","hashes":[{"alg":"SHA-1","content":"fe200be1cf7563f9445a8b07aa9354f534c0f408"},{"alg":"SHA-256","content":"a8c64c345932f29d458cc0973c0c5a3b9fb4c3cca3561a828f48a06b60f1d416"}]},{"bom-ref":"7782473349d52921","type":"file","name":"/juice-shop/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"b502791eceb8f2957092667ec0ad17b7dba27817"},{"alg":"SHA-256","content":"a49e21f07e39fa8b5ab477b981260594519dca2e0107e820826c040054a63a1a"}]},{"bom-ref":"f1f02a95e74f8220","type":"file","name":"/juice-shop/node_modules/needle/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"3d5aebece9ee472dd80cdbe1235c8ce746c76c25"},{"alg":"SHA-256","content":"bc3ebfd4898960d942e65f60696f2af26917d6ddf016dd159c52beb9241d3983"}]},{"bom-ref":"c476e56065fd959a","type":"file","name":"/juice-shop/node_modules/needle/package.json","hashes":[{"alg":"SHA-1","content":"9bf939335cef204af46611dc82702b42200fdc34"},{"alg":"SHA-256","content":"5fa6ed0d41bd2d31a28d87fe3529024f19da63f499bc046fe292d0ce82446357"}]},{"bom-ref":"bc04e7c7bf65a75f","type":"file","name":"/juice-shop/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"94342123a37046fc1dd4ed813dd2103479225426"},{"alg":"SHA-256","content":"d7c1fb78e3186b6385077e0b7b365adca324274963e41e1d68f78b4f82105e4f"}]},{"bom-ref":"d8fe14245de69d43","type":"file","name":"/juice-shop/node_modules/neo-async/package.json","hashes":[{"alg":"SHA-1","content":"420739d2572278d648b89b2206cfbf89e89832ef"},{"alg":"SHA-256","content":"bdf14e4aab20dbe30f54ecb40d41ff75339327f9a1cf8638931ea16256ceaa6f"}]},{"bom-ref":"e9b12a36521ff8d7","type":"file","name":"/juice-shop/node_modules/node-abi/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"095c2f1d5ff4f9da","type":"file","name":"/juice-shop/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"df5a7d5e4921222cd4686a78783540cea2c316c3"},{"alg":"SHA-256","content":"b5db851f28f5d20f1d0aed33ccc40aceab12fb3472108cd1fe4f6118be11084b"}]},{"bom-ref":"a2e929a893250ffa","type":"file","name":"/juice-shop/node_modules/node-addon-api/package.json","hashes":[{"alg":"SHA-1","content":"7823e132377d718289188b35c5c8c362e8d89953"},{"alg":"SHA-256","content":"e4947cf10e432c42459e60a00947ccd1ad2501e16cf1a530b3d39f0c2de5c83f"}]},{"bom-ref":"db9b31b08956c1ed","type":"file","name":"/juice-shop/node_modules/node-fetch/package.json","hashes":[{"alg":"SHA-1","content":"3bf38043f961b5239a3e198325a553012c08a45f"},{"alg":"SHA-256","content":"000a0b3b037d4e3e211e7b7ca559a5a62a39b96ca2c6bcdaed3aba0a545eedba"}]},{"bom-ref":"26350d21d27f0302","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","hashes":[{"alg":"SHA-1","content":"58ff9d74c88270726b05e383ba4d2641a18438f3"},{"alg":"SHA-256","content":"1903498f98eab52f962076359b74e436bb24cf484fd1a75af97a2509712029ae"}]},{"bom-ref":"9317ad6a93401fc6","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json","hashes":[{"alg":"SHA-1","content":"33fc88b1f05370bb6518291c601cf96cfcafdc3b"},{"alg":"SHA-256","content":"40b17c58e0324bd3311cc201cfe513054e6af10261f872c8873ae290d620d5c6"}]},{"bom-ref":"e93fd251578056b3","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"317e51d1f350fa28d851280d460bebcd9154acca"},{"alg":"SHA-256","content":"a892ac4d9de9c19c5649cd38963ff353ce637455f83667a6b3a691bee62a7912"}]},{"bom-ref":"8258b1c731d19c28","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"519f542417e96085fb8a1ad8d7a0f913155b5e56"},{"alg":"SHA-256","content":"9f06638e5fcb977409c2181382492dd0d62885999e5739a8f285960d5a78906d"}]},{"bom-ref":"2bbd5a0de4f70864","type":"file","name":"/juice-shop/node_modules/node-gyp/package.json","hashes":[{"alg":"SHA-1","content":"ccf15dc1a8d1d80613e27c704d1776222cc81229"},{"alg":"SHA-256","content":"f7b6b8bc2c6051e72af8038882314efea54a7b0f7c8c4cf93db264b03c477d60"}]},{"bom-ref":"51d275ee331aae0c","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json","hashes":[{"alg":"SHA-1","content":"3a785cd04b35cc9a5fb36ad1a97561e7d3c3cf53"},{"alg":"SHA-256","content":"49144a24c7d686ca276850e6ffdd97147148c10acf3fe94317c96aa07de6a6ed"}]},{"bom-ref":"db1efbdd1c927678","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"01bd7ab28aab5e56","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"c3024b92485c885b974e1f46cb2c32de716c6f06"},{"alg":"SHA-256","content":"7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"}]},{"bom-ref":"11547d68e6a8a43c","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"5e6807bb3e5a5035a1cf03f1a855b3e6492f4ae1"},{"alg":"SHA-256","content":"3539da425561866028c253efb502461eba9a61f60e7aed6236df87f8f5fa8217"}]},{"bom-ref":"c92a6798cdf2c7a1","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"65b66c61525b0df6","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"78b354cf444327b4","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"e55449021f01663c8f607ceb7dbbf50d166624f1"},{"alg":"SHA-256","content":"f62740d4879900b0e5c1ab64580e4dae15e1345b162d148a260d39834c8f41ba"}]},{"bom-ref":"f44b290260e17a7f","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"bcb1bbab5e11777e5eabdd3ddcf01fbf2529853c"},{"alg":"SHA-256","content":"2a50eac171f8d9eead35f637c6c4bb965875fe5c876b5c888ba5fde46f4daf9d"}]},{"bom-ref":"690526265ea93479","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"44ed68c9d570bf46fb09d444537a6520b60f77cd"},{"alg":"SHA-256","content":"8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859"}]},{"bom-ref":"51b855491cb7eefc","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"332100289a0b019f231d6066376efdfb85345547"},{"alg":"SHA-256","content":"d85eee455ed9a79caa4a91d52e89857e576d30eefc3c826f0bf4dfbe067d0679"}]},{"bom-ref":"d990b89d0922423b","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"d1241a4f102aa0d377e63ee84d58b278677c3435"},{"alg":"SHA-256","content":"3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071"}]},{"bom-ref":"4b973a731c76e0dc","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"6609cde4fbf70f8a","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"cb08ea3f1813046f69fe762a54ee739e63596d79"},{"alg":"SHA-256","content":"a042350bb5cc1c9677d434b751b6a44fead64bcea99393a1251620db9c0e17a1"}]},{"bom-ref":"29e381ab3576b02c","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/package.json","hashes":[{"alg":"SHA-1","content":"508afa4b14190f24381eebc0cbdd37fd03d370e8"},{"alg":"SHA-256","content":"f3e84b56fe45a07986847204250cb1fc382071adf2aa9e96bcea2ebc61355cd4"}]},{"bom-ref":"6518dade91b07b94","type":"file","name":"/juice-shop/node_modules/noop-logger/package.json","hashes":[{"alg":"SHA-1","content":"0e21795f953d07a6714df586fde5026d83794a17"},{"alg":"SHA-256","content":"0af1b47cb5cb1cefca495ac1bbaa6a7e0372f2865103a5dacb64b99dfd990d17"}]},{"bom-ref":"113b6478b1af8508","type":"file","name":"/juice-shop/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"2c81ffca00f3b09f0669b43bbda6cfc723c05d5d"},{"alg":"SHA-256","content":"cf052eb4218045a3c48485f42ef3ec4cfb5e5c1f4b4753765d44eb5e730b1e68"}]},{"bom-ref":"ad58cc6a1f774aa4","type":"file","name":"/juice-shop/node_modules/normalize-path/package.json","hashes":[{"alg":"SHA-1","content":"4d6a654a05a46de332cfc70023e3ff0b39673fba"},{"alg":"SHA-256","content":"cd2d883ed14f4525cc3a87441b616327d38d1f8d096d12eef35f4c60dac9d796"}]},{"bom-ref":"18ba905f5751fa0f","type":"file","name":"/juice-shop/node_modules/normalize-url/package.json","hashes":[{"alg":"SHA-1","content":"671dad55b1d83fb8c0838614bf00a76f7592961b"},{"alg":"SHA-256","content":"69befc6d902d0a1b361bbfb5ab863704b67ab5d9df1dbd9869a9152f6ad4c5d8"}]},{"bom-ref":"4525b634ae1a3a21","type":"file","name":"/juice-shop/node_modules/notevil/node_modules/esprima/package.json","hashes":[{"alg":"SHA-1","content":"683cbde057cd3d8ff0105ecd318496ae8f6b19d2"},{"alg":"SHA-256","content":"9c8ec869b019be7bbc6e877aced29252cb4e229801e0dcd81ec36baf06c10722"}]},{"bom-ref":"576c3e722878a4dc","type":"file","name":"/juice-shop/node_modules/notevil/package.json","hashes":[{"alg":"SHA-1","content":"120bad0d2afc319a5da02e45d3a921b134636026"},{"alg":"SHA-256","content":"f9c36acd702b764beee8fdf8f3abec74b12bc1cb9b6b241ac9b88f8875e7c102"}]},{"bom-ref":"509be66e396bf493","type":"file","name":"/juice-shop/node_modules/npm-bundled/package.json","hashes":[{"alg":"SHA-1","content":"aee4023f29d5d73bbb7dedaa7187b2711b0a34e4"},{"alg":"SHA-256","content":"2f824d252e975f9a48384b691e02add8d85390aae1ee9e839cc3387d34b946c5"}]},{"bom-ref":"3c8026e825685d9a","type":"file","name":"/juice-shop/node_modules/npm-normalize-package-bin/package.json","hashes":[{"alg":"SHA-1","content":"11198c06f8e234719166cd7209046b80fc516ebe"},{"alg":"SHA-256","content":"67b169fe285b204b15486098d0811e526fdf0bfa1d06cfb67f51bcd59e056bd1"}]},{"bom-ref":"03fcdb7a95dba37c","type":"file","name":"/juice-shop/node_modules/npm-packlist/package.json","hashes":[{"alg":"SHA-1","content":"133a1af585371208c4017d29f13f33cd08dea5f9"},{"alg":"SHA-256","content":"55a0ee2e0cad20e525b8acf612ac1645f3fafa72721fde27e1a3b1e4a4aae7a0"}]},{"bom-ref":"c8510c9792f7fc81","type":"file","name":"/juice-shop/node_modules/npmlog/package.json","hashes":[{"alg":"SHA-1","content":"d655b0502579af043c389d145afe76ed496e3b0e"},{"alg":"SHA-256","content":"f88d2fef96cb03bfb402e22425b3b4214968f03d3c812e9c850fcdc5d7b9fd19"}]},{"bom-ref":"9aee14fa993fbb43","type":"file","name":"/juice-shop/node_modules/number-is-nan/package.json","hashes":[{"alg":"SHA-1","content":"b550ea20e6c7ed59ae2d8c0a384245bffab3f18e"},{"alg":"SHA-256","content":"242447f707a34988f6307983f56ab5efc4bee47dda47f931ad9d53ed9937c78d"}]},{"bom-ref":"1dda96d54cae256c","type":"file","name":"/juice-shop/node_modules/object-assign/package.json","hashes":[{"alg":"SHA-1","content":"13257489764dfb0dfce9cf643096047658a826d7"},{"alg":"SHA-256","content":"5990bbffa235fc675debd925d50f6c3f48a2b4526d8c9f7555cadec9029d0d7f"}]},{"bom-ref":"0f1122957614bafb","type":"file","name":"/juice-shop/node_modules/object-copy/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"9630fedbcbccc883892f78a2b21184ef87e6b9bd"},{"alg":"SHA-256","content":"b999a380ba13fef8b973f3df54c1f11f2c8d97d4f5f691600508fa2b7108fe52"}]},{"bom-ref":"c09d84b4d69528de","type":"file","name":"/juice-shop/node_modules/object-copy/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"5b25f9cf1b1cbe731ebc6a083375947c7961278f"},{"alg":"SHA-256","content":"b8498c15313f99506d9f9d2e99c98668c77260090fa9ea358ee9449ecc89436f"}]},{"bom-ref":"50785f8d0c7d79b5","type":"file","name":"/juice-shop/node_modules/object-copy/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"54d030d54e9eb97c0ba0aedc39a45f169857672d"},{"alg":"SHA-256","content":"4fbd705c00cde2b9b29cf368f9accf1a057065ab8a349f1a5d27e5f10eee36ff"}]},{"bom-ref":"2ff6a037985df2a8","type":"file","name":"/juice-shop/node_modules/object-copy/package.json","hashes":[{"alg":"SHA-1","content":"c431e1c4af7c3b38a52d9643602ebf7526145a0e"},{"alg":"SHA-256","content":"038f2df0ae1284902e864641c743339854974fda88b523d4a85b3805ff19de8d"}]},{"bom-ref":"9cfb8e2538452b38","type":"file","name":"/juice-shop/node_modules/object-inspect/package.json","hashes":[{"alg":"SHA-1","content":"f59a216249b68601d6e44515c4f9188a2110cc50"},{"alg":"SHA-256","content":"21c5c63f653705f44a60f5fe93752b231caf6ff07b01805740bd89b71b2d6d8a"}]},{"bom-ref":"7115e6c35ad64b56","type":"file","name":"/juice-shop/node_modules/object-is/package.json","hashes":[{"alg":"SHA-1","content":"b37d4100f63846d229417569f747a582e0729f15"},{"alg":"SHA-256","content":"642cdbac75e401aa7ccb5c3a1ae12765dbf03ee9e844c6e2215114f8b0ad7f2f"}]},{"bom-ref":"b7d2989def537eb9","type":"file","name":"/juice-shop/node_modules/object-keys/package.json","hashes":[{"alg":"SHA-1","content":"e40c3de9648f3ccff16f512b6316c7f1981b5834"},{"alg":"SHA-256","content":"60128330481888bf0e83a713699bee6668c5948821ef06106d8c9613b6081b45"}]},{"bom-ref":"d30484e70d959312","type":"file","name":"/juice-shop/node_modules/object-visit/package.json","hashes":[{"alg":"SHA-1","content":"b861515009e7b9f0f81afc15def332c6eaedfb26"},{"alg":"SHA-256","content":"ad7c3bb7c49b64966135199579946c8a0e3789bab24000bafc3df46ee0e0886e"}]},{"bom-ref":"dc9d4e5dd339df9e","type":"file","name":"/juice-shop/node_modules/object.assign/package.json","hashes":[{"alg":"SHA-1","content":"450174ba31f98098017fbf306567e4273a95c328"},{"alg":"SHA-256","content":"982c86a45d0edc61215628380656301e17e5a7f83c9e3072b38dff6778b0e1aa"}]},{"bom-ref":"0af45a885ee9a969","type":"file","name":"/juice-shop/node_modules/object.defaults/package.json","hashes":[{"alg":"SHA-1","content":"e2e67e299fc4fc4f3a49c7d763bb40d9f8f952b3"},{"alg":"SHA-256","content":"49c2b0cbb2f4939b127392fe318b41d1304bca237e963bb264b09acd38c3a7e4"}]},{"bom-ref":"3b47f01fea11a47d","type":"file","name":"/juice-shop/node_modules/object.map/package.json","hashes":[{"alg":"SHA-1","content":"fc036829452a5b195d1139453fdd07550b7c95fa"},{"alg":"SHA-256","content":"a57d602ccb0e7d55a2b304aba41457457b46225682fe862c02374acb3c5c0c2f"}]},{"bom-ref":"5022f80c93a3a13e","type":"file","name":"/juice-shop/node_modules/object.pick/package.json","hashes":[{"alg":"SHA-1","content":"7a553ddd8f24c96892437678a12c8a2cdd804312"},{"alg":"SHA-256","content":"e48178e83342140e91433af2e90ae5d41b7d70058ef92e1afea3acb9149f991f"}]},{"bom-ref":"96078f5dc68e8d24","type":"file","name":"/juice-shop/node_modules/on-finished/package.json","hashes":[{"alg":"SHA-1","content":"777e9cd400b42dee1199eacfb325876caeaff3cc"},{"alg":"SHA-256","content":"c812eca4b0dee2317cb446124cb27ae8e5b993c8fdd0144886b629ef6ef53fc1"}]},{"bom-ref":"337b267b070c1552","type":"file","name":"/juice-shop/node_modules/on-headers/package.json","hashes":[{"alg":"SHA-1","content":"924744de2790eee065f7c1437c9d4757cab78730"},{"alg":"SHA-256","content":"86ef65dd0d349960bfc6a01292c1d40f49b064fffca48bd209a0e693c534a246"}]},{"bom-ref":"54c2b3525eaa18fa","type":"file","name":"/juice-shop/node_modules/once/package.json","hashes":[{"alg":"SHA-1","content":"b2456f0417ad4f7dec058401908740c4da1ee7ba"},{"alg":"SHA-256","content":"33840d74c14c94bfb75c76374765b635531b1eacb88d7f1f2f380c94d0ea1328"}]},{"bom-ref":"764e5d49cb6b09cb","type":"file","name":"/juice-shop/node_modules/one-time/package.json","hashes":[{"alg":"SHA-1","content":"a7cf310a3413d75cf4374823b2300cfe2dec3b24"},{"alg":"SHA-256","content":"95f439060816dac444a0bd628e9849fd0894afe8e9eb4110bd737daadad46175"}]},{"bom-ref":"cc3cb5266dd7d7bf","type":"file","name":"/juice-shop/node_modules/opentype.js/package.json","hashes":[{"alg":"SHA-1","content":"2017ce966b04df622563e99bb7966c3b36998e57"},{"alg":"SHA-256","content":"1cf7903eeaba55cdb56ba47ce893a3b104ccecd2e954061b5c5616529a9db69e"}]},{"bom-ref":"92d7bcbf82f0e504","type":"file","name":"/juice-shop/node_modules/os-homedir/package.json","hashes":[{"alg":"SHA-1","content":"36fa0ba7b479b41f98dde0822cc2a026bd5d7e14"},{"alg":"SHA-256","content":"465f469dc1dc630aa9347b28153da8b71d94b8fe87669bd1d49bc5b0eeeb364b"}]},{"bom-ref":"d057d2fa24d47628","type":"file","name":"/juice-shop/node_modules/os-tmpdir/package.json","hashes":[{"alg":"SHA-1","content":"48367dfdddfa0b59ba77d7c490da5ed3124275b0"},{"alg":"SHA-256","content":"708404ce657fbad57a4804f3ccfcda877e038b981fb9675aebcc57de91e95694"}]},{"bom-ref":"262b16b926a9a8a4","type":"file","name":"/juice-shop/node_modules/osenv/package.json","hashes":[{"alg":"SHA-1","content":"76ff6531fce9614d1e45fa45269bc021992e75f0"},{"alg":"SHA-256","content":"184e6e41648f04dcb0d7141210a54bc2213c2e856aad7fd8f93a0bab7eb519c2"}]},{"bom-ref":"eaf00157d2e6d2a3","type":"file","name":"/juice-shop/node_modules/otplib/package.json","hashes":[{"alg":"SHA-1","content":"a9593456a4d78c46e7fbd46b6c6315d4dda05fdc"},{"alg":"SHA-256","content":"6139765b3710a5a764f611df5e1d145cdbb618729b8eb9e52f3e094012131dde"}]},{"bom-ref":"1aaef72517bab513","type":"file","name":"/juice-shop/node_modules/p-cancelable/package.json","hashes":[{"alg":"SHA-1","content":"1916b879c05ff7c43c6506dabd376267b118ad23"},{"alg":"SHA-256","content":"a65bb176766f5b9eb222552c19d553637ab89a572a7d1a37aea1c38348e353c0"}]},{"bom-ref":"f30277ac919aa673","type":"file","name":"/juice-shop/node_modules/p-event/package.json","hashes":[{"alg":"SHA-1","content":"9828dde97e4d989a4e855f4338d18543162103f8"},{"alg":"SHA-256","content":"35131b3ecb0dfec3dec4ffae014374deca7ed3c1fea16165f9bfc5fa55f4ad64"}]},{"bom-ref":"9775c9a14c53b5ea","type":"file","name":"/juice-shop/node_modules/p-finally/package.json","hashes":[{"alg":"SHA-1","content":"29a603e1e24363c6a469d6922dd71dea18d4a32d"},{"alg":"SHA-256","content":"a96137ab1fb624d4e5fe2b6413417565e72323e709268eab8a790ea51eeda6dc"}]},{"bom-ref":"ee2039b868552654","type":"file","name":"/juice-shop/node_modules/p-is-promise/package.json","hashes":[{"alg":"SHA-1","content":"5ec1f21e446cce1704f5bebd6c76308c624b3088