diff --git a/ftp/sbom.json.bak b/ftp/sbom.json.bak
deleted file mode 100644
index 62c2349d7..000000000
--- a/ftp/sbom.json.bak
+++ /dev/null
@@ -1,37599 +0,0 @@
-{
-  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
-  "bomFormat": "CycloneDX",
-  "specVersion": "1.6",
-  "serialNumber": "urn:uuid:6b6b2566-1155-4976-95ba-46a2ee2a29e0",
-  "version": 1,
-  "metadata": {
-    "timestamp": "2025-05-01T19:58:10Z",
-    "tools": {
-      "components": [
-        {
-          "type": "application",
-          "author": "anchore",
-          "name": "syft",
-          "version": "1.23.1"
-        }
-      ]
-    },
-    "component": {
-      "bom-ref": "dfcd457ff0b35452",
-      "type": "file",
-      "name": "/src"
-    }
-  },
-  "components": [
-    {
-      "bom-ref": "pkg:npm/%40swc/helpers@0.3.17?package-id=7e634a27f2ac1649",
-      "type": "library",
-      "name": "@swc/helpers",
-      "version": "0.3.17",
-      "cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/%40swc/helpers@0.3.17",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/%40types/geojson@1.0.6?package-id=2e6a7fb6c39391a9",
-      "type": "library",
-      "name": "@types/geojson",
-      "version": "1.0.6",
-      "cpe": "cpe:2.3:a:\\@types\\/geojson:\\@types\\/geojson:1.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/%40types/geojson@1.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/%40types/node@22.15.3?package-id=c8571ad9530e9f57",
-      "type": "library",
-      "name": "@types/node",
-      "version": "22.15.3",
-      "cpe": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.15.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/%40types/node@22.15.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/gamesight/slack-workflow-status@master?package-id=5317e609a6ca14a3",
-      "type": "library",
-      "name": "Gamesight/slack-workflow-status",
-      "version": "master",
-      "cpe": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*",
-      "purl": "pkg:github/Gamesight/slack-workflow-status@master",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/gamesight/slack-workflow-status@master?package-id=4a670d565819e5ef",
-      "type": "library",
-      "name": "Gamesight/slack-workflow-status",
-      "version": "master",
-      "cpe": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*",
-      "purl": "pkg:github/Gamesight/slack-workflow-status@master",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack-workflow-status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack_workflow_status:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/gamesight/slack-workflow-status@v1.3.0?package-id=5946574c4aeb887b",
-      "type": "library",
-      "name": "Gamesight/slack-workflow-status",
-      "version": "v1.3.0",
-      "cpe": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/Gamesight/slack-workflow-status@v1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/gamesight/slack-workflow-status@v1.3.0?package-id=f1690a168caad591",
-      "type": "library",
-      "name": "Gamesight/slack-workflow-status",
-      "version": "v1.3.0",
-      "cpe": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/Gamesight/slack-workflow-status@v1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow-status:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow_status:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack-workflow:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack_workflow:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack-workflow-status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:Gamesight\\/slack:Gamesight\\/slack_workflow_status:v1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/googlecloudplatform/release-please-action@v2?package-id=650bed25edba1973",
-      "type": "library",
-      "name": "GoogleCloudPlatform/release-please-action",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:GoogleCloudPlatform\\/release-please-action:GoogleCloudPlatform\\/release-please-action:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/GoogleCloudPlatform/release-please-action@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release-please-action:GoogleCloudPlatform\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release_please_action:GoogleCloudPlatform\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release_please_action:GoogleCloudPlatform\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release-please:GoogleCloudPlatform\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release-please:GoogleCloudPlatform\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release_please:GoogleCloudPlatform\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release_please:GoogleCloudPlatform\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release:GoogleCloudPlatform\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:GoogleCloudPlatform\\/release:GoogleCloudPlatform\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/release-please.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/js-devtools/npm-publish@v1?package-id=d900667386126251",
-      "type": "library",
-      "name": "JS-DevTools/npm-publish",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:JS-DevTools\\/npm-publish:JS-DevTools\\/npm-publish:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/JS-DevTools/npm-publish@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS-DevTools\\/npm-publish:JS_DevTools\\/npm_publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS_DevTools\\/npm_publish:JS-DevTools\\/npm-publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS_DevTools\\/npm_publish:JS_DevTools\\/npm_publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS-DevTools\\/npm:JS-DevTools\\/npm-publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS-DevTools\\/npm:JS_DevTools\\/npm_publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS_DevTools\\/npm:JS-DevTools\\/npm-publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS_DevTools\\/npm:JS_DevTools\\/npm_publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS:JS-DevTools\\/npm-publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:JS:JS_DevTools\\/npm_publish:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/abbrev@1.0.9?package-id=ccb3611ca340aad6",
-      "type": "library",
-      "name": "abbrev",
-      "version": "1.0.9",
-      "cpe": "cpe:2.3:a:abbrev:abbrev:1.0.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/abbrev@1.0.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=b6f87b9baba398e6",
-      "type": "library",
-      "name": "abbrev",
-      "version": "1.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/abbrev@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/accepts@1.3.8?package-id=43380ff6ae5b4ae9",
-      "type": "library",
-      "name": "accepts",
-      "version": "1.3.8",
-      "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/accepts@1.3.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/acorn@7.4.1?package-id=75b5ee3fa2c20022",
-      "type": "library",
-      "name": "acorn",
-      "version": "7.4.1",
-      "cpe": "cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/acorn@7.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/cache@v1?package-id=d8c704d6b4835d65",
-      "type": "library",
-      "name": "actions/cache",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/cache:actions\\/cache:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/cache@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/node-abi/.github/workflows/update-abi.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/cache@v2?package-id=a109bbc18be25a96",
-      "type": "library",
-      "name": "actions/cache",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/cache:actions\\/cache:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/cache@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v1?package-id=1e01069cd8669f9e",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v1?package-id=7bc84893d6ce5c3f",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/needle/.github/workflows/nodejs.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v1?package-id=519726bc06d17c43",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/replace/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=b54bfb1da26ce9cd",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=3559e238d2d3c87b",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/ajv-formats-draft2019/.github/workflows/node.js.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=f7417cb457591620",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/babel-preset-current-node-syntax/.github/workflows/nodejs.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=8939931398f7f376",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/busboy/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=9ed4a1365893a541",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/busboy/.github/workflows/lint.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=c1bc4f4891081847",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/grunt-legacy-log/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=da72c6e599728a8c",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/grunt-legacy-util/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=c121ab4edf0c171a",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/json-schema-traverse/.github/workflows/build.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=4e0c26b1da8c7076",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/json-schema-traverse/.github/workflows/publish.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=b92daeb2628a67e6",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=3d64451db480e7e2",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/lint-fixer.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=d291ae5c0703c4be",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/libxmljs2/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=201faf2934f90206",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/libxmljs2/node_modules/simple-get/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=4b9f5efb6ae0172a",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/node-abi/.github/workflows/update-abi.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=959976503e136378",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/rfdc/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=f6466bc947875b98",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=9ea887d915857d12",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=662c9db571bc0df6",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/visual-studio.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=7a55796236d00628",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/Python_tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=d79481e716a560aa",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/node-gyp.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=7be4f0b30b6d7687",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/nodejs-windows.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=cc11d9a782865022",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/simple-get/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=bf473f4674a4b4c1",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/streamsearch/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=7ec5891cc205a593",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/streamsearch/.github/workflows/lint.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=6a3a4a99209e5eea",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/rollingversions-canary.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=f1521e3898e3e83c",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/rollingversions.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v2?package-id=cb23cccdcfe0f544",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v3?package-id=bbd7c5b5bfde9974",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@mapbox/node-pre-gyp/.github/workflows/codeql.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v3?package-id=da3a65b9745222ee",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fastq/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4?package-id=40e30d299b9fe4d5",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fast-uri/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4?package-id=3daf8637a5e4a312",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/nan/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4?package-id=fd10fce47017fa13",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/reusify/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=7cc33d3342343b53",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=0710c1670bd92acb",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/codeql-analysis.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=d6104b177e92dc3e",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/lint-fixer.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=be4b262a1b789d88",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/rebase.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=f40493769b5603e2",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=96e98a110f8e24a7",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/update-challenges-www.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=44cf33e7e2364df1",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/update-news-www.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/checkout@v4.2.2?package-id=93236facee4a9cb1",
-      "type": "library",
-      "name": "actions/checkout",
-      "version": "v4.2.2",
-      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/checkout@v4.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/zap_scan.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/download-artifact@v4.1.8?package-id=4cd4494b932245d6",
-      "type": "library",
-      "name": "actions/download-artifact",
-      "version": "v4.1.8",
