{
  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T21:36:47Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "SCALIBR",
          "externalReferences": [
            {
              "url": "https://github.com/google/osv-scalibr",
              "type": "website"
            }
          ]
        }
      ]
    },
    "authors": [
      {}
    ],
    "component": {
      "bom-ref": "9e1911aa-267e-40ce-b385-859c4a0aabd4",
      "type": "",
      "name": ""
    }
  },
  "components": [
    {
      "bom-ref": "82cce18e-ddf3-469b-86eb-53d69df92249",
      "type": "library",
      "name": "debug",
      "version": "4.3.4",
      "purl": "pkg:npm/debug@4.3.4?source=PUBLIC_REGISTRY",
      "evidence": {
        "occurrences": [
          {
            "location": "package-lock.json"
          }
        ]
      }
    },
    {
      "bom-ref": "8c759679-4700-4792-81a3-1cae74187bd9",
      "type": "library",
      "name": "is-number",
      "version": "7.0.0",
      "purl": "pkg:npm/is-number@7.0.0?source=PUBLIC_REGISTRY",
      "evidence": {
        "occurrences": [
          {
            "location": "package-lock.json"
          }
        ]
      }
    },
    {
      "bom-ref": "333e2fef-a4a1-4ce9-ad00-6b4a7c008dca",
      "type": "library",
      "name": "kind-of",
      "version": "6.0.3",
      "purl": "pkg:npm/kind-of@6.0.3?source=PUBLIC_REGISTRY",
      "evidence": {
        "occurrences": [
          {
            "location": "test/fixtures/app/package-lock.json"
          }
        ]
      }
    },
    {
      "bom-ref": "bc833905-8820-45a3-b35a-7bab8662db92",
      "type": "library",
      "name": "left-pad",
      "version": "1.3.0",
      "purl": "pkg:npm/left-pad@1.3.0?source=PUBLIC_REGISTRY",
      "evidence": {
        "occurrences": [
          {
            "location": "examples/demo/package-lock.json"
          }
        ]
      }
    },
    {
      "bom-ref": "9e1fc17d-336d-415a-b900-0f96550f4e63",
      "type": "library",
      "name": "ms",
      "version": "2.1.2",
      "purl": "pkg:npm/ms@2.1.2?source=PUBLIC_REGISTRY",
      "evidence": {
        "occurrences": [
          {
            "location": "package-lock.json"
          }
        ]
      }
    },
    {
      "bom-ref": "98c98b47-0e9b-4d44-8822-9529f760f051",
      "type": "library",
      "name": "scab-example-demo",
      "version": "0.0.0",
      "purl": "pkg:npm/scab-example-demo@0.0.0?source=UNKNOWN",
      "evidence": {
        "occurrences": [
          {
            "location": "examples/demo/package.json"
          }
        ]
      }
    },
    {
      "bom-ref": "d7fb7553-6318-408f-8a20-aee9867ea184",
      "type": "library",
      "name": "scab-npm-nonshipped",
      "version": "1.0.0",
      "purl": "pkg:npm/scab-npm-nonshipped@1.0.0?source=UNKNOWN",
      "evidence": {
        "occurrences": [
          {
            "location": "package.json"
          }
        ]
      }
    },
    {
      "bom-ref": "efb6e54a-52cc-460a-8ee0-65902dbdb8e2",
      "type": "library",
      "name": "scab-test-fixture-app",
      "version": "0.0.0",
      "purl": "pkg:npm/scab-test-fixture-app@0.0.0?source=UNKNOWN",
      "evidence": {
        "occurrences": [
          {
            "location": "test/fixtures/app/package.json"
          }
        ]
      }
    }
  ]
}