"},{"alg":"SHA-256","content":"f320222ce152d59bbaa210d7b9f6c0b46c1be5f8b941aaa79388cfb84d63867a"}]},{"bom-ref":"809d47df0a86110b","type":"file","name":"/juice-shop/node_modules/p-map/package.json","hashes":[{"alg":"SHA-1","content":"5f275de37ed635969b147d1adac21fd6d36ced42"},{"alg":"SHA-256","content":"6f0aeb7043d0737e5bcaf8c2bf83b4a8ded247922aca592d684e37499d028ae7"}]},{"bom-ref":"2bff54e6f759f741","type":"file","name":"/juice-shop/node_modules/p-timeout/package.json","hashes":[{"alg":"SHA-1","content":"100425335fbce935be2397458b04276a845443ae"},{"alg":"SHA-256","content":"e95b82abb3ca8493c57213efdc80556eaf4be8409ca12dae831428c080c2c289"}]},{"bom-ref":"d452181b4c650be2","type":"file","name":"/juice-shop/node_modules/p-try/package.json","hashes":[{"alg":"SHA-1","content":"37f6698fd2ca69e00a1b747e374f1eb3d99954b0"},{"alg":"SHA-256","content":"ff793c821f36985cde9f9d9ff6297e6c1304f8e597aa2d48dc53eda83c11e54c"}]},{"bom-ref":"844a5c45781ee303","type":"file","name":"/juice-shop/node_modules/package-json-from-dist/package.json","hashes":[{"alg":"SHA-1","content":"d93947bd52021bb5f785613249e0e198a3b48025"},{"alg":"SHA-256","content":"38fdaf168bc63a6422a7dbe7e41a7b52b02326edef8b14019e0333ef60b37b47"}]},{"bom-ref":"ed8b792e4c2e1b66","type":"file","name":"/juice-shop/node_modules/pako/package.json","hashes":[{"alg":"SHA-1","content":"d10e69957646e41e179176878d2a3de76aaf4f13"},{"alg":"SHA-256","content":"dc1090fc2228e15fb13cc8aa81f3c99c9c0a4237f99a42d1c7ffda1b137cf1cf"}]},{"bom-ref":"dc3bf992f39af6b7","type":"file","name":"/juice-shop/node_modules/parse-filepath/package.json","hashes":[{"alg":"SHA-1","content":"a22d4709dc4be9310d39c64ec4f03233201f3d7d"},{"alg":"SHA-256","content":"1a299df30f2845bc3e8529b1833806d7e85914d9ce19b6ebe57d5a553399adba"}]},{"bom-ref":"d41a9b057a97624a","type":"file","name":"/juice-shop/node_modules/parse-passwd/package.json","hashes":[{"alg":"SHA-1","content":"25fb0f091c688a3376145c783fd823aa6fd93b82"},{"alg":"SHA-256","content":"0ddfc8e12d83546f17c0a269d47eaad6f74aab078ab1da742097823fba730eee"}]},{"bom-ref":"546bac2a8b79cd4b","type":"file","name":"/juice-shop/node_modules/parseurl/package.json","hashes":[{"alg":"SHA-1","content":"646dc756ff16c464fcb63e17b2cd5ee4ad4f8b66"},{"alg":"SHA-256","content":"98c7b953c844cac7c0be2d5abc6559c6fd3a6075fd159b04c0f1bf46145bfed2"}]},{"bom-ref":"1b74ea70bedc57b1","type":"file","name":"/juice-shop/node_modules/pascalcase/package.json","hashes":[{"alg":"SHA-1","content":"2a48fb470b49b29cf3f97ccf63b22feee5be71f2"},{"alg":"SHA-256","content":"d4e337414d0c50c3475b0d483363a4c51d804436fe66a3612b1e474722b8a6fb"}]},{"bom-ref":"04a82a1bceba279c","type":"file","name":"/juice-shop/node_modules/path-exists/package.json","hashes":[{"alg":"SHA-1","content":"dc362acdf83f36298d8ea6c823ac1d0b3b2096ea"},{"alg":"SHA-256","content":"5e258d1a0d185ae469fec34de2af18913421b94181ef61238efcfe0b00d1b2c3"}]},{"bom-ref":"eaef96b0e40c4716","type":"file","name":"/juice-shop/node_modules/path-is-absolute/package.json","hashes":[{"alg":"SHA-1","content":"51b80416ea8aff0f6f04b15ee2e114250ba1a14c"},{"alg":"SHA-256","content":"be5b83877f6998b840b9365d7ab77e885f0d583337826c22daccaeb6e303fd4c"}]},{"bom-ref":"d0deedb0552323b7","type":"file","name":"/juice-shop/node_modules/path-key/package.json","hashes":[{"alg":"SHA-1","content":"f330c46f59dbdd92dddf8a2cfc2c1569b469bdd2"},{"alg":"SHA-256","content":"25594dab72681c910d9cc919263a4daf27d77a75e0d2c26a4d958d6d6b798f86"}]},{"bom-ref":"dd4d4c3952aaa7ae","type":"file","name":"/juice-shop/node_modules/path-parse/package.json","hashes":[{"alg":"SHA-1","content":"6ea9437323546aaaeb28afa33d0c9c7ed03e93a5"},{"alg":"SHA-256","content":"9c680ecfd322afe056b4ccbfdb6c7043342276903f017c0a29b77c3926790d13"}]},{"bom-ref":"4b9a104273d7c22d","type":"file","name":"/juice-shop/node_modules/path-root-regex/package.json","hashes":[{"alg":"SHA-1","content":"715724f361b739f0c9721f038f1bd8b2bcbe5d60"},{"alg":"SHA-256","content":"dc054d43f815636a3dbb6d82a610289afd57b61c18b6e18f7c1f800f15f74ff4"}]},{"bom-ref":"c78e9db70514e598","type":"file","name":"/juice-shop/node_modules/path-root/package.json","hashes":[{"alg":"SHA-1","content":"0c48e82e37942bc5a594e8ddddf7f83ce3e0633a"},{"alg":"SHA-256","content":"03a07ba10675a90d6eda6eccb2f138aa6c0980db2e30ff7b3f9a1a20f140022b"}]},{"bom-ref":"9901f198a3ad41b7","type":"file","name":"/juice-shop/node_modules/path-scurry/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"eba45f816c43b1e505440b7a7f8392e38ba11306"},{"alg":"SHA-256","content":"a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d"}]},{"bom-ref":"553caca23c1a5523","type":"file","name":"/juice-shop/node_modules/path-scurry/package.json","hashes":[{"alg":"SHA-1","content":"57ceeacc9d50abbd7e370e6a697520cc0784baa6"},{"alg":"SHA-256","content":"eda5ff683c26f88a134198fa2700b371abc9092c61a81474226bdfc6f9348c14"}]},{"bom-ref":"50d1742f31503d5d","type":"file","name":"/juice-shop/node_modules/path-to-regexp/package.json","hashes":[{"alg":"SHA-1","content":"44757af0fb6ee492a2f88ce7c226eac7d1bd9f02"},{"alg":"SHA-256","content":"39441795d309275bbe74b5836e34e6ab41feb31d74d37d54fca1090339fe6425"}]},{"bom-ref":"f5d070aff7604166","type":"file","name":"/juice-shop/node_modules/pdfkit/package.json","hashes":[{"alg":"SHA-1","content":"dc640b6b8ac5a82bd10be32a77fb21287dd4e25e"},{"alg":"SHA-256","content":"c839357686687a89e09118af96877e008463f9ec73743bd942393a1e1c8d2c2b"}]},{"bom-ref":"39ef62fef2455d41","type":"file","name":"/juice-shop/node_modules/peek-readable/package.json","hashes":[{"alg":"SHA-1","content":"046bccda296eb83ebe6419bcca8d83b6bc38cc0b"},{"alg":"SHA-256","content":"7be739e6dd2c01c1246559662feba2794332d16e28ef9927fdcb5f8ecd47f510"}]},{"bom-ref":"f5fd53ac0076d262","type":"file","name":"/juice-shop/node_modules/pend/package.json","hashes":[{"alg":"SHA-1","content":"bcc6ba00d4e6de6354b46bc7687d946fe6a1446d"},{"alg":"SHA-256","content":"1e4f01d39cc13c261f7ab81d0509d36bd98d8eceaf9ed75f2ab274286f3c3920"}]},{"bom-ref":"08c2f01e32a805bf","type":"file","name":"/juice-shop/node_modules/pg-connection-string/package.json","hashes":[{"alg":"SHA-1","content":"97c017fd2386cb88ee4164e1de9714b731956a3b"},{"alg":"SHA-256","content":"cb6a56ff8e49fea4df1512d8129db95a0229193eba6850619be15c001853594e"}]},{"bom-ref":"0e44ec2b2d71f201","type":"file","name":"/juice-shop/node_modules/picomatch/package.json","hashes":[{"alg":"SHA-1","content":"82a55c764518c102b45acb6b097bdfbc6ba874fa"},{"alg":"SHA-256","content":"39b4c548570b67f5a07fb596e2e102ad8b373f83a86d761d13df6d911f9a784c"}]},{"bom-ref":"fe1cf15d4b6734f7","type":"file","name":"/juice-shop/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"920b385a20c890185d57e5ea1dcc86e3ff4d51a7"},{"alg":"SHA-256","content":"6f3beed79477c32ec1533609a75bef5cc3998e96657277519b3d66bfcc6d046d"}]},{"bom-ref":"b5d97ea26eb5c9af","type":"file","name":"/juice-shop/node_modules/pinkie-promise/package.json","hashes":[{"alg":"SHA-1","content":"737766e86a40fa8b428ab9528b41bcc88430757b"},{"alg":"SHA-256","content":"0be4b7f157d8f59a1e9f3358c8ffc374e0350467ecebea59f795a49639115eb0"}]},{"bom-ref":"27b4d33f8bd59bcd","type":"file","name":"/juice-shop/node_modules/pinkie/package.json","hashes":[{"alg":"SHA-1","content":"b110de0e6bdd8dca481c37b9defbcbced1e414a8"},{"alg":"SHA-256","content":"afcd1666f0ca44b0ffe0587fbd1db52799334626cb121ef4eaa1780a9951dfb7"}]},{"bom-ref":"ea2bbe1a56284d01","type":"file","name":"/juice-shop/node_modules/png-js/package.json","hashes":[{"alg":"SHA-1","content":"b0ff53deb53ab5662bffc9d2f9a43cddf48ebfa7"},{"alg":"SHA-256","content":"0c880ac699010e47ab91ec98f3756ac54291706721829572932e67e8faf71cf6"}]},{"bom-ref":"30425bc7c6a4f3aa","type":"file","name":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"5da55b9a896c8eed5f30013777ffbc8181bdfa67"},{"alg":"SHA-256","content":"180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"}]},{"bom-ref":"60fcc29b3ff45312","type":"file","name":"/juice-shop/node_modules/posix-character-classes/package.json","hashes":[{"alg":"SHA-1","content":"9ba4c2d3cdcdd1b494cbf744d03395441a4098dd"},{"alg":"SHA-256","content":"2809c4891110ae872b5af2c1268f46ffd80e6d31689a03b75eaa544566d4e367"}]},{"bom-ref":"0a700afd19f4524b","type":"file","name":"/juice-shop/node_modules/possible-typed-array-names/package.json","hashes":[{"alg":"SHA-1","content":"23814e5ed3fdcea6f3c2e3299c1b9af685ba7c50"},{"alg":"SHA-256","content":"0ff73753495cfff4556a5f8b7847ba1c06530341986e642a8637c6db74d87894"}]},{"bom-ref":"325d8ccd31785ea0","type":"file","name":"/juice-shop/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"e94e270dc48d57def16e7e6e55f92a2a87e90f4b"},{"alg":"SHA-256","content":"3a1c35a4b0d10d5f721dea267fdbf9981c37d13ffdd0fbd97044c5f1fcbcb026"}]},{"bom-ref":"100596bc4a78e03c","type":"file","name":"/juice-shop/node_modules/prepend-http/package.json","hashes":[{"alg":"SHA-1","content":"a8b03b82dbd901db3e7c35f46d9ff9ed842fb6ac"},{"alg":"SHA-256","content":"310e7bb7d9e8be40ffd7a01972f41b43b14865db69290a157e748198544d9b0b"}]},{"bom-ref":"3e3bde32004fa0a7","type":"file","name":"/juice-shop/node_modules/proc-log/package.json","hashes":[{"alg":"SHA-1","content":"ef77e00bb180e2d474ef8ec427d3ddb2dffe8b60"},{"alg":"SHA-256","content":"636f411adcca5bcfec9c68ee39ce18f3ee00d27934dbbcde3c6635929faceb85"}]},{"bom-ref":"6b0a9a103219501d","type":"file","name":"/juice-shop/node_modules/process-nextick-args/package.json","hashes":[{"alg":"SHA-1","content":"75936b9172e05098607a006de74399060a53a79c"},{"alg":"SHA-256","content":"6d6d93d057f39bc3173d53e694b61833fd0ce89c1d669156169136d31a968131"}]},{"bom-ref":"b5ce6eb6a97b9598","type":"file","name":"/juice-shop/node_modules/process/package.json","hashes":[{"alg":"SHA-1","content":"266a0cf0da901a3bdd4ab76d0ba9032640455ca3"},{"alg":"SHA-256","content":"8501b4909630e60c9e9f68c4ca8ccb1964688500e61c60408a26d5480a9dd3d4"}]},{"bom-ref":"dfee6852531e4af1","type":"file","name":"/juice-shop/node_modules/prom-client/package.json","hashes":[{"alg":"SHA-1","content":"4872cb11562cf75991f7540f3d72892194be2ac8"},{"alg":"SHA-256","content":"c1a54b7367d3ed23cd955158efb260ea26d1fe9a9c391d805733524ef3ef3637"}]},{"bom-ref":"9cb0b485a339b1b7","type":"file","name":"/juice-shop/node_modules/promise-inflight/package.json","hashes":[{"alg":"SHA-1","content":"46be8c622d5a7a8c74a905df7eafb893fdb8a965"},{"alg":"SHA-256","content":"386697ebbf39442f0570d59c851e00ca22330a0a5ce3f389b621f6a0d6d7517a"}]},{"bom-ref":"6e3320e667ff6466","type":"file","name":"/juice-shop/node_modules/promise-retry/package.json","hashes":[{"alg":"SHA-1","content":"fc649cbedea73287db37a431e5761e9c0b4abca9"},{"alg":"SHA-256","content":"71c2995725304ffa82e03be2c21e83f3b7c0c557846df88aaed0f2b9fa75d911"}]},{"bom-ref":"c9a0d014868bcda7","type":"file","name":"/juice-shop/node_modules/promise/package.json","hashes":[{"alg":"SHA-1","content":"521b2aa15341f7fa10ae150c4aff97fdbdc755d7"},{"alg":"SHA-256","content":"86c20e9c15f4d9f1fdbde8abe56ffc37ae69deffbf3ffd1ecb88712cd0da79a5"}]},{"bom-ref":"832dbf6d0204c592","type":"file","name":"/juice-shop/node_modules/proper-lockfile/node_modules/err-code/package.json","hashes":[{"alg":"SHA-1","content":"73aea06cb5e5f59d7e3606c8ef2a286376c7b3ae"},{"alg":"SHA-256","content":"7848517bac5fd10abd76cd21b360b36ee2a444ee8d02e0f64fcbd6fde6d23628"}]},{"bom-ref":"797f8e75f798bf0f","type":"file","name":"/juice-shop/node_modules/proper-lockfile/node_modules/retry/package.json","hashes":[{"alg":"SHA-1","content":"b66fee7ae17c1645f8993eb5b0d51dafb0fa54f0"},{"alg":"SHA-256","content":"1d20fd96a0d3c332937b99f41b64336872f9a78679ce75a5be6a4efb1bc6876f"}]},{"bom-ref":"6762a07a9f33fba5","type":"file","name":"/juice-shop/node_modules/proper-lockfile/package.json","hashes":[{"alg":"SHA-1","content":"8d5ebe5b9ba61918d5533be20640e436a0f59ad7"},{"alg":"SHA-256","content":"5941711e237eaf1b8889839f8c1bd2796bf319cabfb87e14b612535c05db570d"}]},{"bom-ref":"c16f1be1d06e39c6","type":"file","name":"/juice-shop/node_modules/proxy-addr/package.json","hashes":[{"alg":"SHA-1","content":"a04c60d6b2441d6e2a6ebddcab75aa6efc2d1d9c"},{"alg":"SHA-256","content":"e490a79f8058cbb7c0e9fd3b9977013102b5cbd8d232259b93bb2ebf85834a51"}]},{"bom-ref":"8de244292dd4a6d1","type":"file","name":"/juice-shop/node_modules/pug-attrs/package.json","hashes":[{"alg":"SHA-1","content":"b6adb0c7677506fb099c945daa2fade50883dc13"},{"alg":"SHA-256","content":"d064880b628e0ddc37c08af0da95486766c2eb313163c887a21996d5c96dce86"}]},{"bom-ref":"aa33a9eeddd61ffe","type":"file","name":"/juice-shop/node_modules/pug-code-gen/package.json","hashes":[{"alg":"SHA-1","content":"f42160fdfc8b1f4987fa0c1e0480c3baf4c99819"},{"alg":"SHA-256","content":"cfddb87d1f113279c8a1118e1c8d6163ab786634701affb6a3b1fa8b65020abb"}]},{"bom-ref":"9ee2e6727228a6e5","type":"file","name":"/juice-shop/node_modules/pug-error/package.json","hashes":[{"alg":"SHA-1","content":"6b67957081e9f303679cd5f7c4519b101e917879"},{"alg":"SHA-256","content":"6927ab8cdb89570d57b34d5953786ae2b56b89560301d452bc95c7519aa62212"}]},{"bom-ref":"6b716087dfc41a48","type":"file","name":"/juice-shop/node_modules/pug-filters/package.json","hashes":[{"alg":"SHA-1","content":"7a57db8c52388e0e345d522793b8842cd8d28ddc"},{"alg":"SHA-256","content":"88d2560b67ad36dafaaf59bfba4d42aa8aad7e96f181f37e067227b267924037"}]},{"bom-ref":"0941f68ecde2d333","type":"file","name":"/juice-shop/node_modules/pug-lexer/package.json","hashes":[{"alg":"SHA-1","content":"6c1c883900e11b3b22227f99d97cc525d19989b0"},{"alg":"SHA-256","content":"c49fbdee905f6f11a937a56b458e041e26bc418c3c29bd8d87603bd165a23944"}]},{"bom-ref":"da0c4374d5f4ef16","type":"file","name":"/juice-shop/node_modules/pug-linker/package.json","hashes":[{"alg":"SHA-1","content":"1696fada4ca8ba8097ef2cfa28d4337ba7607d4f"},{"alg":"SHA-256","content":"e284fe50d7618ddf9a8a32a6fce649ffc1cd5bec45e01ecf282878599d41db4d"}]},{"bom-ref":"9e555d45e56d2d5a","type":"file","name":"/juice-shop/node_modules/pug-load/package.json","hashes":[{"alg":"SHA-1","content":"e13cea3113c17bdd86ca3eb40af38c2e1295706f"},{"alg":"SHA-256","content":"04f9984f732962d8da625959b64c0d8ef4f7e1e5710a08109dd86e730a35dce6"}]},{"bom-ref":"62cce328d24adf0c","type":"file","name":"/juice-shop/node_modules/pug-parser/package.json","hashes":[{"alg":"SHA-1","content":"d111b223e7ec673a31910cda43a2ef7d4b2da1b9"},{"alg":"SHA-256","content":"b43513e8ce41a63f8cfc55e4dc9ab984f30660038837c734a1af60e0f3395bad"}]},{"bom-ref":"bac47d0a64e4359b","type":"file","name":"/juice-shop/node_modules/pug-runtime/package.json","hashes":[{"alg":"SHA-1","content":"8318bca8d15260b136ef57deff7a05b199dff789"},{"alg":"SHA-256","content":"7ec7b608c7bad13a87cf6def1504d52e9bbb9aa342a79377513c58b9a85407a2"}]},{"bom-ref":"4e6f765397dd1760","type":"file","name":"/juice-shop/node_modules/pug-strip-comments/package.json","hashes":[{"alg":"SHA-1","content":"d7037a265da4f9e91a6310af25e40ed858a33ebb"},{"alg":"SHA-256","content":"e499b0bb59d0755058031cd3a614c9ad196757ec3b36a761673f881592bb8d8f"}]},{"bom-ref":"b42028355b98f2c9","type":"file","name":"/juice-shop/node_modules/pug-walk/package.json","hashes":[{"alg":"SHA-1","content":"8d626183f9c9d359642139d252f7654feae0d189"},{"alg":"SHA-256","content":"3073874b1942b8fa10554e527a2dd8a25ba98b4bf7352f4c1c26a5c272bc47e2"}]},{"bom-ref":"026360178605d54c","type":"file","name":"/juice-shop/node_modules/pug/package.json","hashes":[{"alg":"SHA-1","content":"06de10246ab6d726f7dec52629480f572bf55a91"},{"alg":"SHA-256","content":"ab8c1149e6344596a854ee1267f2cf365bc90341a0d17f50620a467a320320d2"}]},{"bom-ref":"c37640865869f398","type":"file","name":"/juice-shop/node_modules/pump/package.json","hashes":[{"alg":"SHA-1","content":"60edca6fc589a9a2d86ff2724b42634a699fc152"},{"alg":"SHA-256","content":"adfb35f1acc31a99032086d259599397140da825f34924d31563b92eebdc3e33"}]},{"bom-ref":"3efd9128a8bd0978","type":"file","name":"/juice-shop/node_modules/qs/package.json","hashes":[{"alg":"SHA-1","content":"9c50c7c78f48501b78aaf6a599646c07d3f976ea"},{"alg":"SHA-256","content":"9a7c5e45d5a498ef79a4471511e389bbdfaa8737d0fdabb9db873b9cf09a733d"}]},{"bom-ref":"93ce3b69d3ba4a7a","type":"file","name":"/juice-shop/node_modules/query-string/package.json","hashes":[{"alg":"SHA-1","content":"e8cc4ec989ecb29722e4e4e683c1ec41e3181fa3"},{"alg":"SHA-256","content":"eb68a1c5d0725473fd4a6b2fe86a3858cdf56ab74971461c1e16000faff7cb9b"}]},{"bom-ref":"0c1ad72e5b2102e4","type":"file","name":"/juice-shop/node_modules/range-parser/package.json","hashes":[{"alg":"SHA-1","content":"e82a50d4be1c57ded40bf39a5232bf5c6dabb46d"},{"alg":"SHA-256","content":"d0b5f54eaa59001dc86720a9be1fdf653bad83707d70842332fb3e8847f65a89"}]},{"bom-ref":"ff97ef647320ab00","type":"