-      "cpe": "cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v4.1.8:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/download-artifact@v4.1.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v4.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v4.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v4.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/download:actions\\/download-artifact:v4.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/download:actions\\/download_artifact:v4.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=66e6d3add4fe073b",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/ajv-formats-draft2019/.github/workflows/node.js.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=7c6def6506b258b9",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/babel-preset-current-node-syntax/.github/workflows/nodejs.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=6b0792dcccc67817",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/busboy/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=0dc9162b75e9df6b",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/busboy/.github/workflows/lint.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=3c88b1bf4599e259",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fastq/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=e8e36b1b31107264",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/grunt-legacy-log/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=52617b27a1bbc10f",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/json-schema-traverse/.github/workflows/build.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=069a466ea17db1bd",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/json-schema-traverse/.github/workflows/publish.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=8a0dd98715fb6663",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=3cccb0318b815276",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=2507a35d0989a97d",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/needle/.github/workflows/nodejs.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=57391d05999d4f21",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/node-abi/.github/workflows/update-abi.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=96a26e8d515cadbe",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/replace/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=6f37745944e95982",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/rfdc/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=303b3812127b618f",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/streamsearch/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=5dcd76ce8f7aa30c",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/streamsearch/.github/workflows/lint.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=e752ca945a033557",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/rollingversions-canary.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=34bbf9aa1149fe1e",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/rollingversions.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v1?package-id=47fd1f7b7780a3b0",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v1",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/with/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=94c6b30301562d90",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=8dc8a155abed0c05",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/grunt-legacy-util/.github/workflows/test.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=5f2a909fb12fd57c",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/libxmljs2/node_modules/simple-get/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=86be894840244e6c",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=d2fb02e31a2b3bdb",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/node-gyp.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v2?package-id=8856d16291cd1101",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/simple-get/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v3?package-id=ba0db63f1ea1d49c",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fastq/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v3?package-id=3d85b0f40adaec51",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/libxmljs2/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v3?package-id=a9bb97879576e26c",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4?package-id=efa8850df2ee3758",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fast-uri/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4?package-id=8df8da9d6e87fe6d",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/nan/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4?package-id=de6527b74c32bd7a",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/reusify/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4.1.0?package-id=0ea7a92c6d422d58",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4.1.0",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4.1.0?package-id=378c45a5f3da36da",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4.1.0",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/lint-fixer.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-node@v4.1.0?package-id=7b603272b865276d",
-      "type": "library",
-      "name": "actions/setup-node",
-      "version": "v4.1.0",
-      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-node@v4.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-python@v2?package-id=e8d102598fcfed2e",
-      "type": "library",
-      "name": "actions/setup-python",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-python@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-python@v2?package-id=0bad0f359320f27f",
-      "type": "library",
-      "name": "actions/setup-python",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-python@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/Python_tests.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/setup-python@v2?package-id=bef472e552b62059",
-      "type": "library",
-      "name": "actions/setup-python",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/setup-python@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/node-gyp.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/stale@v9.0.0?package-id=6d72d17e3de22660",
-      "type": "library",
-      "name": "actions/stale",
-      "version": "v9.0.0",
-      "cpe": "cpe:2.3:a:actions\\/stale:actions\\/stale:v9.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/stale@v9.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/stale.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/actions/upload-artifact@v4.5.0?package-id=a511c7d16706140c",
-      "type": "library",
-      "name": "actions/upload-artifact",
-      "version": "v4.5.0",
-      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/actions/upload-artifact@v4.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/after@0.8.2?package-id=49d50ac4c4137652",
-      "type": "library",
-      "name": "after",
-      "version": "0.8.2",
-      "cpe": "cpe:2.3:a:after:after:0.8.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/after@0.8.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ajv@4.11.8?package-id=d4097b7184630e97",
-      "type": "library",
-      "name": "ajv",
-      "version": "4.11.8",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:ajv:ajv:4.11.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ajv@4.11.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ajv@6.12.6?package-id=eed35483fa381f24",
-      "type": "library",
-      "name": "ajv",
-      "version": "6.12.6",
-      "cpe": "cpe:2.3:a:ajv:ajv:6.12.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ajv@6.12.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/akhileshns/heroku-deploy@v3.13.15?package-id=d9bbbd9e18472781",
-      "type": "library",
-      "name": "akhileshns/heroku-deploy",
-      "version": "v3.13.15",
-      "cpe": "cpe:2.3:a:akhileshns\\/heroku-deploy:akhileshns\\/heroku-deploy:v3.13.15:*:*:*:*:*:*:*",
-      "purl": "pkg:github/akhileshns/heroku-deploy@v3.13.15",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:akhileshns\\/heroku-deploy:akhileshns\\/heroku_deploy:v3.13.15:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:akhileshns\\/heroku_deploy:akhileshns\\/heroku-deploy:v3.13.15:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:akhileshns\\/heroku_deploy:akhileshns\\/heroku_deploy:v3.13.15:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:akhileshns\\/heroku:akhileshns\\/heroku-deploy:v3.13.15:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:akhileshns\\/heroku:akhileshns\\/heroku_deploy:v3.13.15:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/align-text@0.1.4?package-id=d1488f1fbc1d5de4",
-      "type": "library",
-      "name": "align-text",
-      "version": "0.1.4",
-      "cpe": "cpe:2.3:a:align-text:align-text:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/align-text@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:align-text:align_text:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:align_text:align-text:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:align_text:align_text:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:align:align-text:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:align:align_text:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/amdefine@1.0.1?package-id=09f818b0182ffa10",
-      "type": "library",
-      "name": "amdefine",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:amdefine:amdefine:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/amdefine@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=916196f9bb568d23",
-      "type": "library",
-      "name": "ansi-regex",
-      "version": "2.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ansi-regex@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=de222825ee81dadc",
-      "type": "library",
-      "name": "ansi-regex",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ansi-regex@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ansi-regex@3.0.1?package-id=b848b7c8af02a5a6",
-      "type": "library",
-      "name": "ansi-regex",
-      "version": "3.0.1",
-      "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ansi-regex@3.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ansi-styles@2.2.1?package-id=335a7dd19c91f4cb",
-      "type": "library",
-      "name": "ansi-styles",
-      "version": "2.2.1",
-      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ansi-styles@2.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=63b02582bd1d8a77",
-      "type": "library",
-      "name": "ansi-styles",
-      "version": "3.2.1",
-      "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ansi-styles@3.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/append-field@0.1.0?package-id=105c7730073189b8",
-      "type": "library",
-      "name": "append-field",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:append-field:append-field:0.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/append-field@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:append-field:append_field:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:append_field:append-field:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:append_field:append_field:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:append:append-field:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:append:append_field:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aproba@1.2.0?package-id=da56c508e3379657",
-      "type": "library",
-      "name": "aproba",
-      "version": "1.2.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aproba@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aproba@1.2.0?package-id=62598720921df8f3",
-      "type": "library",
-      "name": "aproba",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aproba@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/archiver@1.3.0?package-id=c5fe18ecfb6c7848",
-      "type": "library",
-      "name": "archiver",
-      "version": "1.3.0",
-      "cpe": "cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/archiver@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/archiver-utils@1.3.0?package-id=d27a56a1566a3690",
-      "type": "library",
-      "name": "archiver-utils",
-      "version": "1.3.0",
-      "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/archiver-utils@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/are-we-there-yet@1.1.4?package-id=994e25a483817d43",
-      "type": "library",
-      "name": "are-we-there-yet",
-      "version": "1.1.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/are-we-there-yet@1.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are:are-we-there-yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are:are_we_there_yet:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/are-we-there-yet@1.1.7?package-id=c32a855a6bb68d29",
-      "type": "library",
-      "name": "are-we-there-yet",
-      "version": "1.1.7",
-      "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/are-we-there-yet@1.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/argparse@1.0.10?package-id=f23d160384ae482e",
-      "type": "library",
-      "name": "argparse",
-      "version": "1.0.10",
-      "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/argparse@1.0.10",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2?package-id=e917bc41d5e5cd3a",
-      "type": "library",
-      "name": "array-buffer-byte-length",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/array-find-index@1.0.2?package-id=cfb9cc6af50a2044",
-      "type": "library",
-      "name": "array-find-index",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:array-find-index:array-find-index:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/array-find-index@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-find-index:array_find_index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_find_index:array-find-index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_find_index:array_find_index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-find:array-find-index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-find:array_find_index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_find:array-find-index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_find:array_find_index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array-find-index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array_find_index:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=372dd216312b56fc",
