{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:a479c7c2-9345-408b-9895-59c66c9a75bd","version":1,"metadata":{"timestamp":"2026-10-15T10:17:40+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"3d93e4b1da206e7f","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/pnpm-workspace"}},"components":[{"bom-ref":"pkg:npm/debug@4.3.4?package-id=00c06835edd9996c","type":"library","name":"debug","version":"4.3.4","cpe":"cpe:2.3:a:debug_project:debug:4.3.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.3.4","properties":[{"name":"syft:package:foundBy","value":"javascript-lock-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-pnpm-lock-entry"},{"name":"syft:location:0:path","value":"/pnpm-lock.yaml"}]},{"bom-ref":"pkg:npm/is-number@7.0.0?package-id=ee9f313a89f01697","type":"library","name":"is-number","version":"7.0.0","cpe":"cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@7.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-lock-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-pnpm-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/pnpm-lock.yaml"}]},{"bom-ref":"pkg:npm/kind-of@6.0.3?package-id=2ec8220cb541abae","type":"library","name":"kind-of","version":"6.0.3","cpe":"cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@6.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-lock-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-pnpm-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/pnpm-lock.yaml"}]},{"bom-ref":"pkg:npm/ms@2.1.2?package-id=ae3473f44f3953a5","type":"library","name":"ms","version":"2.1.2","cpe":"cpe:2.3:a:vercel:ms:2.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-lock-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-pnpm-lock-entry"},{"name":"syft:location:0:path","value":"/pnpm-lock.yaml"}]},{"bom-ref":"c895fb8e872e275f","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/pnpm-workspace/pnpm-lock.yaml","hashes":[{"alg":"SHA-1","content":"f24e3999bd41ce1b690eb02c3c22d3e7e614c82f"},{"alg":"SHA-256","content":"a224fcdae195b6cb24a0a560691f15acdf84b8b5293901ce1919829b54f6fbfa"}]}],"dependencies":[{"ref":"pkg:npm/debug@4.3.4?package-id=00c06835edd9996c","dependsOn":["pkg:npm/ms@2.1.2?package-id=ae3473f44f3953a5"]}]}