file","name":"/juice-shop/node_modules/range_check/package.json","hashes":[{"alg":"SHA-1","content":"dab1ef784249ced9cec139f8ab8116ef52b3c492"},{"alg":"SHA-256","content":"2c24bfbea87b799d13ddf1abf348cd5343b811cfdc37a0e350a9456ce53405b7"}]},{"bom-ref":"e88d2ee1fb9d7a83","type":"file","name":"/juice-shop/node_modules/raw-body/package.json","hashes":[{"alg":"SHA-1","content":"96d635b6625ad7b5727b25ed22d5fb8eccec0276"},{"alg":"SHA-256","content":"371d95a705fbdf75bf820e49f7e329a5ba48a7b3a37eb12efef3029493318c13"}]},{"bom-ref":"e2bf72e56e149ad4","type":"file","name":"/juice-shop/node_modules/rc/node_modules/ini/package.json","hashes":[{"alg":"SHA-1","content":"14b52ea8911e4e9f89acb4d876e87755e54529e2"},{"alg":"SHA-256","content":"8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"}]},{"bom-ref":"dbc2011b5d70af47","type":"file","name":"/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json","hashes":[{"alg":"SHA-1","content":"d33064d55afd32cee36afe2ef20a37d1e80c2967"},{"alg":"SHA-256","content":"52fba89a1d2724dfeafa21ec58f8c4a8a210103cc6b65b4468ab3fb973ad1753"}]},{"bom-ref":"08163399934cb73b","type":"file","name":"/juice-shop/node_modules/rc/package.json","hashes":[{"alg":"SHA-1","content":"19966e2b4994a704ea472a1ba1eb8e1d14f446d8"},{"alg":"SHA-256","content":"96f035349a8e6034d380348ec3d454ed8ea3a602c7a5700eb36ff48310bdbe9f"}]},{"bom-ref":"c92be20dfc0984c2","type":"file","name":"/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"e4a5d79d5ea9366beb66cf993d11b88603e6333e"},{"alg":"SHA-256","content":"93165ce56e458216c18240cd961a522af5b18e51da06f55d88ac552234455d95"}]},{"bom-ref":"908b46ccaa174c8a","type":"file","name":"/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"8d1a32f07a32e465","type":"file","name":"/juice-shop/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"33a4118b015167682f053d85f7bb21b9ff9d161f"},{"alg":"SHA-256","content":"67bde829e31cba3f50c77d14a30fa0f2295223b7ffa07f3b84606a5a79bb97f8"}]},{"bom-ref":"8a1c328d472ed17c","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","hashes":[{"alg":"SHA-1","content":"3156a9cd35dc750bebc2eaaf42a5933c8ee6b892"},{"alg":"SHA-256","content":"5b105ac0abbf5985cbe62ad28a34032d85c7ef623e0eb01f39441b0feb419004"}]},{"bom-ref":"f1192ccbe702a5e3","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"a2e7e379ccac07b02eddfa67746a0e521f5a4878"},{"alg":"SHA-256","content":"246e18f32bc77525436b73f8ac600560f246f9bc05a36dedc07f448ae19239ac"}]},{"bom-ref":"b0b9e1ce187de8e7","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"3e519b003fbce961f41cc48fa4237c6debda1266"},{"alg":"SHA-256","content":"31984c85cd4f3df0aa75075acdec98c25961496897d1f46d04ed4a701f129c54"}]},{"bom-ref":"42f353f0254a98e7","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/package.json","hashes":[{"alg":"SHA-1","content":"b48d8b20ab930e5208848273443f9bf3bb368df4"},{"alg":"SHA-256","content":"3ee3a77f8bf8c288745aec229244cb79b63b9959a9b7c8ee18e326286976bc6e"}]},{"bom-ref":"fb9de125c5bf0943","type":"file","name":"/juice-shop/node_modules/readdirp/package.json","hashes":[{"alg":"SHA-1","content":"157901809959f68777047aa6a020c6a7be323255"},{"alg":"SHA-256","content":"14aa1c9d06048067c12990c3afee5fb0f310c9d4432f901fc0850426e9e15864"}]},{"bom-ref":"6636f29643699cfa","type":"file","name":"/juice-shop/node_modules/rechoir/package.json","hashes":[{"alg":"SHA-1","content":"074780fd0c9b73b6950e8d1575af5ff4b663414a"},{"alg":"SHA-256","content":"e63b051cbcd61e17c3ab84c9bd7315929c5425d7fbb91007a04245abf867a4b2"}]},{"bom-ref":"f48c167ad787344f","type":"file","name":"/juice-shop/node_modules/regex-not/package.json","hashes":[{"alg":"SHA-1","content":"c9f680ab670b03a6c63a80c89507ea2959f146de"},{"alg":"SHA-256","content":"ca1678f7a5f12d061bba346c8295a57e50b34791c0da06189384a3a08a2dfd36"}]},{"bom-ref":"399b6c6e3ea031d3","type":"file","name":"/juice-shop/node_modules/regexp.prototype.flags/package.json","hashes":[{"alg":"SHA-1","content":"f0b903f5607a2b6b97708e20a940efbf3d896589"},{"alg":"SHA-256","content":"03b311526afa87b388a05af86fb9ad86331888d2b5ef260e635c9023a9a14a1e"}]},{"bom-ref":"fcabc450ef830c7a","type":"file","name":"/juice-shop/node_modules/remove-trailing-separator/package.json","hashes":[{"alg":"SHA-1","content":"ca8ba920e17ef8348a3064c5705d3f90dac8b26f"},{"alg":"SHA-256","content":"5d1595f6fe1dc0db45fd3a05a64f0e5719b8af55ebd769f0bcba0ff6e7f8d7a8"}]},{"bom-ref":"358838e8c88cf6eb","type":"file","name":"/juice-shop/node_modules/repeat-element/package.json","hashes":[{"alg":"SHA-1","content":"998b30b4df691225c6688a8a9e1024148c53672c"},{"alg":"SHA-256","content":"9ee724bc05dba9deae2dc1d3ce8f8b2dba07f0866ccb29b7037d3405deab5865"}]},{"bom-ref":"fe9c3a950e5ac092","type":"file","name":"/juice-shop/node_modules/repeat-string/package.json","hashes":[{"alg":"SHA-1","content":"20646dfacb0f9f85f117ea5f503e3001664a1b57"},{"alg":"SHA-256","content":"dd718b676965bc48a769b675dd6f96a619d7e5786a059700cc3f87ab49bbb109"}]},{"bom-ref":"9da3f8404fa2914d","type":"file","name":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"7a9a0444cef3f482","type":"file","name":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"d68fd2dc3d123bd0","type":"file","name":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","hashes":[{"alg":"SHA-1","content":"3a61c252373aa1eeb6b761d39d33baac564ac4ab"},{"alg":"SHA-256","content":"aefd282b90d2d0a055f3b40bbd2010531ba7cbf902e76a314fe09fe777491814"}]},{"bom-ref":"baf6720ec801981e","type":"file","name":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"6ca6f775492b8a4e","type":"file","name":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"1b34401bb71890ef","type":"file","name":"/juice-shop/node_modules/replace/node_modules/find-up/package.json","hashes":[{"alg":"SHA-1","content":"5ca7872ad39eee7733cc76e3842bc670c99f8829"},{"alg":"SHA-256","content":"19b9626d190ae97ecbc47843ff5781c462b6acfca35a2652dccded7d046dce53"}]},{"bom-ref":"466671ea94961efc","type":"file","name":"/juice-shop/node_modules/replace/node_modules/locate-path/package.json","hashes":[{"alg":"SHA-1","content":"5f601eecc68d9b9eaf032912bf0326dafd3dc485"},{"alg":"SHA-256","content":"6fb0681c3501741d68594c69a0baae9f558f2d426c136946f2c7780a8c5e27bd"}]},{"bom-ref":"c8abe4e1c8a67cf0","type":"file","name":"/juice-shop/node_modules/replace/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"280930d830662d7377fd7dcdaa659e3d536b71c2"},{"alg":"SHA-256","content":"3b73bedeed5d09d561ddac7e212eb37e3eb37f0daba8738e59607ce1caaf93ed"}]},{"bom-ref":"caab702526f271f9","type":"file","name":"/juice-shop/node_modules/replace/node_modules/p-limit/package.json","hashes":[{"alg":"SHA-1","content":"fce4cfb0ed8e8882a02082db5cec1437a90e2fdf"},{"alg":"SHA-256","content":"d4529e88d06488042103f25322b0b60d90dfc5de0ed61c3b7c7d27f2ac3fe1bb"}]},{"bom-ref":"91d851836f13e440","type":"file","name":"/juice-shop/node_modules/replace/node_modules/p-locate/package.json","hashes":[{"alg":"SHA-1","content":"2a78ada043c0e10bff3b34fbbe5d1adb181b7c56"},{"alg":"SHA-256","content":"26d44c5d05942d6b315ecde2f3dcf78972cfb3b4c81c932ac2573d3eea5f5e94"}]},{"bom-ref":"04ec62ed51916de0","type":"file","name":"/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json","hashes":[{"alg":"SHA-1","content":"1fbb028113b65f2616bec5fc66afee5f329607ad"},{"alg":"SHA-256","content":"ee3d1495da354ea19d3900e3f28a4e93cc202966623fee4ad6fe54346b385075"}]},{"bom-ref":"4deb5b687855d525","type":"file","name":"/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json","hashes":[{"alg":"SHA-1","content":"728222492ccbc98db8f25613d6997f7524b9130e"},{"alg":"SHA-256","content":"2de71e9a1ff3e5bce791f5e3de66e1ad86f4f143d8c3ce4fbaad7a615e5c5e70"}]},{"bom-ref":"5edbb2f5369e2275","type":"file","name":"/juice-shop/node_modules/replace/node_modules/yargs/package.json","hashes":[{"alg":"SHA-1","content":"58caaec51e509a371e3df929a919a3157fdbfc7b"},{"alg":"SHA-256","content":"be417ad995e4f608d6f5243ad90b28f3f2604c73abb30d72382ae13358a74949"}]},{"bom-ref":"51068d88843aa723","type":"file","name":"/juice-shop/node_modules/replace/package.json","hashes":[{"alg":"SHA-1","content":"e3cc0e70d0bcee319ee831c0682c59b61ad3fb03"},{"alg":"SHA-256","content":"5c88ee721365a797b5846c260e968912c5de3b1966d843e8f8f0aadeea3421b6"}]},{"bom-ref":"f4ab91fe0e58a151","type":"file","name":"/juice-shop/node_modules/require-directory/package.json","hashes":[{"alg":"SHA-1","content":"a2e7fa658504a11868812ca0f9f8b08433bc2e3a"},{"alg":"SHA-256","content":"5690bdddd6eb4abd795fa5319df7552279508df9d562d571e3132ddff3045a71"}]},{"bom-ref":"67b4e5c15bb1ac11","type":"file","name":"/juice-shop/node_modules/require-main-filename/package.json","hashes":[{"alg":"SHA-1","content":"670907eeff6a76b76996f639a5e71a8cea7ed603"},{"alg":"SHA-256","content":"cc3853357a59a82c9a0e5cebbe52221eccc4a52bced4557300b69bbec17fa41b"}]},{"bom-ref":"2ce2faadf7fa1c8e","type":"file","name":"/juice-shop/node_modules/resolve-dir/package.json","hashes":[{"alg":"SHA-1","content":"b6147edfc55437b27388119c5ff8ce89eb4208fc"},{"alg":"SHA-256","content":"c124e4c2746edf4bd9322cb823ce1b4e0168ed393bfe2e6eecd8d12a47498d05"}]},{"bom-ref":"5d0115509aaa2aa6","type":"file","name":"/juice-shop/node_modules/resolve-url/package.json","hashes":[{"alg":"SHA-1","content":"ffeb3657769eea9f75497874896b131bc23f6b6e"},{"alg":"SHA-256","content":"9263bada694d57c6a441b3fed7901eab5c70b944fb58411e7341d55e83f91212"}]},{"bom-ref":"68f7e8772802f6af","type":"file","name":"/juice-shop/node_modules/resolve/package.json","hashes":[{"alg":"SHA-1","content":"d6cd8dab72951fe86cc7178bc25e4eb68fa26587"},{"alg":"SHA-256","content":"ee5d2ef47e108920c9285f6e9ad4bd7088f1f6bfec9da54e49af28ca775a288c"}]},{"bom-ref":"21ad1b62200af804","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json","hashes":[{"alg":"SHA-1","content":"0e5f7a5ddaf05e7d5a39fc67bbc4993de92e9012"},{"alg":"SHA-256","content":"cd33f816f635bcf9cdbe5a13d877bc8901a1a90819b1d73c16b35b6cdbebecaf"}]},{"bom-ref":"640bc0610931c0f8","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json","hashes":[{"alg":"SHA-1","content":"e5a9d36b5a39fc1f1c257ca949df43dd40a265ff"},{"alg":"SHA-256","content":"2857c211f81109bda6a96584f2e7a1ac5610baa0f67bbc77f7e766c4152281f4"}]},{"bom-ref":"897e68808d2db32b","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/false_main/package.json","hashes":[{"alg":"SHA-1","content":"9598eab563115c03c659ee404d91f9a6431df39d"},{"alg":"SHA-256","content":"064d9e3c87123a24e31276d1bcfce16b81bb2156d42c07f427b8ddcbf675f790"}]},{"bom-ref":"37af0de0803ece00","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json","hashes":[{"alg":"SHA-1","content":"dad7dffe799806c49f1cccc039e3d6cbb38d1a26"},{"alg":"SHA-256","content":"ed30bf3c22be924be67b278ed079ba425dd0ae37110d7027bf9369f771abcb36"}]},{"bom-ref":"92d8b8255b4e8d43","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json","hashes":[{"alg":"SHA-1","content":"b58a1b0588a1102572e64a4d2047ce8731de1a76"},{"alg":"SHA-256","content":"ec13311cdf8e7ba462d94656a0f2f90c55b290dc1ad6f7e82da2d3b140c27f20"}]},{"bom-ref":"70489105e04bd7f9","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","hashes":[{"alg":"SHA-1","content":"3926c908fd9627cc3e3094edf3a7fc547d4871a6"},{"alg":"SHA-256","content":"ab5dbb7f635d5474648e5ac92df08020b60d0d91a68a740e46186587e05d3da3"}]},{"bom-ref":"004eba0e651bea98","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","hashes":[{"alg":"SHA-1","content":"9e0fcac261c4f4c0e6cbd05fd95ed904a9fe4b5b"},{"alg":"SHA-256","content":"f41fd8ba3d2df58d7d1658be4c77d11d07285fab1e94a6c8151b3548c6f0a8aa"}]},{"bom-ref":"5a3c3048e82eec84","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json","hashes":[{"alg":"SHA-1","content":"0803d5d30c2a6fec04f09b9969969a91743b28cf"},{"alg":"SHA-256","content":"41ea23c25ff8e7080ab08d38a9f5de9ab986280902f7268de45bc0a5b7e9e028"}]},{"bom-ref":"ed77b0f16dcd932f","type":"file","name":"/juice-shop/node_modules/responselike/package.json","hashes":[{"alg":"SHA-1","content":"51b587b317d6db031acef526f84e2cf043442bcc"},{"alg":"SHA-256","content":"df25ad367800a698875604c21edf7f76e2ed563f7069d8659eeb8db46ab10117"}]},{"bom-ref":"bf4d523dd4fe01d4","type":"file","name":"/juice-shop/node_modules/restructure/package.json","hashes":[{"alg":"SHA-1","content":"f1fb9c1b78a8fee6469b904983154c54b0430586"},{"alg":"SHA-256","content":"ff45dfa0be24887b940014f1abe1d876079b5aff4d09b7db18061f5bac257faf"}]},{"bom-ref":"1f3c96d257c92a40","type":"file","name":"/juice-shop/node_modules/ret/package.json","hashes":[{"alg":"SHA-1","content":"a750eb52b768c30860127f6fb4b7defd0f63e4d5"},{"alg":"SHA-256","content":"72c2758011f7536ae91bd5b059587226903f8cd50b0e5046b57039f0cd23ce98"}]},{"bom-ref":"40838e71bdfd5df3","type":"file","name":"/juice-shop/node_modules/retry-as-promised/package.json","hashes":[{"alg":"SHA-1","content":"08c60998fb0b0ee0a723a490df8d67c8d8df7ebd"},{"alg":"SHA-256","content":"b411ec1e5930b4d30c6cce8d39d119136504607a09d4e27a7ce4a61632a512ea"}]},{"bom-ref":"845094936f57f221","type":"file","name":"/juice-shop/node_modules/retry/package.json","hashes":[{"alg":"SHA-1","content":"10dd0941e4e65c436c4f7111efdb1679c966c478"},{"alg":"SHA-256","content":"c0733eb226e2a6572c7c9c2bc8b4a0efabe233971b0dee1e6d62c6898257e1da"}]},{"bom-ref":"4937c6866f083ca4","type":"file","name":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"c4eeae07840fe9f5","type":"file","name":"/juice-shop/node_modules/rimraf/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"d471dfb2beb366d0","type":"file","name":"/juice-shop/node_modules/rimraf/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"72de7dc550d980af","type":"file","name":"/juice-shop/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"ed8ec0789d4558ea2492b653fd0be9f16b90020d"},{"alg":"SHA-256","content":"fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c"}]},{"bom-ref":"fc79e23288d2acb5","type":"file","name":"/juice-shop/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"6ce1dddfb8739c577ae2ad84f1aba01427791f57"},{"alg":"SHA-256","content":"e4018fdbfe625433371f48274fee26f520bbe865e0d8c85bf3aa07424134b90c"}]},{"bom-ref":"310afe454d0dd371","type":"file","name":"/juice-shop/node_modules/safe-regex-test/package.json","hashes":[{"alg":"SHA-1","content":"cb66d98715b7a0639f1f793aa1865634860a57af"},{"alg":"SHA-256","content":"b9efdb318b7f4094e6d2605ba9fbef93570abe1119488a491a4e8f3216781030"}]},{"bom-ref":"68e5c656eb7f3b65","type":"file","name":"/juice-shop/node_modules/safe-regex/package.json","hashes":[{"alg":"SHA-1","content":"417c11c826b088c2c4826ec15e92b1bb0969c208"},{"alg":"SHA-256","content":"bb8da78436ba7b47ca319947daf22b0d2b3ab396bed38095f2c89b50b5c4a85b"}]},{"bom-ref":"1b0e08c74df352c0","type":"file","name":"/juice-shop/node_modules/safe-stable-stringify/package.json","hashes":[{"alg":"SHA-1","content":"7fbe83d8818942f4a13c95d9dc4a265a0a178f4d"},{"alg":"SHA-256","content":"797e552ecb0f8ffe8ffb714e6c4888b28a8ca39eb9c0040836b2b6f640037798"}]},{"bom-ref":"f45c8763d766a21a","type":"file","name":"/juice-shop/node_modules/safer-buffer/package.json","hashes":[{"alg":"SHA-1","content":"5ed0fab8e5cac53e4d072acbd82fca9be08f5e67"},{"alg":"SHA-256","content":"4247a3a63c45a6a7ced1557fe4dd9d2a163af4915d594b95e5867b69a53edb52"}]},{"bom-ref":"98488c36266e521a","type":"file","name":"/juice-shop/node_modules/samsam/package.json","hashes":[{"alg":"SHA-1","content":"10173317cf457348a53bafc567e90bd60e443947"},{"alg":"SHA-256","content":"6a972c09f2f363b7d7c5f1fd35568f913b75b6256e5b1f7e6713ed47f751a4e8"}]},{"bom-ref":"9d62087bfe26d78a","type":"file","name":"/juice-shop/node_modules/sanitize-filename/package.json","hashes":[{"alg":"SHA-1","content":"fc63700a101c3d457af90963af4939b553135c9d"},{"alg":"SHA-256","content":"9fa92eaf12c53e3b4635c0a0c775fdcc04f623aca0bf02683f5204d54e87435e"}]},{"bom-ref":"5e53951adf2603e4","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json","hashes":[{"alg":"SHA-1","content":"92f89ed727789dfec8061a78aeb4b61afe286883"},{"alg":"SHA-256","content":"f50e652e1cd48ada00210fa948baf45543853fe1a5e59497bc20744d454a2d5b"}]},{"bom-ref":"a2055a729f66b622","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json","hashes":[{"alg":"SHA-1","content":"7deee12976bd63abcda058ea45238790cf5e82e0"},{"alg":"SHA-256","content":"042d85faac37437c9a63f3a73b1bd11b9b2d6f222ec06318c3b3f2c1b791ab03"}]},{"bom-ref":"80dbdf2b40ea151e","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json","hashes":[{"alg":"SHA-1","content":"d78c2049a85f4b100f23bd9f9547ea79af37246e"},{"alg":"SHA-256","content":"47aec9a46c6ea593aa2fdda8e9f8d9169eb1b9e60a1606bd3c28c6baa061bd9b"}]},{"bom-ref":"e05c41d34ebd7abd","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/he/package.json