-      "type": "library",
-      "name": "array-flatten",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/array-flatten@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/arraybuffer.slice@0.0.7?package-id=35539686ac599e6b",
-      "type": "library",
-      "name": "arraybuffer.slice",
-      "version": "0.0.7",
-      "cpe": "cpe:2.3:a:arraybuffer.slice:arraybuffer.slice:0.0.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/arraybuffer.slice@0.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/asn1@0.2.3?package-id=a7a9f4eb5faf91ad",
-      "type": "library",
-      "name": "asn1",
-      "version": "0.2.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:asn1:asn1:0.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/asn1@0.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/asn1@0.2.6?package-id=dd0cbe8bc4ccacb4",
-      "type": "library",
-      "name": "asn1",
-      "version": "0.2.6",
-      "cpe": "cpe:2.3:a:asn1:asn1:0.2.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/asn1@0.2.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/assert-plus@0.2.0?package-id=558fb97ed6f332d6",
-      "type": "library",
-      "name": "assert-plus",
-      "version": "0.2.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:assert-plus:assert-plus:0.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/assert-plus@0.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert-plus:assert_plus:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert-plus:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert_plus:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert-plus:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert_plus:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=92502c266cbbf8fa",
-      "type": "library",
-      "name": "assert-plus",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/assert-plus@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert-plus:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert-plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert-plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/assert-plus@1.0.0?package-id=f2e77aec5ce712cc",
-      "type": "library",
-      "name": "assert-plus",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:assert-plus:assert-plus:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/assert-plus@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert-plus:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert-plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert_plus:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert-plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:assert:assert_plus:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/async@0.2.10?package-id=d7783eec34888a15",
-      "type": "library",
-      "name": "async",
-      "version": "0.2.10",
-      "cpe": "cpe:2.3:a:async:async:0.2.10:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/async@0.2.10",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/async@1.5.2?package-id=4d1335db430ec60e",
-      "type": "library",
-      "name": "async",
-      "version": "1.5.2",
-      "cpe": "cpe:2.3:a:async:async:1.5.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/async@1.5.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/async@2.6.4?package-id=36f5169695cd98a1",
-      "type": "library",
-      "name": "async",
-      "version": "2.6.4",
-      "cpe": "cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/async@2.6.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/async-limiter@1.0.1?package-id=8ffdac056852d938",
-      "type": "library",
-      "name": "async-limiter",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:async-limiter:async-limiter:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/async-limiter@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:async-limiter:async_limiter:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:async_limiter:async-limiter:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:async_limiter:async_limiter:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:async:async-limiter:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:async:async_limiter:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=84675b858ade6b09",
-      "type": "library",
-      "name": "asynckit",
-      "version": "0.4.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/asynckit@0.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/asynckit@0.4.0?package-id=7b03feca8a38f82a",
-      "type": "library",
-      "name": "asynckit",
-      "version": "0.4.0",
-      "cpe": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/asynckit@0.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/available-typed-arrays@1.0.7?package-id=306cdf2df7635f1e",
-      "type": "library",
-      "name": "available-typed-arrays",
-      "version": "1.0.7",
-      "cpe": "cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/available-typed-arrays@1.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aws-sign2@0.6.0?package-id=a7ff674e0c0d9f6e",
-      "type": "library",
-      "name": "aws-sign2",
-      "version": "0.6.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aws-sign2@0.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws-sign2:aws_sign2:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws_sign2:aws-sign2:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws_sign2:aws_sign2:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws:aws-sign2:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws:aws_sign2:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aws-sign2@0.7.0?package-id=05cb361d90e3b957",
-      "type": "library",
-      "name": "aws-sign2",
-      "version": "0.7.0",
-      "cpe": "cpe:2.3:a:aws-sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aws-sign2@0.7.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws-sign2:aws_sign2:0.7.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws_sign2:aws-sign2:0.7.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws_sign2:aws_sign2:0.7.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws:aws-sign2:0.7.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:aws:aws_sign2:0.7.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aws4@1.13.2?package-id=6fc0488f8b70fadc",
-      "type": "library",
-      "name": "aws4",
-      "version": "1.13.2",
-      "cpe": "cpe:2.3:a:aws4:aws4:1.13.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aws4@1.13.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/aws4@1.6.0?package-id=2aa682c5186339a2",
-      "type": "library",
-      "name": "aws4",
-      "version": "1.6.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:aws4:aws4:1.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/aws4@1.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/backo2@1.0.2?package-id=3b7d251b59afa6af",
-      "type": "library",
-      "name": "backo2",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:backo2:backo2:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/backo2@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/balanced-match@1.0.0?package-id=7c6ead7201e0ad87",
-      "type": "library",
-      "name": "balanced-match",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/balanced-match@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced:balanced-match:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced:balanced_match:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=19de0c4dd0df01ad",
-      "type": "library",
-      "name": "balanced-match",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/balanced-match@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.5?package-id=373530c036288f21",
-      "type": "library",
-      "name": "base64-arraybuffer",
-      "version": "0.1.5",
-      "cpe": "cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/base64-arraybuffer@0.1.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64-arraybuffer:0.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64_arraybuffer:0.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/base64-js@0.0.8?package-id=b266fe19e148bfa4",
-      "type": "library",
-      "name": "base64-js",
-      "version": "0.0.8",
-      "cpe": "cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/base64-js@0.0.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=471245e7ca39d8f8",
-      "type": "library",
-      "name": "base64-js",
-      "version": "1.5.1",
-      "cpe": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/base64-js@1.5.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/base64id@1.0.0?package-id=95f1efd965acf0d3",
-      "type": "library",
-      "name": "base64id",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:base64id:base64id:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/base64id@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/base64url@0.0.6?package-id=c01f447248c2f94c",
-      "type": "library",
-      "name": "base64url",
-      "version": "0.0.6",
-      "cpe": "cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/base64url@0.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/basic-auth@2.0.1?package-id=6df59100b8949ab3",
-      "type": "library",
-      "name": "basic-auth",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/basic-auth@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/batch@0.6.1?package-id=a600cdd23ba034f0",
-      "type": "library",
-      "name": "batch",
-      "version": "0.6.1",
-      "cpe": "cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/batch@0.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.1?package-id=847fe2c291057326",
-      "type": "library",
-      "name": "bcrypt-pbkdf",
-      "version": "1.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt-pbkdf:bcrypt_pbkdf:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt_pbkdf:bcrypt-pbkdf:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt_pbkdf:bcrypt_pbkdf:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt:bcrypt-pbkdf:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt:bcrypt_pbkdf:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2?package-id=17ac7fb2cdffb288",
-      "type": "library",
-      "name": "bcrypt-pbkdf",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:bcrypt-pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt-pbkdf:bcrypt_pbkdf:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt_pbkdf:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt_pbkdf:bcrypt_pbkdf:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt:bcrypt-pbkdf:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:bcrypt:bcrypt_pbkdf:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/better-assert@1.0.2?package-id=003992d156287580",
-      "type": "library",
-      "name": "better-assert",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:better-assert:better-assert:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/better-assert@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:better-assert:better_assert:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:better_assert:better-assert:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:better_assert:better_assert:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:better:better-assert:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:better:better_assert:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bindings@1.5.0?package-id=47b41d7795449c58",
-      "type": "library",
-      "name": "bindings",
-      "version": "1.5.0",
-      "cpe": "cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bindings@1.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bl@1.2.3?package-id=79bc7383cf05fac3",
-      "type": "library",
-      "name": "bl",
-      "version": "1.2.3",
-      "cpe": "cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bl@1.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/blob@0.0.5?package-id=a1e2dc2ad3ea717a",
-      "type": "library",
-      "name": "blob",
-      "version": "0.0.5",
-      "cpe": "cpe:2.3:a:blob:blob:0.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/blob@0.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/block-stream@0.0.9?package-id=1fe686872636bf53",
-      "type": "library",
-      "name": "block-stream",
-      "version": "0.0.9",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:block-stream:block-stream:0.0.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/block-stream@0.0.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block-stream:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block_stream:block-stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block_stream:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block:block-stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/block-stream@0.0.9?package-id=55e9679407212360",
-      "type": "library",
-      "name": "block-stream",
-      "version": "0.0.9",
-      "cpe": "cpe:2.3:a:block-stream:block-stream:0.0.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/block-stream@0.0.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block-stream:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block_stream:block-stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block_stream:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block:block-stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:block:block_stream:0.0.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=4c52c90ef9f13e8a",
-      "type": "library",
-      "name": "bluebird",
-      "version": "3.7.2",
-      "cpe": "cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bluebird@3.7.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/body-parser@1.18.3?package-id=acf24689503c695d",
-      "type": "library",
-      "name": "body-parser",
-      "version": "1.18.3",
-      "cpe": "cpe:2.3:a:openjsf:body-parser:1.18.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/body-parser@1.18.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/boom@2.10.1?package-id=b1763c2f8ba27d7d",
-      "type": "library",
-      "name": "boom",
-      "version": "2.10.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:boom:boom:2.10.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/boom@2.10.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/brace-expansion@1.1.11?package-id=b05c4d9d2f3d57d3",
-      "type": "library",
-      "name": "brace-expansion",
-      "version": "1.1.11",
-      "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/brace-expansion@1.1.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace-expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace_expansion:brace-expansion:1.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace_expansion:brace_expansion:1.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace:brace-expansion:1.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace:brace_expansion:1.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/brace-expansion@1.1.8?package-id=9e250508f43fe933",
-      "type": "library",
-      "name": "brace-expansion",
-      "version": "1.1.8",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:brace-expansion:brace-expansion:1.1.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/brace-expansion@1.1.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace-expansion:brace_expansion:1.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace_expansion:brace-expansion:1.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace_expansion:brace_expansion:1.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace:brace-expansion:1.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:brace:brace_expansion:1.1.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/brfs@1.6.1?package-id=cf20a1365cf76364",
-      "type": "library",
-      "name": "brfs",
-      "version": "1.6.1",
-      "cpe": "cpe:2.3:a:brfs:brfs:1.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/brfs@1.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/brotli@1.3.3?package-id=26ec4c8224ef3f4b",
-      "type": "library",
-      "name": "brotli",
-      "version": "1.3.3",
-      "cpe": "cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/brotli@1.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/browserify-zlib@0.1.4?package-id=9f3f02f7501fc533",
-      "type": "library",
-      "name": "browserify-zlib",
-      "version": "0.1.4",
-      "cpe": "cpe:2.3:a:browserify-zlib:browserify-zlib:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/browserify-zlib@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:browserify-zlib:browserify_zlib:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:browserify_zlib:browserify-zlib:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:browserify_zlib:browserify_zlib:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:browserify:browserify-zlib:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:browserify:browserify_zlib:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer@5.7.1?package-id=83b44996140a88fd",
-      "type": "library",
-      "name": "buffer",
-      "version": "5.7.1",
-      "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer@5.7.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-alloc@1.2.0?package-id=05c6070a2607c16b",
-      "type": "library",
-      "name": "buffer-alloc",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-alloc@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=2cb18a24ddd8553d",
-      "type": "library",
-      "name": "buffer-alloc-unsafe",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=379accec8d146bd1",
-      "type": "library",
-      "name": "buffer-crc32",
-      "version": "0.2.13",
-      "cpe": "cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-crc32@0.2.13",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-equal@0.0.1?package-id=95754c0013963420",
-      "type": "library",
-      "name": "buffer-equal",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:buffer-equal:buffer-equal:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-equal@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal:buffer_equal:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal:buffer-equal:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal:buffer_equal:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-equal:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_equal:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-equal-constant-time@1.0.1?package-id=3ae6b53a1dd55378",
-      "type": "library",
-      "name": "buffer-equal-constant-time",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-equal-constant-time@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal-constant-time:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal_constant_time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal_constant_time:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal-constant:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal-constant:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal_constant:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal_constant:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-equal:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_equal:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-fill@1.0.0?package-id=c38f100794394a38",
-      "type": "library",
-      "name": "buffer-fill",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-fill@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/buffer-from@1.1.2?package-id=3c41f9030445c5ef",
-      "type": "library",
-      "name": "buffer-from",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/buffer-from@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/busboy@0.2.14?package-id=fdfeebb1a8264a74",
-      "type": "library",
-      "name": "busboy",
-      "version": "0.2.14",
-      "cpe": "cpe:2.3:a:busboy:busboy:0.2.14:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/busboy@0.2.14",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/bytes@3.0.0?package-id=c6de856bf22832c4",
-      "type": "library",
-      "name": "bytes",
-      "version": "3.0.0",
-      "cpe": "cpe:2.3:a:bytes:bytes:3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/bytes@3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/call-bind@1.0.8?package-id=44aeb50fa051cf62",
-      "type": "library",
-      "name": "call-bind",
-      "version": "1.0.8",
-      "cpe": "cpe:2.3:a:call-bind:call-bind:1.0.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/call-bind@1.0.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind:call_bind:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind:call-bind:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind:call_bind:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call-bind:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call_bind:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2?package-id=243ecbe2f62a49f7",
-      "type": "library",
-      "name": "call-bind-apply-helpers",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/call-bound@1.0.4?package-id=e41089b9c52ce1f6",
-      "type": "library",
-      "name": "call-bound",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/call-bound@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/callsite@1.0.0?package-id=ff303c6788e59ade",
-      "type": "library",
-      "name": "callsite",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:callsite:callsite:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/callsite@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/camel-case@3.0.0?package-id=de7c5bb62dfe5006",
-      "type": "library",
-      "name": "camel-case",
-      "version": "3.0.0",
-      "cpe": "cpe:2.3:a:camel-case:camel-case:3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/camel-case@3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camel-case:camel_case:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camel_case:camel-case:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camel_case:camel_case:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camel:camel-case:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camel:camel_case:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/camelcase@1.2.1?package-id=db4623851c4c6431",
-      "type": "library",
-      "name": "camelcase",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:camelcase:camelcase:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/camelcase@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/camelcase@2.1.1?package-id=13a8dc49dc307445",
-      "type": "library",
-      "name": "camelcase",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:camelcase:camelcase:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/camelcase@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/camelcase-keys@2.1.0?package-id=3fb75fb9f1fb00b8",
-      "type": "library",
-      "name": "camelcase-keys",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:camelcase-keys:camelcase-keys:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/camelcase-keys@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camelcase-keys:camelcase_keys:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camelcase_keys:camelcase-keys:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camelcase_keys:camelcase_keys:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camelcase:camelcase-keys:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:camelcase:camelcase_keys:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/camelize@1.0.0?package-id=f97868fc49cbebf2",
-      "type": "library",
-      "name": "camelize",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:camelize:camelize:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/camelize@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/caseless@0.12.0?package-id=4365d530d067affa",
-      "type": "library",
-      "name": "caseless",
-      "version": "0.12.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/caseless@0.12.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/caseless@0.12.0?package-id=a19e7a7eddadff44",
-      "type": "library",
-      "name": "caseless",
-      "version": "0.12.0",
-      "cpe": "cpe:2.3:a:caseless:caseless:0.12.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/caseless@0.12.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/center-align@0.1.3?package-id=a8beea663680c62a",
-      "type": "library",
-      "name": "center-align",
-      "version": "0.1.3",
-      "cpe": "cpe:2.3:a:center-align:center-align:0.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/center-align@0.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:center-align:center_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:center_align:center-align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:center_align:center_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:center:center-align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:center:center_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/chalk@1.1.3?package-id=e14a4c329ec290b7",
-      "type": "library",
-      "name": "chalk",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/chalk@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/chalk@2.4.2?package-id=af00149125866a02",
-      "type": "library",
-      "name": "chalk",
-      "version": "2.4.2",
-      "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/chalk@2.4.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/change-case@3.0.2?package-id=c12696a452e505ff",
-      "type": "library",
-      "name": "change-case",
-      "version": "3.0.2",
-      "cpe": "cpe:2.3:a:change-case:change-case:3.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/change-case@3.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:change-case:change_case:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:change_case:change-case:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:change_case:change_case:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:change:change-case:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:change:change_case:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/check-types@6.0.0?package-id=c23f2fbd5f3df455",
-      "type": "library",
-      "name": "check-types",
-      "version": "6.0.0",
-      "cpe": "cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/check-types@6.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/chownr@1.1.4?package-id=e1c11d03300179ba",
-      "type": "library",
-      "name": "chownr",
-      "version": "1.1.4",
-      "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/chownr@1.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/cirrus-actions/rebase@b87d48154a87a85666003575337e27b8cd65f691?package-id=ef4e9b46dc70358d",
-      "type": "library",
-      "name": "cirrus-actions/rebase",
-      "version": "b87d48154a87a85666003575337e27b8cd65f691",
-      "cpe": "cpe:2.3:a:cirrus-actions\\/rebase:cirrus-actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*",
-      "purl": "pkg:github/cirrus-actions/rebase@b87d48154a87a85666003575337e27b8cd65f691",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cirrus-actions\\/rebase:cirrus_actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cirrus_actions\\/rebase:cirrus-actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cirrus_actions\\/rebase:cirrus_actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cirrus:cirrus-actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cirrus:cirrus_actions\\/rebase:b87d48154a87a85666003575337e27b8cd65f691:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/rebase.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/clean-css@3.4.28?package-id=215c8eafcb979e73",
-      "type": "library",
-      "name": "clean-css",
-      "version": "3.4.28",
-      "cpe": "cpe:2.3:a:clean-css:clean-css:3.4.28:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/clean-css@3.4.28",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:clean-css:clean_css:3.4.28:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:clean_css:clean-css:3.4.28:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:clean_css:clean_css:3.4.28:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:clean:clean-css:3.4.28:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:clean:clean_css:3.4.28:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cliui@2.1.0?package-id=ad9e2d7a5fc5ed45",