","hashes":[{"alg":"SHA-1","content":"e8229c2260816ecf6ebc6a5f4ada1162383d98e9"},{"alg":"SHA-256","content":"f014bb22a82665e6c6bfa092fdf8ae1253b4720880d708bf5b164bbf4485f56b"}]},{"bom-ref":"c1f9573583dd91d0","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json","hashes":[{"alg":"SHA-1","content":"9b04372e328879041da8678a7ccf3c06a28941f0"},{"alg":"SHA-256","content":"9531c552f8bae4773c1cd60c82aa6eddfb455efda55b2a20bb651fc010da58fb"}]},{"bom-ref":"c98bc498a976c7fd","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"ab8acbe8ed0a77bb0ffdb1416758fb659f61d598"},{"alg":"SHA-256","content":"083f974e63787f3d95611642c78c036bc2c5e0fbed443804500b9328ea69f74d"}]},{"bom-ref":"106394f35a5c8436","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json","hashes":[{"alg":"SHA-1","content":"727f3ff6469bd987fcea8093d885fd40ed5f0357"},{"alg":"SHA-256","content":"eb5d62e173ed8dd45dc5417c5d9b1981def2e335f44b402507fcf206310d81da"}]},{"bom-ref":"29fb5cfbacb1e8f4","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"a92e127209f2f143bdc03e00e3c32ac87b6dd13f"},{"alg":"SHA-256","content":"7a06e45bb5ec514ac88be84d3f679ee1b87228a41b805bfcff0b8452be35d802"}]},{"bom-ref":"2a1ef87c7999256a","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"8bb5fc68a015d61057dff1f32826f6c2aadec61c"},{"alg":"SHA-256","content":"c2ddaf59d49fc50cb922aef5723935c9c0827e40a33a65b18197a447d966bc15"}]},{"bom-ref":"38922d9084626546","type":"file","name":"/juice-shop/node_modules/sanitize-html/package.json","hashes":[{"alg":"SHA-1","content":"5bead99213de5940b0e8f01d3e1cebf7b52eeeb4"},{"alg":"SHA-256","content":"91c64186e2ab5995c2bdd85edae12ef60a511bd27594e8c224aaaa7be4302ffc"}]},{"bom-ref":"205b43af53d3453e","type":"file","name":"/juice-shop/node_modules/sax/package.json","hashes":[{"alg":"SHA-1","content":"de8570e41ec3bcdb4e975503d69bab31af907c25"},{"alg":"SHA-256","content":"f78f8efd1a518cd6787c5c06806ee18ea559acf583cd80d2237641c4adcfb989"}]},{"bom-ref":"f2e1f9237f5c98bd","type":"file","name":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","hashes":[{"alg":"SHA-1","content":"74103756a0fe401ed4d8137e04607758a77897eb"},{"alg":"SHA-256","content":"3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"}]},{"bom-ref":"698e985d3c3011a4","type":"file","name":"/juice-shop/node_modules/seek-bzip/package.json","hashes":[{"alg":"SHA-1","content":"b9ebdcb7652f4785584d74376c1a378e786ba012"},{"alg":"SHA-256","content":"c2456ab31a98e61c5fbaea0e50fc6ac816e1c1b9ae0798353cb70237a578ec42"}]},{"bom-ref":"69a1f65f857749e2","type":"file","name":"/juice-shop/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"4828b73519e8746fc3d197d595acae81975cb4bc"},{"alg":"SHA-256","content":"bf2e091359d5870257cc8287a268e001bfb39abf19275f382276efe3c7785a4f"}]},{"bom-ref":"d83faf80f12e7f7d","type":"file","name":"/juice-shop/node_modules/send/node_modules/debug/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"1b4d3682dcf98701","type":"file","name":"/juice-shop/node_modules/send/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"ca66c0c6df7292ae","type":"file","name":"/juice-shop/node_modules/send/node_modules/encodeurl/package.json","hashes":[{"alg":"SHA-1","content":"73c01b81f34a9978b158df2744ef8c45251d6193"},{"alg":"SHA-256","content":"30b1a43843675f42033fd6c77c19b20ad4344844f0bd5526c586081e93a48fe8"}]},{"bom-ref":"60988c55e590edaf","type":"file","name":"/juice-shop/node_modules/send/package.json","hashes":[{"alg":"SHA-1","content":"ca40bd73bd6b7f456b8bea186f420b5d79bb15d8"},{"alg":"SHA-256","content":"e3a8d88593464c56e2a9177c8941b3bb3408d413aaa434674f4e398dd147bbee"}]},{"bom-ref":"f36abca3e89daf50","type":"file","name":"/juice-shop/node_modules/sequelize-pool/package.json","hashes":[{"alg":"SHA-1","content":"f4d051b193b22198e35b664d8137ce0faa320eb0"},{"alg":"SHA-256","content":"32a3cf4651e735e074ea036282c1fd04ec4e70ea1cc59ee1ade8e1507cc672f7"}]},{"bom-ref":"13b6444ef03ec6f6","type":"file","name":"/juice-shop/node_modules/sequelize/package.json","hashes":[{"alg":"SHA-1","content":"8b0e7b95571ff808c7ae2f5cbf8c9139d4281dbe"},{"alg":"SHA-256","content":"e80ea5958d53bd093683b93b83694619c0e3fe9c9217149b2fee5fbb24428ec6"}]},{"bom-ref":"00565f8eb6326e0d","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"01220c49ee2801f7","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/depd/package.json","hashes":[{"alg":"SHA-1","content":"f7628780acc25dc2bf90d09203940e23977b7ada"},{"alg":"SHA-256","content":"9df7afa632a7aa4e245c4583d06704b7f196cff999aca6d0a2492fa4d78f8e73"}]},{"bom-ref":"58a7832050aeb519","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json","hashes":[{"alg":"SHA-1","content":"65c46f4768a651c36a45eb1da2c7148df35fc255"},{"alg":"SHA-256","content":"599ee321940e69bff6a7f9c6000f1ca5aed0cc58a6cac48aed698f596412515a"}]},{"bom-ref":"871fcd0c63d584a9","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/inherits/package.json","hashes":[{"alg":"SHA-1","content":"5f5e7c47a8a2122526dadd5410c31caef51a458a"},{"alg":"SHA-256","content":"7e971f41f52ea0035c9be4f677bc979cb3dd9f2eb80127cc30d0dc25de233eac"}]},{"bom-ref":"81ee50e85204b4d0","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"0906afe9fe6e0ceb","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/setprototypeof/package.json","hashes":[{"alg":"SHA-1","content":"0ea4743f2d506edd891f66b7d3083142731f679f"},{"alg":"SHA-256","content":"bf5dc95332d295f68107fb7490c6a04b47c52a251577f9a4c3d73cd27d1a0034"}]},{"bom-ref":"ad5ff08f89a637c8","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/statuses/package.json","hashes":[{"alg":"SHA-1","content":"3eb797e37a18f16f3f41fed3cb41c8e425df5933"},{"alg":"SHA-256","content":"39cf653c972f99725bae6adab44da5df52185fa1fc3bdaf671a8f62d0e182631"}]},{"bom-ref":"4deb37dbabbb7efb","type":"file","name":"/juice-shop/node_modules/serve-index/package.json","hashes":[{"alg":"SHA-1","content":"d7baa6604e46bfce97f4900135209385b1ef201a"},{"alg":"SHA-256","content":"4ddc2ca698d1c61e053de0a596e31d48f025711886189ab8d536cfcce4903f54"}]},{"bom-ref":"c3edf4d7763f005b","type":"file","name":"/juice-shop/node_modules/serve-static/package.json","hashes":[{"alg":"SHA-1","content":"f375b54105591c3c15596b04d1ed9cdb1135128b"},{"alg":"SHA-256","content":"812b66751e10ac4f8bb6b85196eea32cf0f75d0c0195853b8baf10dbf7792a00"}]},{"bom-ref":"a3b0738bec9b3257","type":"file","name":"/juice-shop/node_modules/set-blocking/package.json","hashes":[{"alg":"SHA-1","content":"1fd9e7bbe562d20ee078877ba14aaef71a6dea6a"},{"alg":"SHA-256","content":"e0c598215c66f2c35edbc3cb2a3433d45f9d4b726524c095c93e7376d87a3bce"}]},{"bom-ref":"981c54ed171d8c71","type":"file","name":"/juice-shop/node_modules/set-function-length/package.json","hashes":[{"alg":"SHA-1","content":"bd0bcfc74bf8e9fe8d1edb2b3a893d096a6067f7"},{"alg":"SHA-256","content":"2c81bab7f7a60d625164bd840d863548e3f9d4d1aa976b9d2966e5e1e36132a7"}]},{"bom-ref":"bc6099554bb6401b","type":"file","name":"/juice-shop/node_modules/set-function-name/package.json","hashes":[{"alg":"SHA-1","content":"c9127dbfc1f2b960c9173553f74338ad3f2a4bb5"},{"alg":"SHA-256","content":"fc56137cbf0646e79e68881215cd5937db9830f3293e880e757b31832303e1fa"}]},{"bom-ref":"59f3e20fa5c1fb8f","type":"file","name":"/juice-shop/node_modules/set-value/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"0c16dc7e1869311f","type":"file","name":"/juice-shop/node_modules/set-value/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"cf5a7ab0d7b3286b","type":"file","name":"/juice-shop/node_modules/set-value/package.json","hashes":[{"alg":"SHA-1","content":"c444e1b21ea02dd1af8e9adf108165c257afde40"},{"alg":"SHA-256","content":"bc791069c3343d20fc1b4442811d78925bd53e9c99b7861b808bef7bb0985c6b"}]},{"bom-ref":"993c1211367dd2a5","type":"file","name":"/juice-shop/node_modules/setimmediate/package.json","hashes":[{"alg":"SHA-1","content":"9cb87b9a133431be9bc111ed4b2aadbc10c0eb0e"},{"alg":"SHA-256","content":"56c7968c8062ad56e94b8ddb477e514098e0fa34b060aa86b67232fdb12e184d"}]},{"bom-ref":"1d35dfb436998bd8","type":"file","name":"/juice-shop/node_modules/setprototypeof/package.json","hashes":[{"alg":"SHA-1","content":"cbf2d7ae54256a7ab84245eb6d72c56f6a015453"},{"alg":"SHA-256","content":"5b39ddf23d2c12a751cb4af2ce12dd5c87314350be7526fff69b4a3ff2a2d538"}]},{"bom-ref":"8ee91e3cfbffed6c","type":"file","name":"/juice-shop/node_modules/shebang-command/package.json","hashes":[{"alg":"SHA-1","content":"2e2395a2e489846382e5cefdf011dcd7cacb82a5"},{"alg":"SHA-256","content":"44de390ae5ed6c5f9758b8b9c90b93fa53977d5361731600429f1de08f4b3f30"}]},{"bom-ref":"685324126d31f540","type":"file","name":"/juice-shop/node_modules/shebang-regex/package.json","hashes":[{"alg":"SHA-1","content":"4c10640951d12ad418aa40c29b550fdfe3d2567a"},{"alg":"SHA-256","content":"b8018c6b8cc9900dfd1ac18a54956ba34c453fdc2da5e5fe555ee8f04133a1c5"}]},{"bom-ref":"ca47aaca53927048","type":"file","name":"/juice-shop/node_modules/side-channel-list/package.json","hashes":[{"alg":"SHA-1","content":"21ef767ddb85a996d52fe8f3f2b988044a02598f"},{"alg":"SHA-256","content":"48b25a94e64980d573699ad6f5128ac8c521e908884a41a3835e97ef529ed584"}]},{"bom-ref":"6395f69bc84c91bf","type":"file","name":"/juice-shop/node_modules/side-channel-map/package.json","hashes":[{"alg":"SHA-1","content":"ab10f444db9aa7420125e321884ca7d765854b2f"},{"alg":"SHA-256","content":"914a8bd732b82523d95bb697eec3e6d95badc5eb13b196fb0772e59354a3ab25"}]},{"bom-ref":"479ead436b0abc0a","type":"file","name":"/juice-shop/node_modules/side-channel-weakmap/package.json","hashes":[{"alg":"SHA-1","content":"cdb337908d19d32a79dc189c7bce63981babc35e"},{"alg":"SHA-256","content":"8c11f0a1c6cfa549588d991a5cb1b04d62953277ed29f47463d415d5946388a8"}]},{"bom-ref":"a47cc67b5926842c","type":"file","name":"/juice-shop/node_modules/side-channel/package.json","hashes":[{"alg":"SHA-1","content":"ca10dba255c81fa003499be7fca61829ec3c331e"},{"alg":"SHA-256","content":"b33b18efda612f3149f2e5102b305cb77bc5067eae372fb1c83f74c263b5b18e"}]},{"bom-ref":"01057de1c9b6f601","type":"file","name":"/juice-shop/node_modules/signal-exit/package.json","hashes":[{"alg":"SHA-1","content":"69859ffcd06c12c103de10319bd03a2b5cbcb903"},{"alg":"SHA-256","content":"cec1bba4c97e0cf653c13c8c79f745aac2232131ee718c93c4236c1b9577a201"}]},{"bom-ref":"3e9cab7e1cedc2f9","type":"file","name":"/juice-shop/node_modules/simple-concat/package.json","hashes":[{"alg":"SHA-1","content":"f422558f27a7e5f252acbd8bdbc175e5c334733d"},{"alg":"SHA-256","content":"d6ae2e35a0c64b4469f1e531a3244efd50be7c115ef42d1422e54d14d9359e99"}]},{"bom-ref":"9c95f99e93628490","type":"file","name":"/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"c5a4c61cfb916b9f37bab7a1dfa468aa67621ed6"},{"alg":"SHA-256","content":"0c292d1260be4289147620bcdac5c9d87a54391253acd9c16b0bebbda2e207c9"}]},{"bom-ref":"73deda9bae7d90a9","type":"file","name":"/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"b6472ce506e8d5c379f868d79eb81e7a1b7f9989"},{"alg":"SHA-256","content":"50a55612f7430b826449e8404ab3137e28df64e75728c4c374c5a46e6e37a894"}]},{"bom-ref":"da5a5ab589f45aa0","type":"file","name":"/juice-shop/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"a230100956cda434dd566886e048f791b4e2f373"},{"alg":"SHA-256","content":"edb86ca0d77c45e8c16c1b7ff777dfb58f762f635888bb2ebdc25fc48e0069f3"}]},{"bom-ref":"db3a2ca576c561cc","type":"file","name":"/juice-shop/node_modules/simple-swizzle/node_modules/is-arrayish/package.json","hashes":[{"alg":"SHA-1","content":"caa2c94ac35d101e10bd3a5f1ec569f058d3cfd4"},{"alg":"SHA-256","content":"e0aebc9e6b633f7000a2afe55612e53591e66cbcb6fd93725d9b11111c6d7021"}]},{"bom-ref":"247145bf4df3688e","type":"file","name":"/juice-shop/node_modules/simple-swizzle/package.json","hashes":[{"alg":"SHA-1","content":"e0614b638941a0511ac777bc818d2327ff37b244"},{"alg":"SHA-256","content":"2b264c12c6aaf58f8c84c8a6719e4c534f9975df07cb6f15b3121be6086bb853"}]},{"bom-ref":"528221464015f910","type":"file","name":"/juice-shop/node_modules/smart-buffer/package.json","hashes":[{"alg":"SHA-1","content":"a9db89be9421029bd73baf8199042a08253a0b59"},{"alg":"SHA-256","content":"188644cdf467d6a768ad25ed3ee8eb845dc5cb29aadc4c88ca7c5cb5f631d66a"}]},{"bom-ref":"e837ba84cd0bab12","type":"file","name":"/juice-shop/node_modules/snapdragon-node/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"ca2a7d4413c40ae9c669a82bf19b8cb2ae4a557c"},{"alg":"SHA-256","content":"03cce8ab627f9aa9d11af4a225523a9c7c67c51a135b630b85f5743920b312af"}]},{"bom-ref":"21d1788638162904","type":"file","name":"/juice-shop/node_modules/snapdragon-node/package.json","hashes":[{"alg":"SHA-1","content":"47b52f2e9cf0edf3ae6305c5d1f6f061c59f71eb"},{"alg":"SHA-256","content":"13501133635d6ff96db8402e5c28a7ee0de31a41d4ef7ba80e97ee603398dfcf"}]},{"bom-ref":"cc72a9fb7fcd45a7","type":"file","name":"/juice-shop/node_modules/snapdragon-util/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"54d030d54e9eb97c0ba0aedc39a45f169857672d"},{"alg":"SHA-256","content":"4fbd705c00cde2b9b29cf368f9accf1a057065ab8a349f1a5d27e5f10eee36ff"}]},{"bom-ref":"42c9af6ba14a32f6","type":"file","name":"/juice-shop/node_modules/snapdragon-util/package.json","hashes":[{"alg":"SHA-1","content":"f01bcdb8b9ea0cfe3b38d71dedaf6c8d1d59542c"},{"alg":"SHA-256","content":"c457b508eb2431f475f66e454d205b3583b6feedbc05332dd761c5368bfd80bf"}]},{"bom-ref":"1348684c1c3e2d80","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"7d632470e5d57478","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"9630fedbcbccc883892f78a2b21184ef87e6b9bd"},{"alg":"SHA-256","content":"b999a380ba13fef8b973f3df54c1f11f2c8d97d4f5f691600508fa2b7108fe52"}]},{"bom-ref":"15b2d22b204bf588","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/extend-shallow/package.json","hashes":[{"alg":"SHA-1","content":"0b20b8ef601e09d148e37bd152f4d960a6098cbf"},{"alg":"SHA-256","content":"c9c30569136a689a038356c1e4a5bb711f3520407d364cd96381ab009a8cd985"}]},{"bom-ref":"77d1a12c0d338049","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"5b25f9cf1b1cbe731ebc6a083375947c7961278f"},{"alg":"SHA-256","content":"b8498c15313f99506d9f9d2e99c98668c77260090fa9ea358ee9449ecc89436f"}]},{"bom-ref":"3be851f9fb18efcf","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"e4df992b15650494","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"9b01e57e6f46b6a6","type":"file","name":"/juice-shop/node_modules/snapdragon/node_modules/source-map/package.json","hashes":[{"alg":"SHA-1","content":"2ade857b8d1e3b1c635b2810548d4bd65008fa2a"},{"alg":"SHA-256","content":"b59a934eb7e663dd0e0ef9dc5888eaaa3f10016c029bd1962da31aaad6296277"}]},{"bom-ref":"122284133630e353","type":"file","name":"/juice-shop/node_modules/snapdragon/package.json","hashes":[{"alg":"SHA-1","content":"1b7c1d40e8e39bb85fe4551cdc1a036b0cede163"},{"alg":"SHA-256","content":"ef3d4c682fece7b9aed6c06563df4b3f468319dd719dd11e5eb2bf6dd6206b09"}]},{"bom-ref":"10a64410aa3f673b","type":"file","name":"/juice-shop/node_modules/socket.io-adapter/package.json","hashes":[{"alg":"SHA-1","content":"fb5c3162ffd9b1be27d08bdaa36ef6cf2e97aded"},{"alg":"SHA-256","content":"86922aabfaa9b82872def69312c92b61594068dc43dfc49b9e144a0496940cea"}]},{"bom-ref":"faaada55a4dbafd9","type":"file","name":"/juice-shop/node_modules/socket.io-parser/package.json","hashes":[{"alg":"SHA-1","content":"8407ea865970282b35bed55b7833de5bd41e840b"},{"alg":"SHA-256","content":"67463e2389df34f3fb19eda8e5bc3cc8caebb760a0530c5530a1e1ff9354600a"}]},{"bom-ref":"e8bfd72383327bec","type":"file","name":"/juice-shop/node_modules/socket.io/package.json","hashes":[{"alg":"SHA-1","content":"6f22afab9c088cf3ce3bf2d7b4a804024b45844a"},{"alg":"SHA-256","content":"1672136700d2101477b56598fac2ffc3f75927b73e29970efa8d6b092e602f0e"}]},{"bom-ref":"06b31b3e46ee6a76","type":"file","name":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json","hashes":[{"alg":"SHA-1","content":"126adbedcff6faa6826eca63c75e9193237ab10b"},{"alg":"SHA-256","content":"7a08cb2fe1d2b788e0a7bf6a9b7597dbeeeae804698c2fbd15de786d284d327c"}]},{"bom-ref":"64c34d1d44a79235","type":"file","name":"/juice-shop/node_modules/socks-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"a52f0cff949fd82f9e42d4214d2917964d7a9bdb"},{"alg":"SHA-256","content":"5667d50ea8b62c802757a3a2737a6515edbae3129bb3ef0980ca5d15c91ed99f"}]},{"bom-ref":"55839d1425b2384a","type":"file","name":"/juice-shop/node_modules/socks/package.json","hashes":[{"alg":"SHA-1","content":"c92d113f3614e8c725fc4de50c3312bdcde18258"},{"alg":"SHA-256","content":"5967ec98ebf86a4adf2666870ae878d655104f04b264b1d630dcf324a4091223"}]},{"bom-ref":"0bb8ad247a7e20e1","type":"file","name":"/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json","hashes":[{"alg":"SHA-1","content":"92992db85cebb6cc7fe8499883fab75317dede8d"},{"alg":"SHA-256","content":"a72e52a4583971e362e857316f0ac3455d8e337edfe9d517bb4b3df59c623019"}]},{"bom-ref":"fc06c56350c598d2","type":"file","name":"/juice-shop/node_modules/sort-keys-length/package.json","hashes":[{"alg":"SHA-1","content":"a9e67fe75f99168558e087c823e00d16e2e5fd9e"},{"alg":"SHA-256","content":"397d31b7680c4de5ef238fa187ab90c465d9001725425f1b5afcbc21da3117a0"}]},{"bom-ref":"0ed5c713f9ec4689","type":"file","name":"/juice-shop/node_modules/sort-keys/package.json","hashes":[{"alg":"SHA-1","content":"f83b46c2c5ffaafb231798460fcb5ed2f0f5abbd"},{"alg":"SHA-256","content":"62554970e1506c5f08d966be5f20601b4f48ac0f4558b7b22302b8da77f9b8e5"}]},{"bom-ref":"b4f312dd2a8b89a3","type":"file","name":"/juice-shop/node_modules/source-map-resolve/package.json","hashes":[{"alg":"SHA-1","content":"a0e8bc5d39015832d27bb4e0c69970f630eaf498"},{"alg":"SHA-256","content":"436a794b5e91e7bc0be8c1adb6d5e161bed7508a21c68b4524bc278c036cdac9"}]},{"bom-ref":"0a408f3a0cbc3182","type":"file","name":"/juice-shop/node_modules/source-map-support/package.json","hashes":[{"alg":"SHA-1","content":"da88a599cee829ba95c82545d5f3148f04da64e9"},{"alg":"SHA-256","content":"f54089d5208d092e8bebc7547a3bd2dc35d27668717158bfc3562c55ec4861bf"}]},{"bom-ref":"33f47905ddfe07a8","type":"file","name":"/juice-shop/node_modules/source-map-url/package.json","hashes":[{"alg":"SHA-1","content":"5197e075a31cdf06802d2630cf9c0a1a3c6ad659"},{"alg":"SHA-256","content":"e2ab48be878647a77117a669e3ccaf51359bd56be889ab5b8424927a9c8c24ab"}]},{"bom-ref":"b5a5873c243adfb9","type":"file","name":"/juice-shop/node_modules/source-map/package.json","hashes":[{"alg":"SHA-1","content":"14a0ce5da3f60b78d15612f9b2d3ef0e9bd38345"},{"alg":"SHA-256","content":"3fdebd9f5c0107bcf7b73e0d17e0147042bcfb74884106e4428afbf17171ef06"}]},{"bom-ref":"e6b463ba78a1db02","type":"file","name":"/juice-shop/node_modules/split-string/package.json","hashes":[{"alg":"SHA-1","content":"25330f08923fce34c89a587f8a317a6a6db7144c"},{"alg":"SHA-256","content":"8cef600c1ef4de73c804dd0293e8442ec5c78275f5d46db7b64927e973185467"}]},{"bom-ref":"98b90ac8e9af2ad2","type":"file","name":"/juice-shop/node_modules/sprintf-js/package.json","hashes":[{"alg":"SHA-1","content":"e99c21e49fb559d1b16f5662d44028a4e96b19a0"},{"alg":"SHA-256","content":"c97349295cae4e40a6f16a26096330997257c00be67bd8fd0ac3391719e4ee5f"}]},{"bom-ref":"b6765c206cb91963","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","hashes":[{"alg":"SHA-1","content":"c20a133f8af3542513591f91ff497e787041046a"},{"alg":"SHA-256","content":"5b88548f042642dbf78f279484943e4814fc5bf7232d617304907442eef5acf0"}]},{"bom-ref":"cd28f6dc67c498c1","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json","hashes":[{"alg":"SHA-1","content":"ae912343fcf0eccd8a5f754a72bf2e9eea63a176"},{"alg":"SHA-256","content":"91391dee2904a0bb0de498cc0a41e020338d671a4c85f5bcafa15dde73eb26fe"}]},{"bom-ref":"0c794e8873950ab3","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","hashes":[{"alg":"SHA-1","content":"d792cfe57d00f2091f3d8d2625450abc412db2f6"},{"alg":"SHA-256","content":"e8b9bcbdd0c1936b2f42a8973ebe253772972e73cfaef6087b187346a47ba5d3"}]},{"bom-ref":"07900bc8dcfd366f","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"b65c15e34d5ba2f0","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","hashes":[{"alg":"SHA-1","content":"b950dc47e5dcf04ff6ee11af65ab345b787fa32d"},{"alg":"SHA-256","content":"382853487006ff7da906b0e7bea08c4f3a7b4491da6a17b7c7c82dcf6db9df10"}]},{"bom-ref":"5ab082cf05fa584e","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"a23947ade20a2757d5abf7f9fec197c2674c0a20"},{"alg":"SHA-256","content":"96ba7fc1dcfad50de6c406fb3fcfe57850ebea4d8ecedbc0b45b9c59fc629d69"}]},{"bom-ref":"e5ebef104d8fade9","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"ac9fad510ffaa52eccff29729383a2f0ed602bec"},{"alg":"SHA-256","content":"8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"}]},{"bom-ref":"52f690adaf173bef","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"c0d55f8b28bea19d1fbed323da70e9857ddaa74e"},{"alg":"SHA-256","content":"95e29f682649caf233b4ac9729efa0c1b3718ef179e7b44e21ea01a0941af071"}]},{"bom-ref":"e0bd75b08b24a415","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"55871ab123b38e2af83fdab7b189a4a61ba46465"},{"alg":"SHA-256","content":"02b36a2a2e729813a196c97486bb12955345e201d6ccda5fb2b322f62fa381ab"}]},{"bom-ref":"c1bf448ff0a8d796","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json","hashes":[{"alg":"SHA-1","content":"4fcf177b51dd6ac24efce2242b42e97148785e7d"},{"alg":"SHA-256","content":"9035270ed26179ae66ebb75f50a46b3c919ed6b0536350ce5130b72077b59de5"}]},{"bom-ref":"0bbe2f24fa01fbc4","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"8385834848e771bd","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"563b0d8af1a9641083e8f6cefbf4259fa845e7ca"},{"alg":"SHA-256","content":"bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"}]},{"bom-ref":"37375a554af9ccaf","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"c9882a8fcdc1aef336df3579af2fbb95974c3931"},{"alg":"SHA-256","content":"8993f95f35c6bd7adef96df428b2aa1e6cadf1a6b9c33eaa917f05098bb1bfca"}]},{"bom-ref":"cc75429e2c58f621","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"05256617890052107b341acf6cbe16fd9f22f86c"},{"alg":"SHA-256","content":"b06071b99bebe6cc7f7716f65ed4f36ff54aaf78d74ea0bec72f9029a8e2c215"}]},{"bom-ref":"7e3bba99a04c7eec","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json","hashes":[{"alg":"SHA-1","content":"8821070ee31fdf50e1f86d2044631dd4844dc388"},{"alg":"SHA-256","content":"550620d374c9f9c931c5a97a899b00ec74b5e89db48dce76b9c113dbf9e2c6f8"}]},{"bom-ref":"ffa359064cd8055f","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"},{"alg":"SHA-256","content":"ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"}]},{"bom-ref":"72ed9a192079547a","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"89d28b6e3886d528","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json","hashes":[{"alg":"SHA-1","content":"ff5c7864735844778d9f653604ac1754604f89c4"},{"alg":"SHA-256","content":"a0f049a58dbf9fd58e9b4686db2d51200cdea584c9b6425b400faa24133ace25"}]},{"bom-ref":"6fd26b3feb2ecbfe","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json","hashes":[{"alg":"SHA-1","content":"d8d597c8560806f8ed174711d725bbef811d8e03"},{"alg":"SHA-256","content":"4d59739fa5052e0c91edc0642ad95414427ffbac186c5570257cec8eb78dd751"}]},{"bom-ref":"f404e684822b83a9","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"a8c5e2e6072a2a6b","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"5745585933310f7807eebd4e9bc01e2d83ba160d"},{"alg":"SHA-256","content":"dd7d78caf139ba9228a84bee7bb5fa7b92e4d332b836f07bdf1b0f9e78fa6340"}]},{"bom-ref":"79d2d3156022499b","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"35b672da35e299376d0ffc4f22fd57088150a835"},{"alg":"SHA-256","content":"001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"}]},{"bom-ref":"15ddf7892fad0d04","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"9aea9b0daad0699494a286e8b104317015f9827a"},{"alg":"SHA-256","content":"1eb7b17d626d6201c70af32e684302ff3219d6fe583a2611a8a3119d98a68956"}]},{"bom-ref":"3cb964cf5e1534fb","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json","hashes":[{"alg":"SHA-1","content":"bc62a4513e54488bafdeb2f4095483538cc80503"},{"alg":"SHA-256","content":"961dd5d2924a81e0c75ae3e5853784ae270e894b86c0229e31ed8619893a582c"}]},{"bom-ref":"f48f79b6adaa4331","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"bb6de23bed529e3e5ea2583b0f1702ebb9d02805"},{"alg":"SHA-256","content":"9c2a5fec768304c3b6e67baaeec8cf4d4cd28a416c3f16da1de7db698ab772f7"}]},{"bom-ref":"a4d9525338a12860","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json","hashes":[{"alg":"SHA-1","content":"41bc0fcee7ad3ab38c8de1c030a849af36bbb262"},{"alg":"SHA-256","content":"13b247da6685d68bbbb6da390709fee7a2d6ce0658095bbc921ba31c1cbd86fa"}]},{"bom-ref":"2f60773a135952e2","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"53b43dd098da8d4b0606d47cc71bbce0f9326251"},{"alg":"SHA-256","content":"d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"}]},{"bom-ref":"cf55a922996e7e11","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"da300353432169a0","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"},{"alg":"SHA-256","content":"8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"}]},{"bom-ref":"102e57c4ab06cb93","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"b376e943406ee22b05111950d5053884327ec513"},{"alg":"SHA-256","content":"bbe51d9a0b7ac254c152efcc699dc65958e6fbab666d1c87d8b5873136b56a10"}]},{"bom-ref":"8626281543f10599","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json","hashes":[{"alg":"SHA-1","content":"6e55d0ea8fbd72c6e89310dd958b22dcd6d2e56a"},{"alg":"SHA-256","content":"6b456b51d5431d6c47bd8ed15994582096f42e3e3cced980ecf4824bf627869f"}]},{"bom-ref":"67c9c8b45d490495","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"f351144cafb23a2e78d442708fcbcfdcd4c5420f"},{"alg":"SHA-256","content":"280af43113a60826e63a6bf79e115fdf5f89d5866f663cdde3d229640671cee1"}]},{"bom-ref":"bd55b452efb85df4","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"8b9fbec9a68117d7405c65ab254846287a63a494"},{"alg":"SHA-256","content":"89bd6d32c9e56eab63f3f62b96080aa43afa530675701610d74793d4719d1137"}]},{"bom-ref":"ebe939002cbcffd7","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json","hashes":[{"alg":"SHA-1","content":"9ffc9a77d53279c1e6dc931d443376bdda383931"},{"alg":"SHA-256","content":"1a1017165f7029207fc753240baccebb6b658881fec0b7cc88558d833a74c711"}]},{"bom-ref":"1853bd6a9b31b546","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json","hashes":[{"alg":"SHA-1","content":"ea2ce7c13d4cba3ed5e48e0c8dbe7e22c7f38220"},{"alg":"SHA-256","content":"15936d07741b462fb77ed70603112bc2f8377869f326b15c185b78cea1692269"}]},{"bom-ref":"e4b9f716b6874043","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json","hashes":[{"alg":"SHA-1","content":"7f52b4652fe9ff874b294815483566da18d118ec"},{"alg":"SHA-256","content":"433984d8ab6027ebf54dea96093fb32a231fb0c4f16cc08445da7d62a6d8837f"}]},{"bom-ref":"22a6e65dcffb5bea","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"aa8bb0924f5536cc","type":"file","name":"/juice-shop/node_modules/sqlite3/package.json","hashes":[{"alg":"SHA-1","content":"97366bb2fa9d63bb9660b3d130efb6d37a6b80ef"},{"alg":"SHA-256","content":"c782c19485b0026e209076a236484a62885cb3a0828322a2936043230ed1ec41"}]},{"bom-ref":"1cc16cb1e5e7ec01","type":"file","name":"/juice-shop/node_modules/ssri/package.json","hashes":[{"alg":"SHA-1","content":"203926d505f969e44375e6a40942ce43ae490f44"},{"alg":"SHA-256","content":"5c18917c39afce09b6ebdfd212c736c390d74d1a72db8bd1561117f949669252"}]},{"bom-ref":"7bc34f4b7278a3da","type":"file","name":"/juice-shop/node_modules/stack-trace/package.json","hashes":[{"alg":"SHA-1","content":"4ab8ba513ca79e30bcbe250d567418e8571d897e"},{"alg":"SHA-256","content":"9d4ebf4546836593d64b8627bab4f12100a33e39810cec6e175f3e71f0825c16"}]},{"bom-ref":"2e70aff5611859f3","type":"file","name":"/juice-shop/node_modules/static-extend/node_modules/define-property/package.json","hashes":[{"alg":"SHA-1","content":"9630fedbcbccc883892f78a2b21184ef87e6b9bd"},{"alg":"SHA-256","content":"b999a380ba13fef8b973f3df54c1f11f2c8d97d4f5f691600508fa2b7108fe52"}]},{"bom-ref":"11097eda7e8dc4b5","type":"file","name":"/juice-shop/node_modules/static-extend/node_modules/is-descriptor/package.json","hashes":[{"alg":"SHA-1","content":"5b25f9cf1b1cbe731ebc6a083375947c7961278f"},{"alg":"SHA-256","content":"b8498c15313f99506d9f9d2e99c98668c77260090fa9ea358ee9449ecc89436f"}]},{"bom-ref":"f9ad3b3c83166573","type":"file","name":"/juice-shop/node_modules/static-extend/package.json","hashes":[{"alg":"SHA-1","content":"1f99d45687c72818812a369aed1aa50ae1c311eb"},{"alg":"SHA-256","content":"a67948379722221c0e86865eb76525adbd6f2cd4f85315cb627402a32e28a6ad"}]},{"bom-ref":"d9da500f1819ee6c","type":"file","name":"/juice-shop/node_modules/statuses/package.json","hashes":[{"alg":"SHA-1","content":"3328d9bfc82e4f981a1acd2f3f78c524bf85333c"},{"alg":"SHA-256","content":"53bd1b14e481356bf004c0a45f9022d07fbc56bfe849115e141ba302c8818275"}]},{"bom-ref":"e7be768bc9ecfac6","type":"file","name":"/juice-shop/node_modules/stop-iteration-iterator/package.json","hashes":[{"alg":"SHA-1","content":"9da2c93d8d5dadcd5c5c6676b8da87a09dfd5299"},{"alg":"SHA-256","content":"d081cc886d55d23d704721c7b03b78b0f5600459a75d9b2fb63449d99d87cc81"}]},{"bom-ref":"7dc7b24c61cfbdef","type":"file","name":"/juice-shop/node_modules/stream-buffers/package.json","hashes":[{"alg":"SHA-1","content":"6d8ca85d78d4faac879d4ec7cdbf4eadca10888a"},{"alg":"SHA-256","content":"7f6be66ac31f7dc6351d5737aa3d1cf016209b737c1b36b763cf6d5f15d112df"}]},{"bom-ref":"03f5b1ab76db5729","type":"file","name":"/juice-shop/node_modules/streamsearch/package.json","hashes":[{"alg":"SHA-1","content":"b75e7127bad8663e7e009826561501526d2afd16"},{"alg":"SHA-256","content":"029b54b7db483222a64b99ab0e27b37d0ca59ca4a95d591b121b2cfb3a45eacb"}]},{"bom-ref":"5c0bb9b1f028b5e2","type":"file","name":"/juice-shop/node_modules/strict-uri-encode/package.json","hashes":[{"alg":"SHA-1","content":"a82ba4bf6c6714c55d554a492ec4f4b4b0a2aa9e"},{"alg":"SHA-256","content":"0d73babfda858dfced0e39e23cd72e7db28ea986f26d838cd9c4f7d287a6feeb"}]},{"bom-ref":"a815dfdda1d57c97","type":"file","name":"/juice-shop/node_modules/string-width-cjs/package.json","hashes":[{"alg":"SHA-1","content":"a5306c15bba6cb123d9f061ca85eb56576c6638f"},{"alg":"SHA-256","content":"6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"}]},{"bom-ref":"a2e72d8670a8c511","type":"file","name":"/juice-shop/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"a5306c15bba6cb123d9f061ca85eb56576c6638f"},{"alg":"SHA-256","content":"6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"}]},{"bom-ref":"55b4863b9e86f715","type":"file","name":"/juice-shop/node_modules/string.fromcodepoint/package.json","hashes":[{"alg":"SHA-1","content":"c7372c52b8460d80432479ee05a9f2c7f11fea58"},{"alg":"SHA-256","content":"911148cc1af4908dde4863ce611c38fcd4d9a198b19f917e306f26ccf0b8b300"}]},{"bom-ref":"7b7e591c986defcf","type":"file","name":"/juice-shop/node_modules/string.prototype.codepointat/package.json","hashes":[{"alg":"SHA-1","content":"a32e5bb957a6710ede8b6259a25e52bb282f8eb7"},{"alg":"SHA-256","content":"c807618901a6f10c77f191ee7822b4d26423ba3f7e6194799bee0df096ec3a0a"}]},{"bom-ref":"c1504f62e74575e8","type":"file","name":"/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"f972f66c99fb6c84","type":"file","name":"/juice-shop/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"da598f24028fdd9f3801969161159c1bbeb2034c"},{"alg":"SHA-256","content":"e278ca18803862a6d1b6bedc6a3394159ac86e5c4a162614fef006c79dcda3a2"}]},{"bom-ref":"fbf26dbf14a18b1c","type":"file","name":"/juice-shop/node_modules/strip-ansi-cjs/package.json","hashes":[{"alg":"SHA-1","content":"892d549c672831716abe655f087946d2644f2852"},{"alg":"SHA-256","content":"0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"}]},{"bom-ref":"0b1d977a0a4b56b2","type":"file","name":"/juice-shop/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"892d549c672831716abe655f087946d2644f2852"},{"alg":"SHA-256","content":"0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"}]},{"bom-ref":"f48bc750c96ac643","type":"file","name":"/juice-shop/node_modules/strip-dirs/package.json","hashes":[{"alg":"SHA-1","content":"485740a0eee81e8d7459585521c0b7fda39bfb72"},{"alg":"SHA-256","content":"34d0fd27a6a9b87b1aed243a0c85ef98abe77e04946cc065162f62f6badcb10d"}]},{"bom-ref":"f57e64a75c39b08a","type":"file","name":"/juice-shop/node_modules/strip-outer/package.json","hashes":[{"alg":"SHA-1","content":"6d5564549073d159389a2b94894bacf92d24cd93"},{"alg":"SHA-256","content":"998a40b2428ff1fe95ba0ceff8a99565d16fa80763a276bc0aa4b21fc5a79993"}]},{"bom-ref":"c9d615dca3d85284","type":"file","name":"/juice-shop/node_modules/strtok3/package.json","hashes":[{"alg":"SHA-1","content":"4c0a17cf164dfbab502a584082eb6e1847e6677b"},{"alg":"SHA-256","content":"4db1129e1b61a3d33a7955fefcfc4923e02cee3d238015545db4d3f67d79c99e"}]},{"bom-ref":"c13ff0d2b4958b10","type":"file","name":"/juice-shop/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"12db9c2598721e751dffd0b42a20b7ae419b20e2"},{"alg":"SHA-256","content":"34c434b27dc21bd0de7b5edca42fa0d9ebf72d2ac823c72865a334cb8fcfb9b5"}]},{"bom-ref":"3087f7d582157cfc","type":"file","name":"/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