-      "type": "library",
-      "name": "cliui",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:cliui:cliui:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cliui@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/clone@2.1.2?package-id=3a951b47ec6a6498",
-      "type": "library",
-      "name": "clone",
-      "version": "2.1.2",
-      "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/clone@2.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cls-bluebird@2.1.0?package-id=0f332472f696915c",
-      "type": "library",
-      "name": "cls-bluebird",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:cls-bluebird:cls-bluebird:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cls-bluebird@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cls-bluebird:cls_bluebird:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cls_bluebird:cls-bluebird:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cls_bluebird:cls_bluebird:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cls:cls-bluebird:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cls:cls_bluebird:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/co@4.6.0?package-id=6b499c2fb17d4582",
-      "type": "library",
-      "name": "co",
-      "version": "4.6.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:co:co:4.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/co@4.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=050d05e84251cd41",
-      "type": "library",
-      "name": "code-point-at",
-      "version": "1.1.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/code-point-at@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=bf10c2a29cfa8ac3",
-      "type": "library",
-      "name": "code-point-at",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/code-point-at@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/coffeescript@1.10.0?package-id=0e5d9d89040330e6",
-      "type": "library",
-      "name": "coffeescript",
-      "version": "1.10.0",
-      "cpe": "cpe:2.3:a:coffeescript:coffeescript:1.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/coffeescript@1.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=18ed9589f9ca5090",
-      "type": "library",
-      "name": "color-convert",
-      "version": "1.9.3",
-      "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/color-convert@1.9.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/color-name@1.1.3?package-id=ece4fbe447daf6c8",
-      "type": "library",
-      "name": "color-name",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/color-name@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/colors@0.5.1?package-id=d5554a5b01593f55",
-      "type": "library",
-      "name": "colors",
-      "version": "0.5.1",
-      "cpe": "cpe:2.3:a:colors:colors:0.5.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/colors@0.5.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/colors@1.1.2?package-id=651da8a37404c5c5",
-      "type": "library",
-      "name": "colors",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/colors@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/combined-stream@1.0.5?package-id=3caa7d37976c81ec",
-      "type": "library",
-      "name": "combined-stream",
-      "version": "1.0.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/combined-stream@1.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined-stream:combined_stream:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined_stream:combined-stream:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined_stream:combined_stream:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined:combined-stream:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined:combined_stream:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/combined-stream@1.0.8?package-id=8465843f89a6ef00",
-      "type": "library",
-      "name": "combined-stream",
-      "version": "1.0.8",
-      "cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/combined-stream@1.0.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined-stream:combined_stream:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined_stream:combined-stream:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined_stream:combined_stream:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined:combined-stream:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:combined:combined_stream:1.0.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/commander@2.12.2?package-id=b9a1780322b2b556",
-      "type": "library",
-      "name": "commander",
-      "version": "2.12.2",
-      "cpe": "cpe:2.3:a:commander:commander:2.12.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/commander@2.12.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/commander@2.8.1?package-id=0667a68027db2cf5",
-      "type": "library",
-      "name": "commander",
-      "version": "2.8.1",
-      "cpe": "cpe:2.3:a:commander:commander:2.8.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/commander@2.8.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/commander@2.9.0?package-id=7eea74c8cac62998",
-      "type": "library",
-      "name": "commander",
-      "version": "2.9.0",
-      "cpe": "cpe:2.3:a:commander:commander:2.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/commander@2.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/component-bind@1.0.0?package-id=7e2a973f7133ca66",
-      "type": "library",
-      "name": "component-bind",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:component-bind:component-bind:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/component-bind@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component-bind:component_bind:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_bind:component-bind:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_bind:component_bind:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component-bind:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component_bind:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/component-emitter@1.2.1?package-id=64a077b614a9971a",
-      "type": "library",
-      "name": "component-emitter",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:component-emitter:component-emitter:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/component-emitter@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component-emitter:component_emitter:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_emitter:component-emitter:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_emitter:component_emitter:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component-emitter:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component_emitter:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/component-inherit@0.0.3?package-id=8675a4c36f52f30a",
-      "type": "library",
-      "name": "component-inherit",
-      "version": "0.0.3",
-      "cpe": "cpe:2.3:a:component-inherit:component-inherit:0.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/component-inherit@0.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component-inherit:component_inherit:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_inherit:component-inherit:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component_inherit:component_inherit:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component-inherit:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:component:component_inherit:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/compress-commons@1.2.2?package-id=195c86b604e83c9f",
-      "type": "library",
-      "name": "compress-commons",
-      "version": "1.2.2",
-      "cpe": "cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/compress-commons@1.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=24518be6eca2b09a",
-      "type": "library",
-      "name": "concat-map",
-      "version": "0.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/concat-map@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=573d4a7696fcd273",
-      "type": "library",
-      "name": "concat-map",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/concat-map@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=3b9b676b5e2fb9bf",
-      "type": "library",
-      "name": "concat-stream",
-      "version": "1.6.2",
-      "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/concat-stream@1.6.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/config@1.28.1?package-id=0a2b144f45957272",
-      "type": "library",
-      "name": "config",
-      "version": "1.28.1",
-      "cpe": "cpe:2.3:a:config:config:1.28.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/config@1.28.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=4b3e59cfa1b44274",
-      "type": "library",
-      "name": "console-control-strings",
-      "version": "1.1.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/console-control-strings@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=eceba0040ff79299",
-      "type": "library",
-      "name": "console-control-strings",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/console-control-strings@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/constant-case@2.0.0?package-id=2b65c908349e9c81",
-      "type": "library",
-      "name": "constant-case",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:constant-case:constant-case:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/constant-case@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:constant-case:constant_case:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:constant_case:constant-case:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:constant_case:constant_case:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:constant:constant-case:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:constant:constant_case:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/content-disposition@0.5.2?package-id=28515869bd12b0f0",
-      "type": "library",
-      "name": "content-disposition",
-      "version": "0.5.2",
-      "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/content-disposition@0.5.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-disposition:content_disposition:0.5.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_disposition:content-disposition:0.5.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_disposition:content_disposition:0.5.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content-disposition:0.5.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content_disposition:0.5.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/content-security-policy-builder@1.1.0?package-id=602ccece66d4fddb",
-      "type": "library",
-      "name": "content-security-policy-builder",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:content-security-policy-builder:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/content-security-policy-builder@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-security-policy-builder:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security_policy_builder:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security_policy_builder:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-security-policy:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-security-policy:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security_policy:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security_policy:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-security:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-security:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_security:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content-security-policy-builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content_security_policy_builder:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/content-type@1.0.5?package-id=46d11e32f9a28cb9",
-      "type": "library",
-      "name": "content-type",
-      "version": "1.0.5",
-      "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/content-type@1.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/convert-source-map@1.9.0?package-id=a80de67189efd5a4",
-      "type": "library",
-      "name": "convert-source-map",
-      "version": "1.9.0",
-      "cpe": "cpe:2.3:a:convert-source-map:convert-source-map:1.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/convert-source-map@1.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert-source-map:convert_source_map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert_source_map:convert-source-map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert_source_map:convert_source_map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert-source:convert-source-map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert-source:convert_source_map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert_source:convert-source-map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert_source:convert_source_map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert:convert-source-map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:convert:convert_source_map:1.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cookie@0.3.1?package-id=800b6d24b0d717cf",
-      "type": "library",
-      "name": "cookie",
-      "version": "0.3.1",
-      "cpe": "cpe:2.3:a:cookie:cookie:0.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cookie@0.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cookie@0.7.2?package-id=718e82221b4d7f15",
-      "type": "library",
-      "name": "cookie",
-      "version": "0.7.2",
-      "cpe": "cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cookie@0.7.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cookie-parser@1.4.7?package-id=cfc54dddba60d43c",
-      "type": "library",
-      "name": "cookie-parser",
-      "version": "1.4.7",
-      "cpe": "cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cookie-parser@1.4.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=582b3cfe7e3b4deb",
-      "type": "library",
-      "name": "cookie-signature",
-      "version": "1.0.6",
-      "cpe": "cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/cookie-signature@1.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=3fef664e94025530",