json","hashes":[{"alg":"SHA-1","content":"ca0c14a63df0bdf41422d5e8c79d38e214da561a"},{"alg":"SHA-256","content":"aef0ae2d21ae9181d8702c2063ce0ee274ba1063e5312e4baab5673aa6d4d5db"}]},{"bom-ref":"d86474160b8fed94","type":"file","name":"/juice-shop/node_modules/svg-captcha/package.json","hashes":[{"alg":"SHA-1","content":"0efdde17b2dbfc8fa8ca40aa6950c67e0e877631"},{"alg":"SHA-256","content":"0d9c39548169d675ff8c0dd7ebb76319d4aade71f423dd9643092f4e968341ab"}]},{"bom-ref":"cd8c54b2a7bcf18c","type":"file","name":"/juice-shop/node_modules/swagger-ui-dist/package.json","hashes":[{"alg":"SHA-1","content":"6387ab9fb8c0ac5dc93cc58b8fd6b3af11995510"},{"alg":"SHA-256","content":"e6a3804423cd235ca13f383520a414f6007e4d7828206c4d97fcded4c9079f22"}]},{"bom-ref":"bd2b80feba8b1e9e","type":"file","name":"/juice-shop/node_modules/swagger-ui-express/package.json","hashes":[{"alg":"SHA-1","content":"3e3986c37083e87abdc0f50382b0e13d1e989e72"},{"alg":"SHA-256","content":"2a7d7d50229bd13523e90730b6877cb9caa1e9491aa378640093a4040894d376"}]},{"bom-ref":"4c681aec37006d2b","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","hashes":[{"alg":"SHA-1","content":"093539237b878bed9c3aa2b22e8c1b84cd414df7"},{"alg":"SHA-256","content":"fea66d3b8671e46f77e83db040837cf72da180b8d390d53c43d882fd553659df"}]},{"bom-ref":"bb12c08da6a02780","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"c3024b92485c885b974e1f46cb2c32de716c6f06"},{"alg":"SHA-256","content":"7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"}]},{"bom-ref":"f0c06cba34da214d","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"2da558f19945f86b","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json","hashes":[{"alg":"SHA-1","content":"f5f0d892c75460d1d9b79580c165740daf8513fe"},{"alg":"SHA-256","content":"bf26c92d0b2d3b865681bac5cf3bca4cd405e33fcb47f45216899aaed4f81010"}]},{"bom-ref":"879a4de6ba6f4704","type":"file","name":"/juice-shop/node_modules/tar-fs/package.json","hashes":[{"alg":"SHA-1","content":"959c412a76afe093da13a517e9e3cc7291160eaf"},{"alg":"SHA-256","content":"2a7dbf07ccca955f0a9537016ed5c51dbef52fdffa2d2370dc8ec4e58bed9143"}]},{"bom-ref":"8846125c2a1bf673","type":"file","name":"/juice-shop/node_modules/tar-stream/package.json","hashes":[{"alg":"SHA-1","content":"82b92a8ad07a5547aa365bf7d54c48e4752fed7e"},{"alg":"SHA-256","content":"00e16b8127d249e89451e861b7757b51c7d8918bbce7273c978fdb3f121cd403"}]},{"bom-ref":"03268f3bb2c2be5b","type":"file","name":"/juice-shop/node_modules/tar/node_modules/mkdirp/dist/cjs/package.json","hashes":[{"alg":"SHA-1","content":"036c90146bf405373889e2467a422030f14cec29"},{"alg":"SHA-256","content":"9ce4511e221a35d7027c9ca6f4b9ba6c762de06d4544e0cdc7a92062c50bfc5d"}]},{"bom-ref":"0793091d569bcca9","type":"file","name":"/juice-shop/node_modules/tar/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"7951629e27590ab8ae0e3a8e221b2679cda5dd35"},{"alg":"SHA-256","content":"366d0eca09ca7018417907f67a0caf02bdc9ae492e90359f9df7cfe53e7a768e"}]},{"bom-ref":"b83baf5668d30886","type":"file","name":"/juice-shop/node_modules/tar/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"4eaebb818148fd3bcc27e1aef2d88497999f675e"},{"alg":"SHA-256","content":"1b9d47057ce39814531ff93f668823b4fa03e7d23945449c274a1ff6d4cc297f"}]},{"bom-ref":"1c883803e2401c15","type":"file","name":"/juice-shop/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"3108841b231fcdea3fafe29b212c47cb777b9458"},{"alg":"SHA-256","content":"f2de5f4b3f05b8e441aae63ecf228125dc72175052099d918769edb3b8982f7c"}]},{"bom-ref":"7e1275119a12406c","type":"file","name":"/juice-shop/node_modules/tdigest/package.json","hashes":[{"alg":"SHA-1","content":"d346cb0cf35a0ada66aa9aa426d7ca7b1bb537ab"},{"alg":"SHA-256","content":"d956f6e092443eb1dca696b921b85ca86c93241de87a0fb8af4fcfaa15797b42"}]},{"bom-ref":"b6e91b8f8480dce7","type":"file","name":"/juice-shop/node_modules/text-hex/package.json","hashes":[{"alg":"SHA-1","content":"22adf500975e8bb558a26de483d7b7c2044cb6a8"},{"alg":"SHA-256","content":"84b96b962f6fa158dfb9d814778d0f8f1635c35d4ed0dd65fefc6afb30570eeb"}]},{"bom-ref":"92e0c15418155ff0","type":"file","name":"/juice-shop/node_modules/thirty-two/package.json","hashes":[{"alg":"SHA-1","content":"5244980569f912a9231425c883e9f73bb58bb27d"},{"alg":"SHA-256","content":"b452248037358768735ab84ff8eec398b15cfed2b8aaa287a81920f71183686c"}]},{"bom-ref":"33c6be7bedf97d99","type":"file","name":"/juice-shop/node_modules/through/package.json","hashes":[{"alg":"SHA-1","content":"8bc63accbab0e155f8aa7c6eb46eee6e859bcb6b"},{"alg":"SHA-256","content":"6580a473cf2f91c6752a01d2c31f729cb14f7e042b830ba46f8949f89e26bdb4"}]},{"bom-ref":"25cffa67e13892bc","type":"file","name":"/juice-shop/node_modules/timed-out/package.json","hashes":[{"alg":"SHA-1","content":"4e735d6703795556aa1bdc916058d1d301d6d746"},{"alg":"SHA-256","content":"fdd01b108ebb6fc5e033fb494fbd52bdd7ac38759cd66e930cd43d49b86ecab2"}]},{"bom-ref":"12f2f6cf0c338de0","type":"file","name":"/juice-shop/node_modules/tiny-inflate/package.json","hashes":[{"alg":"SHA-1","content":"34700e8451c817e74d6c6f9a1c0801703e11a63a"},{"alg":"SHA-256","content":"7a97c9567b054c9294036537d42a112f4bd4263892fbfe2714e6acdf25816c6d"}]},{"bom-ref":"4190ff342cc02f31","type":"file","name":"/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json","hashes":[{"alg":"SHA-1","content":"87c30edff77dd2a0847ac92b0a76837682d64eb2"},{"alg":"SHA-256","content":"aca49395d61ef383a09f74555c66ed45817ca2b5724e710a4dc9e0471b83d8f5"}]},{"bom-ref":"06dbb412f1551e68","type":"file","name":"/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json","hashes":[{"alg":"SHA-1","content":"d5b57c1efc38eb0545dbf3eaffe857ba94597f07"},{"alg":"SHA-256","content":"ef0245814fbc6d3cee835c9a9c43f31daab1825cebcd6d005723aabea0f9136f"}]},{"bom-ref":"13fbdf8ed1c094c9","type":"file","name":"/juice-shop/node_modules/tinyglobby/package.json","hashes":[{"alg":"SHA-1","content":"9d1b712749d1ba4fdbc6a5486b0c418ef2715c63"},{"alg":"SHA-256","content":"fd5cca66312d8d3996af018805abe5b36ecdbbabe9de4c356e804e543533d96b"}]},{"bom-ref":"b19b1227624c8daa","type":"file","name":"/juice-shop/node_modules/to-buffer/package.json","hashes":[{"alg":"SHA-1","content":"c77bdb95cbe24a914e2a43e6183e71429883d5ad"},{"alg":"SHA-256","content":"a9ba7c91c57059eed9dd1012f3b489d8a706032346e0120eb175a3918ea735ba"}]},{"bom-ref":"a2ff7aac8238f752","type":"file","name":"/juice-shop/node_modules/to-object-path/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"54d030d54e9eb97c0ba0aedc39a45f169857672d"},{"alg":"SHA-256","content":"4fbd705c00cde2b9b29cf368f9accf1a057065ab8a349f1a5d27e5f10eee36ff"}]},{"bom-ref":"b89928d1fef48b6e","type":"file","name":"/juice-shop/node_modules/to-object-path/package.json","hashes":[{"alg":"SHA-1","content":"2eab6ad0e48a6d7f1f3e04c69eb6505144171e12"},{"alg":"SHA-256","content":"0912f670c6b1daf31668a62d860a328409f50072c2ad93132ceb8f481600d925"}]},{"bom-ref":"d514652864341422","type":"file","name":"/juice-shop/node_modules/to-regex-range/package.json","hashes":[{"alg":"SHA-1","content":"32f9c44ca36bfa71bfc881466834eb76f7cfa295"},{"alg":"SHA-256","content":"3242b899f06144dcd82c5988b2951d98473627343c4b5762b5deb3f39e60523b"}]},{"bom-ref":"4c89b47bef9abeb4","type":"file","name":"/juice-shop/node_modules/to-regex/package.json","hashes":[{"alg":"SHA-1","content":"2abe5f5c603fe6cc7fc05dd904c35193cc08c664"},{"alg":"SHA-256","content":"aab11cc9fb98af4495bb6355ca393ef73320f0931beb817eb044b9fef234ee1f"}]},{"bom-ref":"e2368d4c86516937","type":"file","name":"/juice-shop/node_modules/toidentifier/package.json","hashes":[{"alg":"SHA-1","content":"e8fe1d02a381b71a33e41588ae26746d34fa4903"},{"alg":"SHA-256","content":"f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc"}]},{"bom-ref":"5c94b707dc673650","type":"file","name":"/juice-shop/node_modules/token-stream/package.json","hashes":[{"alg":"SHA-1","content":"45c7c0d74ae7dd7472a18f68b9ad05815a6f84ea"},{"alg":"SHA-256","content":"0715f6c496a2e1866067d32679bb610687465f6f94724bb1c7bcdc1b50964f08"}]},{"bom-ref":"fcd20ba93d43d8b1","type":"file","name":"/juice-shop/node_modules/token-types/package.json","hashes":[{"alg":"SHA-1","content":"3836dc720a9de8346b44e9b48075a0cf40a12a08"},{"alg":"SHA-256","content":"8376de6a6272c19359e4feb53a8206760777291a7a09cec3964ee37fe092354e"}]},{"bom-ref":"737d1507b2dd69e3","type":"file","name":"/juice-shop/node_modules/tr46/package.json","hashes":[{"alg":"SHA-1","content":"49c76b0a075effa9325c17f55c4d6472ddf3c7a9"},{"alg":"SHA-256","content":"615087f58ee138fd35c2b414c355b72e36e5919725b8aecc1c34f6a5585b9779"}]},{"bom-ref":"a21404cf3e3af7be","type":"file","name":"/juice-shop/node_modules/traverse/package.json","hashes":[{"alg":"SHA-1","content":"06c9415120aba8a3d5a3564763b9b406cb96f23a"},{"alg":"SHA-256","content":"305d53d5257aa2a3618a2ce42ce50ad45d1b108186580f3c00482e42086b2d14"}]},{"bom-ref":"e26c3148d14322e9","type":"file","name":"/juice-shop/node_modules/tree-kill/package.json","hashes":[{"alg":"SHA-1","content":"6783621cd04adcc4bffa1d562451c350a84bf0c3"},{"alg":"SHA-256","content":"085e475aa81fe90a8e42d92c7348f259e370e0fc74b5d1982c6e80fc21c1f12d"}]},{"bom-ref":"6cb07d996ae8f74a","type":"file","name":"/juice-shop/node_modules/trim-repeated/package.json","hashes":[{"alg":"SHA-1","content":"43166e064e6112331c58224799fcda38e15dab92"},{"alg":"SHA-256","content":"caf8852960da48c505e1ec6884878a9bb52b8fbbb8eb1dcc855f19a7f50fe4ac"}]},{"bom-ref":"b3f0c8ae3c6b1ad1","type":"file","name":"/juice-shop/node_modules/triple-beam/package.json","hashes":[{"alg":"SHA-1","content":"1e356e8f3df9978c633d2fdd6adef6f8f6f17f9f"},{"alg":"SHA-256","content":"b7c3d5228846e6719feb034f1aa72f294f1804ef9cf1f3fd7e1659413b9b3950"}]},{"bom-ref":"21f382e48561c20c","type":"file","name":"/juice-shop/node_modules/truncate-utf8-bytes/package.json","hashes":[{"alg":"SHA-1","content":"97ad55b3d7fef9910d4e8b426845e9a2e8bdbe01"},{"alg":"SHA-256","content":"8da766c7092b0ce9fd8f3b2ac2f41d1b739df9210067d3f710d65d95c9c17a7a"}]},{"bom-ref":"fec6e8f6cfb858c9","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"0ede9fa95516398048bc6154c461e124fb49f6cc"},{"alg":"SHA-256","content":"0aa964543e59d4d5df21c786f7bde534939d96dfe8d02ddf1ae75540ab42df33"}]},{"bom-ref":"b97d6974caeedd92","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/diff/package.json","hashes":[{"alg":"SHA-1","content":"891584e4311453cb5d8d97fc6fe31590058c0d86"},{"alg":"SHA-256","content":"459fce5adc8ad5666a18a905201e39d7f1a6d910c9e2c81fabd0ef1a8b360cb9"}]},{"bom-ref":"c33417e4f1933f1d","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"c85ab041cb8fb58d","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"497003d0b7f274dd0b3bc185a6ea60657933270d"},{"alg":"SHA-256","content":"ab02f4767adc32c3ced28703bf7f5a57fee72b638b582850a647770d12e5dbe7"}]},{"bom-ref":"d605a520c8ff93ff","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"d1241a4f102aa0d377e63ee84d58b278677c3435"},{"alg":"SHA-256","content":"3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071"}]},{"bom-ref":"f3af24c02006f7a2","type":"file","name":"/juice-shop/node_modules/ts-node-dev/node_modules/ts-node/package.json","hashes":[{"alg":"SHA-1","content":"b0a2e2f216aff3293888ac4e536774d0fa97bd7b"},{"alg":"SHA-256","content":"3bfc07226a84ac8adb19a389ba0a11446a2f34b285dab8c5540a8ede1d5d4fa5"}]},{"bom-ref":"cdf0349acf7b12ad","type":"file","name":"/juice-shop/node_modules/ts-node-dev/package.json","hashes":[{"alg":"SHA-1","content":"b50b61d4442dc0d68ea14e0d5905fcb906047e89"},{"alg":"SHA-256","content":"9624032582ebd97070afecd3c72900bb10b4b425cb65bfb9a628cdd4627748fc"}]},{"bom-ref":"759db1dfba38161d","type":"file","name":"/juice-shop/node_modules/tsconfig/node_modules/strip-bom/package.json","hashes":[{"alg":"SHA-1","content":"57f1256f62dc4a0607e2bc1cd5dc1e97f08d33b6"},{"alg":"SHA-256","content":"3165a2242ce2f930e841df38ea2383a6bb1e18758b782a392af63eb32facb93d"}]},{"bom-ref":"7e9e729ba0882f4c","type":"file","name":"/juice-shop/node_modules/tsconfig/node_modules/strip-json-comments/package.json","hashes":[{"alg":"SHA-1","content":"d33064d55afd32cee36afe2ef20a37d1e80c2967"},{"alg":"SHA-256","content":"52fba89a1d2724dfeafa21ec58f8c4a8a210103cc6b65b4468ab3fb973ad1753"}]},{"bom-ref":"9ed7cfb9c7d8cfed","type":"file","name":"/juice-shop/node_modules/tsconfig/package.json","hashes":[{"alg":"SHA-1","content":"788ec8af5ea8be1e9c55ad9fce43efeb6cec348a"},{"alg":"SHA-256","content":"3fc38c586f1cb10ab0429a0b90dc8c921f7d65ac01abaa86c22ffc1cab200b52"}]},{"bom-ref":"f3fee396402aa8dc","type":"file","name":"/juice-shop/node_modules/tslib/package.json","hashes":[{"alg":"SHA-1","content":"c7227cadc95e0155ca68f85e9487ebbb9091034e"},{"alg":"SHA-256","content":"7ecf3460a204a34f0ef8ea32d0f9828385658d4e5d5e271f93f40e7b36a32972"}]},{"bom-ref":"ef6ca226933351e4","type":"file","name":"/juice-shop/node_modules/tunnel-agent/package.json","hashes":[{"alg":"SHA-1","content":"b0f728acf482a20e28d3d25e56b084529c2533d4"},{"alg":"SHA-256","content":"08a8560b650b49370af44148a8645c11675ba97d21ee7f347d8d434b13c51074"}]},{"bom-ref":"2644a5dd0a532e16","type":"file","name":"/juice-shop/node_modules/type-is/package.json","hashes":[{"alg":"SHA-1","content":"28d55c4730fdacf9019317fae0ba93a0b6aebd0b"},{"alg":"SHA-256","content":"87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63"}]},{"bom-ref":"76091895f1b3afdf","type":"file","name":"/juice-shop/node_modules/typecast/package.json","hashes":[{"alg":"SHA-1","content":"21c7885a03c0f346f10b8c44d64dc5e2b06a4345"},{"alg":"SHA-256","content":"751046532a62d8d98efba8b21055fea0acf58057a69713cf4badbbbddc30af6a"}]},{"bom-ref":"fcc582454543d1d0","type":"file","name":"/juice-shop/node_modules/typed-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"d2a1cbffbc42f558a580d54bd12a6a496ac1b569"},{"alg":"SHA-256","content":"f0f933ad37d3be61efcb8c4fe64088cd97a4bc86038d5bc19f33df1e995bac56"}]},{"bom-ref":"308ac14d8d08cfd9","type":"file","name":"/juice-shop/node_modules/typedarray/package.json","hashes":[{"alg":"SHA-1","content":"80e445329a66d6a606165762bb9c34dd7caf135d"},{"alg":"SHA-256","content":"622ebab64ef61f10e4dd28a099e88545c477ccf7d5aa28d2eb4462c857e76fda"}]},{"bom-ref":"678092af005d3623","type":"file","name":"/juice-shop/node_modules/typescript/package.json","hashes":[{"alg":"SHA-1","content":"335d19608bdc8e92446cdd843822074ad0bb6a1a"},{"alg":"SHA-256","content":"588b407ef9f17afd2d99c47bb67bae14b009a9b79ed058f2e39cb1772fe04226"}]},{"bom-ref":"f2e8bd211c76c356","type":"file","name":"/juice-shop/node_modules/uglify-js/package.json","hashes":[{"alg":"SHA-1","content":"babba559ebf25dbad8e337ff1e622e1e499ecd28"},{"alg":"SHA-256","content":"4e7908267a1b0dfd5af0004dba63e8392ffc509ae986d5931017a55d7d65167d"}]},{"bom-ref":"4cc5e222d750ba94","type":"file","name":"/juice-shop/node_modules/unbzip2-stream/package.json","hashes":[{"alg":"SHA-1","content":"cf8bdf0d4fa8254d541678572099ad8738f1e054"},{"alg":"SHA-256","content":"ebb4f3f85319e57392b46070e1c39ba33ad74aa2f01934ffea0ecfcbb22282af"}]},{"bom-ref":"c73128df635e646f","type":"file","name":"/juice-shop/node_modules/unc-path-regex/package.json","hashes":[{"alg":"SHA-1","content":"5e66f1c422e03aee88f570bd73d7498db87bc036"},{"alg":"SHA-256","content":"ec92f74becc17cf02d61f006553f750e6a9ebbe2e5dfb4057003f9e67065f973"}]},{"bom-ref":"a78e1dfbff731333","type":"file","name":"/juice-shop/node_modules/underscore.string/package.json","hashes":[{"alg":"SHA-1","content":"becb44287069fbf82c0b0d3c281b1bcfcbf135f4"},{"alg":"SHA-256","content":"b8a24fd9e9423e22f083c7cf94fbf8f45caa56bf9e662fb58deb7a5999ab5e34"}]},{"bom-ref":"aa8393f640710c01","type":"file","name":"/juice-shop/node_modules/undici-types/package.json","hashes":[{"alg":"SHA-1","content":"def899bd021e6c2f7b962f89c29326e2eab41c2c"},{"alg":"SHA-256","content":"11f873b423b96a5ad444a099685ca6b9de1379dcd83fd8d368e757ddb53658e4"}]},{"bom-ref":"7d318d516b8d6ca5","type":"file","name":"/juice-shop/node_modules/unicode-properties/package.json","hashes":[{"alg":"SHA-1","content":"6d843d2dbd0f2cb1a31a2ae38b8e90fcb43d75a5"},{"alg":"SHA-256","content":"4dba3776474dc9f928749684eeaeabacb40fd0e58ef704b2c2a976201830183b"}]},{"bom-ref":"28c5c2144598d0e5","type":"file","name":"/juice-shop/node_modules/unicode-trie/package.json","hashes":[{"alg":"SHA-1","content":"06c142c393c921d1f8ea85e83697d9ac3c737b06"},{"alg":"SHA-256","content":"11742ae162c45a0f55a4d85ae1c6dc7dd380e203173d3bca04e72ca3b68729b6"}]},{"bom-ref":"8fa03de3c0b44c51","type":"file","name":"/juice-shop/node_modules/union-value/node_modules/is-extendable/package.json","hashes":[{"alg":"SHA-1","content":"6da86adb0f2189babaed566a9313124363130ec3"},{"alg":"SHA-256","content":"eb1fccd73d67e1f2356e1b17df7dc0f235d3d98b4a11c7430e3e476fd410d535"}]},{"bom-ref":"cad8482f54537e41","type":"file","name":"/juice-shop/node_modules/union-value/package.json","hashes":[{"alg":"SHA-1","content":"00bec466b87eac75b68b2ec4724be619a948886d"},{"alg":"SHA-256","content":"19bc799982e63c8697882a00144575f9ef4e77861634025cfe67cae00b645138"}]},{"bom-ref":"7f5bfbdce3dac4e0","type":"file","name":"/juice-shop/node_modules/unique-filename/package.json","hashes":[{"alg":"SHA-1","content":"7ab7ef7fed369084e86d0800e1861115c3ff1bcd"},{"alg":"SHA-256","content":"ac3d03b4b239b3eff717b2fdb3dac9f32fd9bf49ee8c20cd87f82fd148c2a7e5"}]},{"bom-ref":"d522c56fa1217391","type":"file","name":"/juice-shop/node_modules/unique-slug/package.json","hashes":[{"alg":"SHA-1","content":"6bfb7b3e3ad92a208217828bc65a87369999d06f"},{"alg":"SHA-256","content":"23b9c2630936c9633601c95d91165f2d5dd8f099886e058873eb282ac537fdb7"}]},{"bom-ref":"18b4c8b80ad7d151","type":"file","name":"/juice-shop/node_modules/unit-compare/package.json","hashes":[{"alg":"SHA-1","content":"50708e884a13c34459a6a1ae97eafb1cdc6edac5"},{"alg":"SHA-256","content":"05aaac050989d3df38d6b780014d88de154def8489451ff89a090cf40fc6d036"}]},{"bom-ref":"9fd79c90e8966410","type":"file","name":"/juice-shop/node_modules/universalify/package.json","hashes":[{"alg":"SHA-1","content":"ee873fdef51ff8bb443eaa2e404c470fee171133"},{"alg":"SHA-256","content":"10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee"}]},{"bom-ref":"6c787a34125ec004","type":"file","name":"/juice-shop/node_modules/unpipe/package.json","hashes":[{"alg":"SHA-1","content":"f67f2d17a18c3ded93c9423903df8e6678f4e416"},{"alg":"SHA-256","content":"28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11"}]},{"bom-ref":"ddf2368014f72fbc","type":"file","name":"/juice-shop/node_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json","hashes":[{"alg":"SHA-1","content":"37928d3672f28444e024bf211544a952dc96c721"},{"alg":"SHA-256","content":"33f50f8933f530f9c0ee92ef577e0a2d800f3e7feb170f1440fd695013f1bbc8"}]},{"bom-ref":"88855d2af4f5bd69","type":"file","name":"/juice-shop/node_modules/unset-value/node_modules/has-value/package.json","hashes":[{"alg":"SHA-1","content":"cee5fb60018554904f41c3a48caf88320b9abee9"},{"alg":"SHA-256","content":"b22ad4f9f0a2647a61d6737cf31a5b5a60ce61430051fdc2d1e28ea26e97c56e"}]},{"bom-ref":"726f692187cb3b5b","type":"file","name":"/juice-shop/node_modules/unset-value/node_modules/has-values/package.json","hashes":[{"alg":"SHA-1","content":"8c869bea40b0a6c9489eaa22db6847da40b59a8e"},{"alg":"SHA-256","content":"060cabf4547eaddf74d422b249aabf6ef7e509ccf1895991d1bc2ab4c388e674"}]},{"bom-ref":"b43d4e254d6b7e0b","type":"file","name":"/juice-shop/node_modules/unset-value/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"e4a5d79d5ea9366beb66cf993d11b88603e6333e"},{"alg":"SHA-256","content":"93165ce56e458216c18240cd961a522af5b18e51da06f55d88ac552234455d95"}]},{"bom-ref":"89e4ac95b987e681","type":"file","name":"/juice-shop/node_modules/unset-value/package.json","hashes":[{"alg":"SHA-1","content":"a96452eab0d1052eae2129ec8f74e87eb299d0b4"},{"alg":"SHA-256","content":"cea2e17fde57227ea745e57d0fbeef930619ab4bf0d9bee64836a57765b05477"}]},{"bom-ref":"75b29db42526eb11","type":"file","name":"/juice-shop/node_modules/untildify/package.json","hashes":[{"alg":"SHA-1","content":"09416f7c9cc2542590391f058c0c6a19be99441f"},{"alg":"SHA-256","content":"8b330bacc3f2437a89ffd62ad4d6c847e04074e0cc197876b7a0cd3ab46f8f18"}]},{"bom-ref":"18adb4b0dac30f2e","type":"file","name":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","hashes":[{"alg":"SHA-1","content":"798aabfd8f98b7acc51b06ccf115f6f5f13ff3bb"},{"alg":"SHA-256","content":"5e8f820b5628dc16da723fdb42c0c8c50a59f201591a335310fe754a076598f6"}]},{"bom-ref":"477aa9245078acd2","type":"file","name":"/juice-shop/node_modules/unzipper/package.json","hashes":[{"alg":"SHA-1","content":"ff392885ebb8c1ee02209a3803b2e7d3f585fd01"},{"alg":"SHA-256","content":"10a99b6c186386454323df981067d807c9cf22493d3636bdad05e599adba5635"}]},{"bom-ref":"98ef4024fb8fa961","type":"file","name":"/juice-shop/node_modules/urix/package.json","hashes":[{"alg":"SHA-1","content":"d5a5e5de80555f2d886ad10b058ed6bc56f49183"},{"alg":"SHA-256","content":"a4af24af6e377d268d9a32c714b90d0752eaff9d192862c28f1a878482c4310b"}]},{"bom-ref":"25e06955dba66a5e","type":"file","name":"/juice-shop/node_modules/url-parse-lax/package.json","hashes":[{"alg":"SHA-1","content":"4f3578d706cc6f6b8c71191b6846e74e91d60259"},{"alg":"SHA-256","content":"7ccad07cb7916cb11fdf9ee02fb93a9dceabc860c1550186506c0744b1504f76"}]},{"bom-ref":"3e701beae5ca4648","type":"file","name":"/juice-shop/node_modules/url-to-options/package.json","hashes":[{"alg":"SHA-1","content":"72b6578557d3299f9e72b3d0bcca11f73e3581af"},{"alg":"SHA-256","content":"39f7f5ee9153c83263fdf0c38e140d34ec4a9bbb88c9988862e2f0530033994e"}]},{"bom-ref":"fcf475442bbcabd5","type":"file","name":"/juice-shop/node_modules/use/package.json","hashes":[{"alg":"SHA-1","content":"325fb4d4ed92aa3e273ec1b59d645701ade681a8"},{"alg":"SHA-256","content":"97ce309ae5a1eff3333ae820f051b984866523ccf4a459063f0b745bb863954d"}]},{"bom-ref":"241a964f22b2850e","type":"file","name":"/juice-shop/node_modules/utf8-byte-length/package.json","hashes":[{"alg":"SHA-1","content":"223456bfa4f5067cc378339ab9c448b028e4d203"},{"alg":"SHA-256","content":"b889d007bbd065efe6d9dedc6b4905794fb17b179e0591501782df6afc085314"}]},{"bom-ref":"051e92478e195a04","type":"file","name":"/juice-shop/node_modules/util-deprecate/package.json","hashes":[{"alg":"SHA-1","content":"2e69081e7bab6e09d3dcfd680716fdeea577431d"},{"alg":"SHA-256","content":"7bba467f049074957e693fc06672848b040c38fa071b6eed8690f5fbe090a8b2"}]},{"bom-ref":"9910fa91033ca99a","type":"file","name":"/juice-shop/node_modules/util/package.json","hashes":[{"alg":"SHA-1","content":"697818aa18993bd5dc20294d0d85282c1fa978f8"},{"alg":"SHA-256","content":"4957e41a94a2177b25ddd4fa46e60062e2324f0fc665d4318b90a7e4c2401f74"}]},{"bom-ref":"af41107ba9e02a1d","type":"file","name":"/juice-shop/node_modules/utils-merge/package.json","hashes":[{"alg":"SHA-1","content":"a03473329c34092ea6a88cc11c409a4ecf8bad33"},{"alg":"SHA-256","content":"6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8"}]},{"bom-ref":"0a4aea09a9727058","type":"file","name":"/juice-shop/node_modules/uuid/package.json","hashes":[{"alg":"SHA-1","content":"a58d29c1fd72b80ea213864527ae7bb48ae3f2be"},{"alg":"SHA-256","content":"56c3eae5f83172f7ab5205980ebd9a1328f6436628d893720938d5679208922c"}]},{"bom-ref":"77944552c761bf60","type":"file","name":"/juice-shop/node_modules/validate/package.json","hashes":[{"alg":"SHA-1","content":"47c6d175ec289a4e7ef3cad1758e784810496aa5"},{"alg":"SHA-256","content":"605a57bda1914000b35b68d484f713b57b95a244fb82371c00b0cbfbc908ec4b"}]},{"bom-ref":"4c99d0f192939896","type":"file","name":"/juice-shop/node_modules/validator/package.json","hashes":[{"alg":"SHA-1","content":"bfaf94d692f098f56b9051372e351f0193f75fd0"},{"alg":"SHA-256","content":"f2d4805a01c1f9470f1572c1a5ba5f3c8318089aeabe3160bc5e4a1a31733a5f"}]},{"bom-ref":"6588b121d3984159","type":"file","name":"/juice-shop/node_modules/vary/package.json","hashes":[{"alg":"SHA-1","content":"82f740e2254b786f7a3a39a762d4d0fc6ec7b008"},{"alg":"SHA-256","content":"73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa"}]},{"bom-ref":"6f29236cd4d7a060","type":"file","name":"/juice-shop/node_modules/vm2/package.json","hashes":[{"alg":"SHA-1","content":"81c010c570ab2c70c77bb12f251eba134bd20bc1"},{"alg":"SHA-256","content":"33aeb82e1da86be550c332517bab98fb0e2a6c2a9032f887fbbdd4b1085bde66"}]},{"bom-ref":"53102299bbaf341a","type":"file","name":"/juice-shop/node_modules/void-elements/package.json","hashes":[{"alg":"SHA-1","content":"b0b8e02fd6d29a691289f9d279e1be41201a79c4"},{"alg":"SHA-256","content":"9cc3503e65c64719269421c1820f11bb66ad5a5f1597ee68e350ed18dd23b98a"}]},{"bom-ref":"2f8a2312240e8795","type":"file","name":"/juice-shop/node_modules/walk/package.json","hashes":[{"alg":"SHA-1","content":"48409567c2bff0f58fde79948118ac9d50ada686"},{"alg":"SHA-256","content":"a2a8f916e38926b6b45761a7e8eb14952a1754a0bf0d2c3689038af9bf156bdb"}]},{"bom-ref":"02f2f7ac5454b3bf","type":"file","name":"/juice-shop/node_modules/walkdir/package.json","hashes":[{"alg":"SHA-1","content":"ec0b65e01578e50bb446aca570ba7b5efde8e29f"},{"alg":"SHA-256","content":"628303c50a0895ba01d1869d6adf63eecf2d3534e2b143f98d3f21eca77d25d6"}]},{"bom-ref":"eb869cfe55d0f54b","type":"file","name":"/juice-shop/node_modules/walkdir/test/comparison/package.json","hashes":[{"alg":"SHA-1","content":"ff50ca027638d23483435b73da1bdcfca4b7f269"},{"alg":"SHA-256","content":"1fe01eca0bb65e21e447caa7378df650ffd1a129ef80c0a07bea254c07646628"}]},{"bom-ref":"9272e1551bd5665b","type":"file","name":"/juice-shop/node_modules/web3-core/package.json","hashes":[{"alg":"SHA-1","content":"9a4bee64ef30b111a090977a519365263f0e34cc"},{"alg":"SHA-256","content":"30e262c0efc6be06452536ce65d8e7db91fc6bb61d4665b1bd3cd114ff0b0805"}]},{"bom-ref":"5f157eee56fa43a5","type":"file","name":"/juice-shop/node_modules/web3-errors/package.json","hashes":[{"alg":"SHA-1","content":"06a95e07b551dbd3296444f97d0ced85016c0da9"},{"alg":"SHA-256","content":"8df750f79204cfc2ee831a55a169f0b967625f2ce3a5bd8fb3c2eaed9e06de1b"}]},{"bom-ref":"b422b394b25f3c84","type":"file","name":"/juice-shop/node_modules/web3-eth-abi/package.json","hashes":[{"alg":"SHA-1","content":"1dbdc7afe45e15889220ece74fbeaf9269850c69"},{"alg":"SHA-256","content":"00223e46502b90dd1750657b2cac3587967416eaf84f943650c4918c46b1551c"}]},{"bom-ref":"930193cc949b848b","type":"file","name":"/juice-shop/node_modules/web3-eth-accounts/package.json","hashes":[{"alg":"SHA-1","content":"511500d9aca23ecc09a98330f2a02cc1a826f867"},{"alg":"SHA-256","content":"30e0529539e7a45ebe8bf6c6753a5505d4fe56b0cd8e6e68750bb3a0bc2f9dbd"}]},{"bom-ref":"faa5b789ee4da27e","type":"file","name":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json","hashes":[{"alg":"SHA-1","content":"5be38e1d6d232cd0c19d63f4f8cf38ff86ee0e34"},{"alg":"SHA-256","content":"3f2b704d7bd4a8dead05900eb8316ed21f87ddb8610ecd824b67202055c33e5c"}]},{"bom-ref":"249a54dfe0b560d6","type":"file","name":"/juice-shop/node_modules/web3-eth-contract/package.json","hashes":[{"alg":"SHA-1","content":"416333e500815c86b3379895771352b3691f77cc"},{"alg":"SHA-256","content":"2e5b2f36c24e2970e6dd57b0434ee27c7baed599917ee79c2ffc943b3f12cd7d"}]},{"bom-ref":"7ec430b8cfc59701","type":"file","name":"/juice-shop/node_modules/web3-eth-ens/package.json","hashes":[{"alg":"SHA-1","content":"88cd941cf4a64bc413c5ff8b60065882d0f572b5"},{"alg":"SHA-256","content":"6a718b21803d9a9df83d19195eaf2b28c4c0d5109ff641dc0aadd55b4870a6c4"}]},{"bom-ref":"1a5a5baa1000d86d","type":"file","name":"/juice-shop/node_modules/web3-eth-iban/package.json","hashes":[{"alg":"SHA-1","content":"fd10888eb7604650c7fba2d9ed463091a9a9dae5"},{"alg":"SHA-256","content":"621c7e1c48c70fcda8266aac52ded87dd471b53a581f3eb406da403b11e31107"}]},{"bom-ref":"d5b518cf120d452f","type":"file","name":"/juice-shop/node_modules/web3-eth-personal/package.json","hashes":[{"alg":"SHA-1","content":"82fab1561c1fb3400e25503bb5731df2a0ca4af0"},{"alg":"SHA-256","content":"b19c76aa4cf9f54731694513b3bcf5847230df4d626eb9261e204ea47ff25aa9"}]},{"bom-ref":"84a1bcc0b7eecbff","type":"file","name":"/juice-shop/node_modules/web3-eth/package.json","hashes":[{"alg":"SHA-1","content":"8e7643b2c5b151ada2844704a4bc2b593de2111b"},{"alg":"SHA-256","content":"83e31b895cbfd02b200f2571ef3168793ed8413811e868b97ddf12e4c0f3e57c"}]},{"bom-ref":"b2ec51cd7fab9271","type":"file","name":"/juice-shop/node_modules/web3-net/package.json","hashes":[{"alg":"SHA-1","content":"c8d51c56f73bb2b89eb09841a89a6369915489f9"},{"alg":"SHA-256","content":"70330272fb97e6cbf1a7d138015b36b2058864785ca11ee009f376ea08e093d7"}]},{"bom-ref":"dc8bc3a9364c8b5a","type":"file","name":"/juice-shop/node_modules/web3-providers-http/package.json","hashes":[{"alg":"SHA-1","content":"c85fb4b319aa8bc6da93dcf152b21fe040f5c1b6"},{"alg":"SHA-256","content":"42cfbb396b5f20ef787a9b9a0819421f7abd8ea42e8e3081738a14a7c843d810"}]},{"bom-ref":"a729d7af1084b952","type":"file","name":"/juice-shop/node_modules/web3-providers-ipc/package.json","hashes":[{"alg":"SHA-1","content":"a0d0bb04eb64e17015530d54ee32e71e01dee237"},{"alg":"SHA-256","content":"8a52c8e10046045797cb517774e26a0fb2ea313ce5687413207514e1d1d39e0e"}]},{"bom-ref":"57e4d0c2d0c59c3c","type":"file","name":"/juice-shop/node_modules/web3-providers-ws/package.json","hashes":[{"alg":"SHA-1","content":"436713028ad894dcd9cc96ce3018e42fc9bd400f"},{"alg":"SHA-256","content":"2c0aaa48a2a8aa06442af4b6835a4b8b23290f792dfd8cf445587890bdbc4409"}]},{"bom-ref":"52706015849bdef3","type":"file","name":"/juice-shop/node_modules/web3-rpc-methods/package.json","hashes":[{"alg":"SHA-1","content":"abdaa9ccfc2dd8173680b82770fb361b0bd8f639"},{"alg":"SHA-256","content":"f11f96f55f25143dd6e5ba0f77f5fcaac6902e3cb1bdc12677e78f57543010cf"}]},{"bom-ref":"52998eeabe394b48","type":"file","name":"/juice-shop/node_modules/web3-rpc-providers/package.json","hashes":[{"alg":"SHA-1","content":"b0bd2fb4119f14917926ff8780e457b53aa9fc71"},{"alg":"SHA-256","content":"9fc881af0b217392fb1e0c8402400a7b562302d5d860e1e529ca93245fecf8e6"}]},{"bom-ref":"c8a3f30496a83f0d","type":"file","name":"/juice-shop/node_modules/web3-types/package.json","hashes":[{"alg":"SHA-1","content":"89ee7fc37f264cb03d7cd8f58bcc2842a9919ea7"},{"alg":"SHA-256","content":"899087527f705c125ff3edffdf5f4bf8155f037737446ae04a5277588211b3d9"}]},{"bom-ref":"0b0aa06c0cb5157d","type":"file","name":"/juice-shop/node_modules/web3-utils/node_modules/eventemitter3/package.json","hashes":[{"alg":"SHA-1","content":"d01fffee3000cd0c212d4ea278acb0c6ca6d3889"},{"alg":"SHA-256","content":"7ad3766f9fede4b61775a7da6a64bf68e1d73e6298e54ac03425279df2f2d1eb"}]},{"bom-ref":"88160bbc9570f1a6","type":"file","name":"/juice-shop/node_modules/web3-utils/package.json","hashes":[{"alg":"SHA-1","content":"f3bf2c3b4d35b272d5594d90ce61df97789c28eb"},{"alg":"SHA-256","content":"a0547951339b700e3d113c4e175fcc2f19e0e82ecb28cd5274bb95e838909bfc"}]},{"bom-ref":"3f1af0271d1eb75e","type":"file","name":"/juice-shop/node_modules/web3-validator/package.json","hashes":[{"alg":"SHA-1","content":"2e1b127537bbe96f5562f65f8def9b7ecc36805d"},{"alg":"SHA-256","content":"0500f4f85a45f9f5ca6fa3c2037ebf6ef0feda7d03e554f91c667c751fd2d05d"}]},{"bom-ref":"6e1512b3ab70e2ea","type":"file","name":"/juice-shop/node_modules/web3/package.json","hashes":[{"alg":"SHA-1","content":"aea1d763f6554fba9eb61963a96178cf930cfdbe"},{"alg":"SHA-256","content":"6ef39e7ad149e6f918d0c8e7acec55b9a5de84f44580d18de02fcb79a899d5f8"}]},{"bom-ref":"d3c222a864846159","type":"file","name":"/juice-shop/node_modules/webidl-conversions/package.json","hashes":[{"alg":"SHA-1","content":"838524f3ed65e3864f1b3bd5bb6dbda20e3bf19f"},{"alg":"SHA-256","content":"e26568c06b82596d754c7490fd568b4b3f970b3b97c55020d42f65990d0c86af"}]},{"bom-ref":"fd1c8cb4f077ea54","type":"file","name":"/juice-shop/node_modules/whatwg-url/package.json","hashes":[{"alg":"SHA-1","content":"e132303f04d1fd2b2c1819e82abed61db37b3370"},{"alg":"SHA-256","content":"05a015c4176246f051bbaa3a543ed82480a4a4d85360283e049f159ba014b008"}]},{"bom-ref":"e1be5c3535c6cad6","type":"file","name":"/juice-shop/node_modules/which-boxed-primitive/package.json","hashes":[{"alg":"SHA-1","content":"0af7e24076139571355204f3bace1c3a603949a6"},{"alg":"SHA-256","content":"9e0869e7c145b1d1e6ea0e63b2870a1aa230e7f75ffe69240908c90d35c02aa9"}]},{"bom-ref":"cdba1a6da089f490","type":"file","name":"/juice-shop/node_modules/which-collection/package.json","hashes":[{"alg":"SHA-1","content":"7c6ebd4f25ca1ca27d30f8d395cf4f330f619638"},{"alg":"SHA-256","content":"bf95e02a88d5b89dbc6b544c334a317c234f3c4a237f9f1dcf611506990ed196"}]},{"bom-ref":"d025fa02dfccbc77","type":"file","name":"/juice-shop/node_modules/which-module/package.json","hashes":[{"alg":"SHA-1","content":"66bc9244d8b750f43d498703675d6d71f8e1981c"},{"alg":"SHA-256","content":"02f6f6833d09c32100317a390892888ae44da4f712b2271d4b308bcace09a99f"}]},{"bom-ref":"e2df9373ed25898a","type":"file","name":"/juice-shop/node_modules/which-pm-runs/package.json","hashes":[{"alg":"SHA-1","content":"d37f6577f5a53592a5080771fec8aa3340b1a86c"},{"alg":"SHA-256","content":"0eb3591abd6e960733cb1d8739e329d2565397e5a3d8b4326b30c80f31d69ab4"}]},{"bom-ref":"1a22639eaff56471","type":"file","name":"/juice-shop/node_modules/which-typed-array/package.json","hashes":[{"alg":"SHA-1","content":"413fb13fc7782db363195106e695f609528730f