-      "type": "library",
-      "name": "core-util-is",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/core-util-is@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=00efb8ee10989186",
-      "type": "library",
-      "name": "core-util-is",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/core-util-is@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/core-util-is@1.0.3?package-id=d0937efc4664dcad",
-      "type": "library",
-      "name": "core-util-is",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/core-util-is@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core-util-is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core-util:core_util_is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core-util-is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core_util:core_util_is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core-util-is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:core:core_util_is:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cors@2.8.5?package-id=12a8e395af931c81",
-      "type": "library",
-      "name": "cors",
-      "version": "2.8.5",
-      "cpe": "cpe:2.3:a:cors:cors:2.8.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cors@2.8.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/coverallsapp/github-action@master?package-id=cbf693155383c51f",
-      "type": "library",
-      "name": "coverallsapp/github-action",
-      "version": "master",
-      "cpe": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*",
-      "purl": "pkg:github/coverallsapp/github-action@master",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/coverallsapp/github-action@master?package-id=75f4b3cf97ed52e8",
-      "type": "library",
-      "name": "coverallsapp/github-action",
-      "version": "master",
-      "cpe": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*",
-      "purl": "pkg:github/coverallsapp/github-action@master",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/json-schema-traverse/.github/workflows/build.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/coverallsapp/github-action@master?package-id=42298b1f9a797c3a",
-      "type": "library",
-      "name": "coverallsapp/github-action",
-      "version": "master",
-      "cpe": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*",
-      "purl": "pkg:github/coverallsapp/github-action@master",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github-action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github_action:master:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/crc@3.8.0?package-id=c13f67c847756d0c",
-      "type": "library",
-      "name": "crc",
-      "version": "3.8.0",
-      "cpe": "cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/crc@3.8.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/crc32-stream@2.0.0?package-id=db981a7b5145ee48",
-      "type": "library",
-      "name": "crc32-stream",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/crc32-stream@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/cryptiles@2.0.5?package-id=5005963c1d6fed77",
-      "type": "library",
-      "name": "cryptiles",
-      "version": "2.0.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:cryptiles:cryptiles:2.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/cryptiles@2.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/currently-unhandled@0.4.1?package-id=3bfbc6bd9b3b34d7",
-      "type": "library",
-      "name": "currently-unhandled",
-      "version": "0.4.1",
-      "cpe": "cpe:2.3:a:currently-unhandled:currently-unhandled:0.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/currently-unhandled@0.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:currently-unhandled:currently_unhandled:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:currently_unhandled:currently-unhandled:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:currently_unhandled:currently_unhandled:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:currently:currently-unhandled:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:currently:currently_unhandled:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/cypress-io/github-action@v6.7.8?package-id=5fa7a9877b87ebc2",
-      "type": "library",
-      "name": "cypress-io/github-action",
-      "version": "v6.7.8",
-      "cpe": "cpe:2.3:a:cypress-io\\/github-action:cypress-io\\/github-action:v6.7.8:*:*:*:*:*:*:*",
-      "purl": "pkg:github/cypress-io/github-action@v6.7.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress-io\\/github-action:cypress_io\\/github_action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress_io\\/github_action:cypress-io\\/github-action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress_io\\/github_action:cypress_io\\/github_action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress-io\\/github:cypress-io\\/github-action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress-io\\/github:cypress_io\\/github_action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress_io\\/github:cypress-io\\/github-action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress_io\\/github:cypress_io\\/github_action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress:cypress-io\\/github-action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:cypress:cypress_io\\/github_action:v6.7.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=9f73855c6d95d30f",
-      "type": "library",
-      "name": "dashdash",
-      "version": "1.14.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dashdash@1.14.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dashdash@1.14.1?package-id=510b35f8b7de7ec1",
-      "type": "library",
-      "name": "dashdash",
-      "version": "1.14.1",
-      "cpe": "cpe:2.3:a:dashdash:dashdash:1.14.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dashdash@1.14.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dasherize@2.0.0?package-id=741c9262b7139664",
-      "type": "library",
-      "name": "dasherize",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:dasherize:dasherize:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dasherize@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dashify@0.2.2?package-id=76098888f90e4ded",
-      "type": "library",
-      "name": "dashify",
-      "version": "0.2.2",
-      "cpe": "cpe:2.3:a:dashify:dashify:0.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dashify@0.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dateformat@1.0.12?package-id=a68476188e667434",
-      "type": "library",
-      "name": "dateformat",
-      "version": "1.0.12",
-      "cpe": "cpe:2.3:a:dateformat:dateformat:1.0.12:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dateformat@1.0.12",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/dawidd6/action-get-tag@v1.1.0?package-id=d2dce4e8e0fba6fb",
-      "type": "library",
-      "name": "dawidd6/action-get-tag",
-      "version": "v1.1.0",
-      "cpe": "cpe:2.3:a:dawidd6\\/action-get-tag:dawidd6\\/action-get-tag:v1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/dawidd6/action-get-tag@v1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action-get-tag:dawidd6\\/action_get_tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action_get_tag:dawidd6\\/action-get-tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action_get_tag:dawidd6\\/action_get_tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action-get:dawidd6\\/action-get-tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action-get:dawidd6\\/action_get_tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action_get:dawidd6\\/action-get-tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action_get:dawidd6\\/action_get_tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action:dawidd6\\/action-get-tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dawidd6\\/action:dawidd6\\/action_get_tag:v1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/debug@2.6.9?package-id=b1e3aeb5d7f2d74f",
-      "type": "library",
-      "name": "debug",
-      "version": "2.6.9",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/debug@2.6.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/debug@2.6.9?package-id=09a83120328cd901",
-      "type": "library",
-      "name": "debug",
-      "version": "2.6.9",
-      "cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/debug@2.6.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/debug@3.1.0?package-id=e33ba07295dedb6c",
-      "type": "library",
-      "name": "debug",
-      "version": "3.1.0",
-      "cpe": "cpe:2.3:a:debug_project:debug:3.1.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/debug@3.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/debug@3.2.7?package-id=78c5366fd33823ca",
-      "type": "library",
-      "name": "debug",
-      "version": "3.2.7",
-      "cpe": "cpe:2.3:a:debug_project:debug:3.2.7:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/debug@3.2.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=1d55537f28e1c581",
-      "type": "library",
-      "name": "decamelize",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/decamelize@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/decompress-response@3.3.0?package-id=a0494e3988d11319",
-      "type": "library",
-      "name": "decompress-response",
-      "version": "3.3.0",
-      "cpe": "cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/decompress-response@3.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:decompress-response:decompress_response:3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:decompress_response:decompress-response:3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:decompress_response:decompress_response:3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:decompress:decompress-response:3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:decompress:decompress_response:3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/deep-equal@2.2.3?package-id=3582000a94e09ffd",
-      "type": "library",
-      "name": "deep-equal",
-      "version": "2.2.3",
-      "cpe": "cpe:2.3:a:deep-equal:deep-equal:2.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/deep-equal@2.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep-equal:deep_equal:2.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep_equal:deep-equal:2.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep_equal:deep_equal:2.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep:deep-equal:2.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep:deep_equal:2.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/deep-extend@0.4.2?package-id=e143b22cbd7127a2",
-      "type": "library",
-      "name": "deep-extend",
-      "version": "0.4.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:deep_extend_project:deep_extend:0.4.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/deep-extend@0.4.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=35cdf3820ea7ac2f",
-      "type": "library",
-      "name": "deep-extend",
-      "version": "0.6.0",
-      "cpe": "cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/deep-extend@0.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/deep-is@0.1.4?package-id=58079c4bc3f76260",
-      "type": "library",
-      "name": "deep-is",
-      "version": "0.1.4",
-      "cpe": "cpe:2.3:a:deep-is:deep-is:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/deep-is@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep-is:deep_is:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep_is:deep-is:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep_is:deep_is:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep:deep-is:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:deep:deep_is:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/define-data-property@1.1.4?package-id=31c36a5dbec11efc",
-      "type": "library",
-      "name": "define-data-property",
-      "version": "1.1.4",
-      "cpe": "cpe:2.3:a:define-data-property:define-data-property:1.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/define-data-property@1.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define-data-property:define_data_property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_data_property:define-data-property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_data_property:define_data_property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define-data:define-data-property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define-data:define_data_property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_data:define-data-property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_data:define_data_property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define:define-data-property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define:define_data_property:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/define-properties@1.2.1?package-id=14c3c8cfee6ec247",
-      "type": "library",
-      "name": "define-properties",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:define-properties:define-properties:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/define-properties@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define-properties:define_properties:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_properties:define-properties:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define_properties:define_properties:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define:define-properties:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:define:define_properties:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=b6888389a427932a",
-      "type": "library",
-      "name": "delayed-stream",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/delayed-stream@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed-stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed_stream:delayed-stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed_stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed:delayed-stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/delayed-stream@1.0.0?package-id=4d6d96d3048ce70e",
-      "type": "library",
-      "name": "delayed-stream",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/delayed-stream@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed-stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed_stream:delayed-stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed_stream:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed:delayed-stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:delayed:delayed_stream:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/delegates@1.0.0?package-id=e0c6306228a6fa2f",
-      "type": "library",
-      "name": "delegates",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/delegates@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/delegates@1.0.0?package-id=3b3755753dad29be",
-      "type": "library",
-      "name": "delegates",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/delegates@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/depd@1.1.2?package-id=617fb4666579b827",
-      "type": "library",
-      "name": "depd",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/depd@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/dessant/lock-threads@v5.0.1?package-id=883950c417bd68b6",
-      "type": "library",
-      "name": "dessant/lock-threads",
-      "version": "v5.0.1",
-      "cpe": "cpe:2.3:a:dessant\\/lock-threads:dessant\\/lock-threads:v5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/dessant/lock-threads@v5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dessant\\/lock-threads:dessant\\/lock_threads:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dessant\\/lock_threads:dessant\\/lock-threads:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dessant\\/lock_threads:dessant\\/lock_threads:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dessant\\/lock:dessant\\/lock-threads:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dessant\\/lock:dessant\\/lock_threads:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/lock.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/destroy@1.0.4?package-id=90373dbab4d3b0d6",
-      "type": "library",
-      "name": "destroy",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:destroy:destroy:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/destroy@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/detect-libc@0.2.0?package-id=cb525dc51797cdcb",
-      "type": "library",
-      "name": "detect-libc",
-      "version": "0.2.0",
-      "cpe": "cpe:2.3:a:detect-libc:detect-libc:0.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/detect-libc@0.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect-libc:detect_libc:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect_libc:detect-libc:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect_libc:detect_libc:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect:detect-libc:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect:detect_libc:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/detect-libc@1.0.3?package-id=515ad55793eac27a",
-      "type": "library",
-      "name": "detect-libc",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:detect-libc:detect-libc:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/detect-libc@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect-libc:detect_libc:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect_libc:detect-libc:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect_libc:detect_libc:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect:detect-libc:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:detect:detect_libc:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dfa@1.2.0?package-id=3f94f38acf4084e0",
-      "type": "library",
-      "name": "dfa",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dfa@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dicer@0.2.5?package-id=f8af610152a78a19",
-      "type": "library",
-      "name": "dicer",
-      "version": "0.2.5",
-      "cpe": "cpe:2.3:a:dicer_project:dicer:0.2.5:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/dicer@0.2.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dns-prefetch-control@0.1.0?package-id=f2dc6bbdc782d81e",
-      "type": "library",
-      "name": "dns-prefetch-control",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:dns-prefetch-control:dns-prefetch-control:0.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dns-prefetch-control@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns-prefetch-control:dns_prefetch_control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns_prefetch_control:dns-prefetch-control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns_prefetch_control:dns_prefetch_control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns-prefetch:dns-prefetch-control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns-prefetch:dns_prefetch_control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns_prefetch:dns-prefetch-control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns_prefetch:dns_prefetch_control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns:dns-prefetch-control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dns:dns_prefetch_control:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/build-push-action@v6.1.0?package-id=2e6fb99dd2e3906e",
-      "type": "library",
-      "name": "docker/build-push-action",
-      "version": "v6.1.0",
-      "cpe": "cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/build-push-action@v6.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/build-push-action@v6.1.0?package-id=07cb3914a25119e6",
-      "type": "library",
-      "name": "docker/build-push-action",
-      "version": "v6.1.0",
-      "cpe": "cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/build-push-action@v6.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build:docker\\/build-push-action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/build:docker\\/build_push_action:v6.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/login-action@v3.3.0?package-id=439ddce61c1277bd",
-      "type": "library",
-      "name": "docker/login-action",
-      "version": "v3.3.0",
-      "cpe": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/login-action@v3.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/login-action@v3.3.0?package-id=28825221ddcf5c79",
-      "type": "library",
-      "name": "docker/login-action",
-      "version": "v3.3.0",
-      "cpe": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/login-action@v3.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login:docker\\/login-action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/login:docker\\/login_action:v3.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/setup-buildx-action@v3.8.0?package-id=af98fb5d22006d7d",
-      "type": "library",
-      "name": "docker/setup-buildx-action",
-      "version": "v3.8.0",
-      "cpe": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/setup-buildx-action@v3.8.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/setup-buildx-action@v3.8.0?package-id=7336a1f6caad26b9",
-      "type": "library",
-      "name": "docker/setup-buildx-action",
-      "version": "v3.8.0",
-      "cpe": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/setup-buildx-action@v3.8.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/setup-qemu-action@v3.2.0?package-id=2f47c7d9bde4a465",
-      "type": "library",
-      "name": "docker/setup-qemu-action",
-      "version": "v3.2.0",
-      "cpe": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/setup-qemu-action@v3.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/docker/setup-qemu-action@v3.2.0?package-id=4bd500336a0c0602",
-      "type": "library",
-      "name": "docker/setup-qemu-action",
-      "version": "v3.2.0",
-      "cpe": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/docker/setup-qemu-action@v3.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/domelementtype@1.3.1?package-id=28916ea61fc04f2d",
-      "type": "library",
-      "name": "domelementtype",
-      "version": "1.3.1",
-      "cpe": "cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/domelementtype@1.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/domhandler@2.1.0?package-id=52491b8e8f172c43",
-      "type": "library",
-      "name": "domhandler",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:domhandler:domhandler:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/domhandler@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/domutils@1.1.6?package-id=d17ebbee884f25cf",
-      "type": "library",
-      "name": "domutils",
-      "version": "1.1.6",
-      "cpe": "cpe:2.3:a:domutils:domutils:1.1.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/domutils@1.1.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dont-sniff-mimetype@1.0.0?package-id=5b73130689cc3d62",
-      "type": "library",
-      "name": "dont-sniff-mimetype",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:dont-sniff-mimetype:dont-sniff-mimetype:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dont-sniff-mimetype@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont-sniff-mimetype:dont_sniff_mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont_sniff_mimetype:dont-sniff-mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont_sniff_mimetype:dont_sniff_mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont-sniff:dont-sniff-mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont-sniff:dont_sniff_mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont_sniff:dont-sniff-mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont_sniff:dont_sniff_mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont:dont-sniff-mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dont:dont_sniff_mimetype:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dot-case@2.1.1?package-id=38528a05542283df",
-      "type": "library",
-      "name": "dot-case",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:dot-case:dot-case:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dot-case@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dot-case:dot_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dot_case:dot-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dot_case:dot_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dot:dot-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dot:dot_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dottie@2.0.6?package-id=18ac7a673792d2e6",
-      "type": "library",
-      "name": "dottie",
-      "version": "2.0.6",
-      "cpe": "cpe:2.3:a:dottie_project:dottie:2.0.6:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/dottie@2.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/double-ended-queue@0.9.7?package-id=71ab6923038b9a9d",
-      "type": "library",
-      "name": "double-ended-queue",
-      "version": "0.9.7",
-      "cpe": "cpe:2.3:a:double-ended-queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/double-ended-queue@0.9.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double-ended-queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double_ended_queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double_ended_queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double-ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double-ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double_ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double_ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:double:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/dunder-proto@1.0.1?package-id=88ab2c253c73d9f6",
-      "type": "library",
-      "name": "dunder-proto",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/dunder-proto@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/duplexer2@0.1.4?package-id=893b4c0acb941e82",
-      "type": "library",
-      "name": "duplexer2",
-      "version": "0.1.4",
-      "cpe": "cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/duplexer2@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ecc-jsbn@0.1.1?package-id=2509e178740467c0",
-      "type": "library",
-      "name": "ecc-jsbn",
-      "version": "0.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:ecc-jsbn:ecc-jsbn:0.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ecc-jsbn@0.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc-jsbn:ecc_jsbn:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc_jsbn:ecc-jsbn:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc_jsbn:ecc_jsbn:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc:ecc-jsbn:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc:ecc_jsbn:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2?package-id=58fd53d7fa541e65",
-      "type": "library",
-      "name": "ecc-jsbn",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:ecc-jsbn:ecc-jsbn:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ecc-jsbn@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc-jsbn:ecc_jsbn:0.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc_jsbn:ecc-jsbn:0.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc_jsbn:ecc_jsbn:0.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc:ecc-jsbn:0.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecc:ecc_jsbn:0.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ecdsa-sig-formatter@1.0.11?package-id=8642cce1b47501e7",
-      "type": "library",
-      "name": "ecdsa-sig-formatter",
-      "version": "1.0.11",
-      "cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa_sig_formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa_sig_formatter:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa-sig:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa-sig:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa_sig:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa_sig:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ecdsa:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=630f70a493859e5c",
-      "type": "library",
-      "name": "ee-first",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ee-first@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/encodeurl@1.0.2?package-id=b08d6517dbdd07cb",
-      "type": "library",