4"},{"alg":"SHA-256","content":"69d73690e848d0905b5eedfd41004252e6860850d103b67c0fcf4864cecfb9eb"}]},{"bom-ref":"a54e55f967f72730","type":"file","name":"/juice-shop/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"402837c5ba60f95b309957adc4657b8fe4fb1f05"},{"alg":"SHA-256","content":"43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260"}]},{"bom-ref":"308d0e845ec1a9f0","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"4c7437872b679c9cb6df8a53d4928c07c36a18dd"},{"alg":"SHA-256","content":"3b443ff0b23130799b2c5755582ef6f62096064e4d270d0122b03477ea68ca1c"}]},{"bom-ref":"ec8de968f00f3be2","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"8b4b76c3bc63680159f5e97ff8e3a218f25e7c00"},{"alg":"SHA-256","content":"1c5c73b201f50ae5201dc7afad16ccb32f16c411040c5b93b689f4c6ade17c27"}]},{"bom-ref":"8f248362f23ece04","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"1b26460d736e2cd59d75ff10cbdee5c483f6596f"},{"alg":"SHA-256","content":"4118bb2266a7a1adaac138d4b5813742483414c9dd536b98a851e032ae98adf3"}]},{"bom-ref":"408dea1d594f8caa","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"9ce1d9cd5e0e83463c97e87ce10e25bbcc6f9e4a"},{"alg":"SHA-256","content":"682840451efde52b36dba755741011e0d82bc2a89760e24aab8c564723d8369a"}]},{"bom-ref":"74df60996df60b1c","type":"file","name":"/juice-shop/node_modules/wide-align/package.json","hashes":[{"alg":"SHA-1","content":"3a42d35dea67d3af17d76c4232cf1f56532b1732"},{"alg":"SHA-256","content":"524d5d89924ba461deda48989a748f8450bca19fd00eb8ffa07dbed870bfdfb1"}]},{"bom-ref":"40dd3ca720f6b4c0","type":"file","name":"/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"5043bbd6dc8c17a9","type":"file","name":"/juice-shop/node_modules/winston-transport/package.json","hashes":[{"alg":"SHA-1","content":"41ed9fa7f4c7c753ec90200f0c3df7665149afb8"},{"alg":"SHA-256","content":"212ebeebb9f3f301a77fe581c1c367ef9d70ec8b3d7c46593010b2fd2e89bda1"}]},{"bom-ref":"9639d91ac2d6456f","type":"file","name":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","hashes":[{"alg":"SHA-1","content":"bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"},{"alg":"SHA-256","content":"af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"}]},{"bom-ref":"5cffbdece663c3aa","type":"file","name":"/juice-shop/node_modules/winston/node_modules/is-stream/package.json","hashes":[{"alg":"SHA-1","content":"dac0050410d80a991cfa4ccdd0eb37f4020b49dd"},{"alg":"SHA-256","content":"07cf93d9490a2d7ed7731810b49b1c314c760291bb66cdfbc0279258ceb65ec9"}]},{"bom-ref":"6101f323b2926cac","type":"file","name":"/juice-shop/node_modules/winston/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"66b4078269f9408b","type":"file","name":"/juice-shop/node_modules/winston/package.json","hashes":[{"alg":"SHA-1","content":"27be35756c8356b96ebecae2e16255100d238225"},{"alg":"SHA-256","content":"1202b5fd7d27704d4f3fd7fac32ccb36d1796e2c419d9a3721ff1f4c1740efd1"}]},{"bom-ref":"c8ef148749c4991e","type":"file","name":"/juice-shop/node_modules/with/package.json","hashes":[{"alg":"SHA-1","content":"36745b30bb45cffb3ec3646489ca7406c3235363"},{"alg":"SHA-256","content":"30d01a7f84509e2ee075442a2e56ccbee6a9a98c46d86f32659d24b2b34a8609"}]},{"bom-ref":"bce802ccd0d0193f","type":"file","name":"/juice-shop/node_modules/wkx/package.json","hashes":[{"alg":"SHA-1","content":"4fbad714a31c115ee6ba9b12e896792bd1a783e0"},{"alg":"SHA-256","content":"12eaedf0c094ee3c00b553926c70585eeeca003e9cc31d4c869fe68f711f2ea1"}]},{"bom-ref":"34825ba383e207d2","type":"file","name":"/juice-shop/node_modules/wordwrap/package.json","hashes":[{"alg":"SHA-1","content":"3262d75ebec0a8a82d2de6905e8771b2f3aa02dc"},{"alg":"SHA-256","content":"fc9409d0faed896f14385be4b820c4f686f2b3aeca64b3e597b22a97a0d6d6a3"}]},{"bom-ref":"2bbb4dba9f69fbe7","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"131e7ed5172cb1cc","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"227578315f4f904c","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"d44a222a2eeef37b","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/package.json","hashes":[{"alg":"SHA-1","content":"3442b7381f1b431861a986d8cdf144ced299db29"},{"alg":"SHA-256","content":"0b0cf0bf62bd0cc71da2128e3269e63edd566feffdd501aa3692acd6db93c3c9"}]},{"bom-ref":"9f4e6c0a47772d5c","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"de0f02896f6a8be0b475eb7a2e2b9b44506fd332"},{"alg":"SHA-256","content":"8b0af5d1283904ff127afe213e918fdd8c96e7c42e539f8941f1fc66d2f377d7"}]},{"bom-ref":"5d0e30f6ad1938a7","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"605b3d8ab4008b6ba2378580c155d33362e80a6d"},{"alg":"SHA-256","content":"d5c878207f5be10c4df575461e73794a17d045b178e006a56c74598c0652800c"}]},{"bom-ref":"1779853f4a8655c6","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"238c48183550d02ab5c0dd37e13d57006dce640a"},{"alg":"SHA-256","content":"181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"}]},{"bom-ref":"c99a9c1fc01e6273","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"53ae7a1b3953e86624927fec8421d453d9c88e41"},{"alg":"SHA-256","content":"adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"}]},{"bom-ref":"d9fd8f1866d1b7ad","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"323ec71c0cdb2dfdcf717f3e324f0b77981d7c58"},{"alg":"SHA-256","content":"01cee5e384d1e26843021c1f91bc05ed009e14c2d31c01349a374e64d3416e7d"}]},{"bom-ref":"059df5dbc1ad6f50","type":"file","name":"/juice-shop/node_modules/wrap-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c14f366cb2c71b662f7edb2dcf7370a513fc641f"},{"alg":"SHA-256","content":"609dd6ab176847e57e799dba2e4c4ad355abe463ec67a5ab0dccec08b67e6761"}]},{"bom-ref":"1e619a16fa55eeea","type":"file","name":"/juice-shop/node_modules/wrappy/package.json","hashes":[{"alg":"SHA-1","content":"156d61004996b07079664753e7b5c415b99e4c89"},{"alg":"SHA-256","content":"712ac9c4c3cef8bc79f42cf6075ff18551f4cb768f35158214fd643853ad7abc"}]},{"bom-ref":"56241d7c19ed1fe6","type":"file","name":"/juice-shop/node_modules/ws/package.json","hashes":[{"alg":"SHA-1","content":"6f2ab48fb7d118a83ff9ae1ace83309f2db23321"},{"alg":"SHA-256","content":"61c104d44cd4ff02b190f970b8cb0a8d70af0a7274e0eff46580b1e20200decc"}]},{"bom-ref":"7e84aeb96c697ce1","type":"file","name":"/juice-shop/node_modules/xtend/package.json","hashes":[{"alg":"SHA-1","content":"1ff55cea8456af743102bdd7fc40b95fe34a7770"},{"alg":"SHA-256","content":"b02ffef8cda96c5c3ee00a00390e63f608362c2ddfb3ed754e181d013a45d48a"}]},{"bom-ref":"aaa29a70bfe8b26f","type":"file","name":"/juice-shop/node_modules/y18n/package.json","hashes":[{"alg":"SHA-1","content":"ad32dfe662561409f091e109f6830ccab42124ff"},{"alg":"SHA-256","content":"5995de811ffa1b8a8e9ed9bd0444f60058dba9ce1ccbe12f2d5e12c31a975d9c"}]},{"bom-ref":"e69c07819fc49f97","type":"file","name":"/juice-shop/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"96cc9bf2282dd9cd2c0bb49c2bca096782b2da5e"},{"alg":"SHA-256","content":"27699a6415a43f128c0e8ddcd5bf6e265f6cf3a581a9d959c11b977244fadc34"}]},{"bom-ref":"cd47d98b83b63090","type":"file","name":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","hashes":[{"alg":"SHA-1","content":"74103756a0fe401ed4d8137e04607758a77897eb"},{"alg":"SHA-256","content":"3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"}]},{"bom-ref":"8c44130594056ef3","type":"file","name":"/juice-shop/node_modules/yaml-schema-validator/package.json","hashes":[{"alg":"SHA-1","content":"39604da28e16de9ffa9046ec18a06b36baabcf32"},{"alg":"SHA-256","content":"5a89e68a562c98edec01f9aefacf2d5f95e95d0dd543e8e0125a9333f59bc2e1"}]},{"bom-ref":"010a883742b67974","type":"file","name":"/juice-shop/node_modules/yauzl/package.json","hashes":[{"alg":"SHA-1","content":"e91b995ab78ed0ec2c169efc0c17f7f25c679e44"},{"alg":"SHA-256","content":"9119ac0c70d33b16e3c69dbc5cdeab71eb513124a04d961f2c9e7402c9fec8eb"}]},{"bom-ref":"8f52ca6e7f7ef139","type":"file","name":"/juice-shop/node_modules/yn/package.json","hashes":[{"alg":"SHA-1","content":"37e6b2c5c8648f646563dd2408e9291c883c5aa3"},{"alg":"SHA-256","content":"1a735adfb326707476086dd836334385fd53827f3aa218d208297104bfbb2c29"}]},{"bom-ref":"0262615e1547582e","type":"file","name":"/juice-shop/node_modules/z85/package.json","hashes":[{"alg":"SHA-1","content":"c7c525898d3d17ae288951589d49a82860f873cd"},{"alg":"SHA-256","content":"eb5ed55479185f63ff524af3718856f22fcbdee2befeeb2537b171bb90266896"}]},{"bom-ref":"422515e6f0043a28","type":"file","name":"/juice-shop/node_modules/zip-stream/package.json","hashes":[{"alg":"SHA-1","content":"543a5a3cbe7a0a3c766e9acc28a9d79696183d79"},{"alg":"SHA-256","content":"51c0c491481381690f272d535d4d1453fc4982f13bb96e659faff5a4487b8133"}]},{"bom-ref":"494eb3d4cff9a6c2","type":"file","name":"/juice-shop/node_modules/zod/package.json","hashes":[{"alg":"SHA-1","content":"e168ef2ff344c6d274af1cb6cd14b33cb3f16d95"},{"alg":"SHA-256","content":"70eedbe34fd52385a4ae2f3e5759b19682189f0118ea73a6e7c32c677f61668e"}]},{"bom-ref":"7f2d375bd757b2be","type":"file","name":"/juice-shop/package.json","hashes":[{"alg":"SHA-1","content":"c8cd9c4f98dd9ba3c390e1ad2107f23fb32d4dc9"},{"alg":"SHA-256","content":"73d8e3acadde14e41957b6c1135b37fbcb437ca69d276e79fde7b22813cf6246"}]}],"dependencies":[{"ref":"pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc","dependsOn":["pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=74f0cf86f14f0675&upstream=gcc-12"]},{"ref":"pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=74f0cf86f14f0675&upstream=gcc-12","dependsOn":["pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=0a534483a88e1e33&upstream=gcc-12","pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc"]},{"ref":"pkg:deb/debian/libgomp1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=cd7473971e9d06dd&upstream=gcc-12","dependsOn":["pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=0a534483a88e1e33&upstream=gcc-12","pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc"]},{"ref":"pkg:deb/debian/libssl3@3.0.17-1~deb12u2?arch=amd64&distro=debian-12&package-id=0f919d6ebdb73625&upstream=openssl","dependsOn":["pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc"]},{"ref":"pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=9a37debf0d05047e&upstream=gcc-12","dependsOn":["pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=0a534483a88e1e33&upstream=gcc-12","pkg:deb/debian/libc6@2.36-9%2Bdeb12u10?arch=amd64&distro=debian-12&package-id=c924a822eab59d9a&upstream=glibc","pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64&distro=debian-12&package-id=74f0cf86f14f0675&upstream=gcc-12"]}]} diff --git a/labs/lab8/attest/provenance.json b/labs/lab8/attest/provenance.json new file mode 100644 index 00000000..570159e9 --- /dev/null +++ b/labs/lab8/attest/provenance.json @@ -0,0 +1,7 @@ +{ + "_type": "https://slsa.dev/provenance/v1", + "buildType": "manual-local-demo", + "builder": {"id": "student@local"}, + "invocation": {"parameters": {"image": "localhost:5000/juice-shop@sha256:547bd3fef4a6d7e25e131da68f454e6dc4a59d281f8793df6853e6796c9bbf58"}}, + "metadata": {"buildStartedOn": "2026-03-14T20:39:41Z", "completeness": {"parameters": true}} +} \ No newline at end of file diff --git a/labs/lab8/attest/verify-provenance.txt b/labs/lab8/attest/verify-provenance.txt new file mode 100644 index 00000000..ac20e1f6 Binary files /dev/null and b/labs/lab8/attest/verify-provenance.txt differ diff --git a/labs/lab8/attest/verify-sbom-attestation.txt b/labs/lab8/attest/verify-sbom-attestation.txt new file mode 100644 index 00000000..9d91e368 Binary files /dev/null and b/labs/lab8/attest/verify-sbom-attestation.txt differ diff --git a/labs/lab8/signing/cosign.key b/labs/lab8/signing/cosign.key new file mode 100644 index 00000000..8e4841b2 --- /dev/null +++ b/labs/lab8/signing/cosign.key @@ -0,0 +1,11 @@ +-----BEGIN ENCRYPTED SIGSTORE PRIVATE KEY----- +eyJrZGYiOnsibmFtZSI6InNjcnlwdCIsInBhcmFtcyI6eyJOIjo2NTUzNiwiciI6 +OCwicCI6MX0sInNhbHQiOiJRL0ZjcjNrNVlLWEN4cXRiVWlQWHVub2pGODcyREov +VnlBbDAxRDl3RWN3PSJ9LCJjaXBoZXIiOnsibmFtZSI6Im5hY2wvc2VjcmV0Ym94 +Iiwibm9uY2UiOiJ5dXVNQ2MvaTl1Y29Fa2U5OFRtRDMxZjBLMWptVEdETSJ9LCJj +aXBoZXJ0ZXh0IjoiWFN2K040MlczdzhMc0tUcVJLT3hGSXNjeFJXQ3BINW5veUUz +Szd4bWwrQ3JTb3haeTYzanNLMGE4b1V3SnhWWUxFd2JzL2pjeWpkTDZtaTdLeEV0 +WnJlTXpLR0kwazdMRTVWZ2xDTUNGdlZxeERjdFZnbDV4alh1NHJVSmZsRWlJZnB2 +MnBickwrb3FPOFFUdm92RG5CTVl2RXIrOXhZU2dhY1pVNnVZWm9tWWYyVFk3RzM4 +Vnd1Zm54N3lHN2l6WWIzbU9XdXVmQjl5Umc9PSJ9 +-----END ENCRYPTED SIGSTORE PRIVATE KEY----- diff --git a/labs/lab8/signing/cosign.pub b/labs/lab8/signing/cosign.pub new file mode 100644 index 00000000..7c2966a4 --- /dev/null +++ b/labs/lab8/signing/cosign.pub @@ -0,0 +1,4 @@ +-----BEGIN PUBLIC KEY----- +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFMvsZSNfl2FHwzYh8zsNahuT4Nqp +26NjZsloqoNg0w2HX832cTA3OrGd8qHv/lU+hhmpzfYoGAHlp7mtgVWJaQ== +-----END PUBLIC KEY----- diff --git a/labs/lab8/signing/signing-config.json b/labs/lab8/signing/signing-config.json new file mode 100644 index 00000000..6f5296fe --- /dev/null +++ b/labs/lab8/signing/signing-config.json @@ -0,0 +1,12 @@ +{ + "signers": [ + { + "name": "local-signer", + "type": "key", + "key": { + "path": "labs/lab8/signing/cosign.key" + } + } + ], + "transparencyLogServices": [] +} diff --git a/labs/lab9/analysis/conftest-compose.txt b/labs/lab9/analysis/conftest-compose.txt new file mode 100644 index 00000000..39a0485a Binary files /dev/null and b/labs/lab9/analysis/conftest-compose.txt differ diff --git a/labs/lab9/analysis/conftest-hardened.txt b/labs/lab9/analysis/conftest-hardened.txt new file mode 100644 index 00000000..0ba71814 Binary files /dev/null and b/labs/lab9/analysis/conftest-hardened.txt differ diff --git a/labs/lab9/analysis/conftest-unhardened.txt b/labs/lab9/analysis/conftest-unhardened.txt new file mode 100644 index 00000000..f28fd717 Binary files /dev/null and b/labs/lab9/analysis/conftest-unhardened.txt differ diff --git a/labs/lab9/falco/logs/falco.log b/labs/lab9/falco/logs/falco.log new file mode 100644 index 00000000..0c436ab0 Binary files /dev/null and b/labs/lab9/falco/logs/falco.log differ diff --git a/labs/lab9/falco/rules/custom-rules.yaml b/labs/lab9/falco/rules/custom-rules.yaml new file mode 100644 index 00000000..8134e353 --- /dev/null +++ b/labs/lab9/falco/rules/custom-rules.yaml @@ -0,0 +1,10 @@ +- rule: Write Binary Under UsrLocalBin + desc: Detects writes under /usr/local/bin inside any container + condition: evt.type in (open, openat, openat2, creat) and + evt.is_open_write=true and + fd.name startswith /usr/local/bin/ and + container.id != host + output: > + Falco Custom: File write in /usr/local/bin (container=%container.name user=%user.name file=%fd.name flags=%evt.arg.flags) + priority: WARNING + tags: [container, compliance, drift] \ No newline at end of file diff --git a/labs/screenshots/PR_template.png b/labs/screenshots/PR_template.png new file mode 100644 index 00000000..f0a6eb30 Binary files /dev/null and b/labs/screenshots/PR_template.png differ diff --git a/labs/screenshots/page_load_owasp.png b/labs/screenshots/page_load_owasp.png new file mode 100644 index 00000000..fe08b3e9 Binary files /dev/null and b/labs/screenshots/page_load_owasp.png differ diff --git a/labs/screenshots/ssh_key.png b/labs/screenshots/ssh_key.png new file mode 100644 index 00000000..991d629f Binary files /dev/null and b/labs/screenshots/ssh_key.png differ diff --git a/labs/screenshots/verified.png b/labs/screenshots/verified.png new file mode 100644 index 00000000..e6e3ea03 Binary files /dev/null and b/labs/screenshots/verified.png differ diff --git a/labs/submission1.md b/labs/submission1.md new file mode 100644 index 00000000..7d3e9930 --- /dev/null +++ b/labs/submission1.md @@ -0,0 +1,85 @@ +# Triage Report — OWASP Juice Shop + +## Scope & Asset +- Asset: OWASP Juice Shop (local lab instance) +- Image: bkimminich/juice-shop:v19.0.0 +- Release link/date: https://github.com/juice-shop/juice-shop/releases/tag/v19.0.0 — 2024-06-10 +- Image digest (optional): sha256:2765a26de7647609099a338d5b7f61085d95903c8703bb70f03fcc4b12f0818d + +## Environment +- Host OS: Windows 11 Домашняя для одного языка +- Docker: 28.3.2 + +## Deployment Details +- Run command used: `docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v19.0.0` +- Access URL: http://127.0.0.1:3000 +- Network exposure: 127.0.0.1 only [х] Yes [ ] No (explain if No) + +## Health Check +- Page load: attach screenshot of home page +![owasp](./screenshots/page_load_owasp.png) +- API check: first 5–10 lines from `curl -s http://127.0.0.1:3000/rest/products | head` +``` +$ curl -s http://127.0.0.1:3000/rest/products | head + + + + Error: Unexpected path: /rest/products +