-      "name": "encodeurl",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:encodeurl:encodeurl:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/encodeurl@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/end-of-stream@1.4.4?package-id=666a04c17901c2bf",
-      "type": "library",
-      "name": "end-of-stream",
-      "version": "1.4.4",
-      "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/end-of-stream@1.4.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end-of-stream:end_of_stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end_of_stream:end-of-stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end_of_stream:end_of_stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end-of:end-of-stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end-of:end_of_stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end_of:end-of-stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end_of:end_of_stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end:end-of-stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:end:end_of_stream:1.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/engine.io@3.1.5?package-id=f3e5257aa0cfee56",
-      "type": "library",
-      "name": "engine.io",
-      "version": "3.1.5",
-      "cpe": "cpe:2.3:a:socket:engine.io:3.1.5:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/engine.io@3.1.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/engine.io-client@3.1.6?package-id=c00eef7b028c789c",
-      "type": "library",
-      "name": "engine.io-client",
-      "version": "3.1.6",
-      "cpe": "cpe:2.3:a:socket:engine.io-client:3.1.6:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/engine.io-client@3.1.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/engine.io-parser@2.1.3?package-id=17a6eac125e52e17",
-      "type": "library",
-      "name": "engine.io-parser",
-      "version": "2.1.3",
-      "cpe": "cpe:2.3:a:engine.io-parser:engine.io-parser:2.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/engine.io-parser@2.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:engine.io-parser:engine.io_parser:2.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:engine.io_parser:engine.io-parser:2.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:engine.io_parser:engine.io_parser:2.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:engine.io:engine.io-parser:2.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:engine.io:engine.io_parser:2.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/epilogue-js@0.7.3?package-id=4ea63dc6c63ca2f7",
-      "type": "library",
-      "name": "epilogue-js",
-      "version": "0.7.3",
-      "cpe": "cpe:2.3:a:epilogue-js:epilogue-js:0.7.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/epilogue-js@0.7.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:epilogue-js:epilogue_js:0.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:epilogue_js:epilogue-js:0.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:epilogue_js:epilogue_js:0.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:epilogue:epilogue-js:0.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:epilogue:epilogue_js:0.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/error-ex@1.3.2?package-id=dfa4d6b6b3355fc7",
-      "type": "library",
-      "name": "error-ex",
-      "version": "1.3.2",
-      "cpe": "cpe:2.3:a:error-ex:error-ex:1.3.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/error-ex@1.3.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:error-ex:error_ex:1.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:error_ex:error-ex:1.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:error_ex:error_ex:1.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:error:error-ex:1.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:error:error_ex:1.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/errorhandler@1.5.1?package-id=9c0b05f973945934",
-      "type": "library",
-      "name": "errorhandler",
-      "version": "1.5.1",
-      "cpe": "cpe:2.3:a:errorhandler:errorhandler:1.5.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/errorhandler@1.5.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/es-define-property@1.0.1?package-id=13c31ad274aad1e9",
-      "type": "library",
-      "name": "es-define-property",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/es-define-property@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/es-errors@1.3.0?package-id=d20f96d9bb588d73",
-      "type": "library",
-      "name": "es-errors",
-      "version": "1.3.0",
-      "cpe": "cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/es-errors@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/es-get-iterator@1.1.3?package-id=2d7fb87828ba5e1a",
-      "type": "library",
-      "name": "es-get-iterator",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:es-get-iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/es-get-iterator@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-get-iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_get_iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_get_iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/es-object-atoms@1.1.1?package-id=ad37cdd7308c9656",
-      "type": "library",
-      "name": "es-object-atoms",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/es-object-atoms@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=1bd71b2f3ef0de9f",
-      "type": "library",
-      "name": "escape-html",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/escape-html@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=d98455e549063181",
-      "type": "library",
-      "name": "escape-string-regexp",
-      "version": "1.0.5",
-      "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/escape-string-regexp@1.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/escodegen@1.9.1?package-id=de6a77dbec0d8a7e",
-      "type": "library",
-      "name": "escodegen",
-      "version": "1.9.1",
-      "cpe": "cpe:2.3:a:escodegen:escodegen:1.9.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/escodegen@1.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/escodegen@2.1.0?package-id=de05365400581354",
-      "type": "library",
-      "name": "escodegen",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:escodegen:escodegen:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/escodegen@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/esprima@3.1.3?package-id=2f2b7e180370a770",
-      "type": "library",
-      "name": "esprima",
-      "version": "3.1.3",
-      "cpe": "cpe:2.3:a:esprima:esprima:3.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/esprima@3.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/esprima@4.0.1?package-id=afd9f2ef33c0a492",
-      "type": "library",
-      "name": "esprima",
-      "version": "4.0.1",
-      "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/esprima@4.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/estraverse@4.3.0?package-id=d02ec94a0aa3303a",
-      "type": "library",
-      "name": "estraverse",
-      "version": "4.3.0",
-      "cpe": "cpe:2.3:a:estraverse:estraverse:4.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/estraverse@4.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/estraverse@5.3.0?package-id=5d9883809e1591f3",
-      "type": "library",
-      "name": "estraverse",
-      "version": "5.3.0",
-      "cpe": "cpe:2.3:a:estraverse:estraverse:5.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/estraverse@5.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/esutils@2.0.3?package-id=2b0c93514c58fd9a",
-      "type": "library",
-      "name": "esutils",
-      "version": "2.0.3",
-      "cpe": "cpe:2.3:a:esutils:esutils:2.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/esutils@2.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/etag@1.8.1?package-id=261afc03fca23d7f",
-      "type": "library",
-      "name": "etag",
-      "version": "1.8.1",
-      "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/etag@1.8.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/eventemitter2@0.4.14?package-id=ee65e76cdcd0dabc",
-      "type": "library",
-      "name": "eventemitter2",
-      "version": "0.4.14",
-      "cpe": "cpe:2.3:a:eventemitter2:eventemitter2:0.4.14:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/eventemitter2@0.4.14",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/eventemitter3@1.1.1?package-id=65d1ce830bd5a2ec",
-      "type": "library",
-      "name": "eventemitter3",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/eventemitter3@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/exit@0.1.2?package-id=a9a417838dcfa715",
-      "type": "library",
-      "name": "exit",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/exit@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/expand-template@1.1.1?package-id=89bdba38f3c32dee",
-      "type": "library",
-      "name": "expand-template",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:expand-template:expand-template:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/expand-template@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expand-template:expand_template:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expand_template:expand-template:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expand_template:expand_template:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expand:expand-template:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expand:expand_template:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/expect-ct@0.1.0?package-id=c99fc5654a5d25e4",
-      "type": "library",
-      "name": "expect-ct",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:expect-ct:expect-ct:0.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/expect-ct@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expect-ct:expect_ct:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expect_ct:expect-ct:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expect_ct:expect_ct:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expect:expect-ct:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:expect:expect_ct:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/express@4.16.4?package-id=6773eb88c4b4499e",
-      "type": "library",
-      "name": "express",
-      "version": "4.16.4",
-      "cpe": "cpe:2.3:a:openjsf:express:4.16.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/express@4.16.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/express-jwt@0.1.3?package-id=5a0b157e8af03bc4",
-      "type": "library",
-      "name": "express-jwt",
-      "version": "0.1.3",
-      "cpe": "cpe:2.3:a:auth0:express-jwt:0.1.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/express-jwt@0.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/extend@3.0.1?package-id=bce043606356e6ca",
-      "type": "library",
-      "name": "extend",
-      "version": "3.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:extend_project:extend:3.0.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/extend@3.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/extend@3.0.2?package-id=3c922b0d875d548b",
-      "type": "library",
-      "name": "extend",
-      "version": "3.0.2",
-      "cpe": "cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/extend@3.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=084eaf08acc1df22",
-      "type": "library",
-      "name": "extsprintf",
-      "version": "1.3.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:extsprintf:extsprintf:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/extsprintf@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/extsprintf@1.3.0?package-id=abc29fb98cd809a3",
-      "type": "library",
-      "name": "extsprintf",
-      "version": "1.3.0",
-      "cpe": "cpe:2.3:a:extsprintf:extsprintf:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/extsprintf@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/falafel@2.2.5?package-id=6d2cc930249898a1",
-      "type": "library",
-      "name": "falafel",
-      "version": "2.2.5",
-      "cpe": "cpe:2.3:a:falafel:falafel:2.2.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/falafel@2.2.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3?package-id=2dbec78421ccff33",
-      "type": "library",
-      "name": "fast-deep-equal",
-      "version": "3.1.3",
-      "cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fast-deep-equal@3.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-deep-equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_deep_equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_deep_equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast-deep-equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast_deep_equal:3.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0?package-id=ddb305f5c16abea7",
-      "type": "library",
-      "name": "fast-json-stable-stringify",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:fast-json-stable-stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-json-stable-stringify:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json_stable_stringify:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json_stable_stringify:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-json-stable:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-json-stable:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json_stable:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json_stable:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-json:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-json:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_json:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast-json-stable-stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast_json_stable_stringify:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6?package-id=b4afec3e2ba5cb2b",
-      "type": "library",
-      "name": "fast-levenshtein",
-      "version": "2.0.6",
-      "cpe": "cpe:2.3:a:fast-levenshtein:fast-levenshtein:2.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fast-levenshtein@2.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast-levenshtein:fast_levenshtein:2.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_levenshtein:fast-levenshtein:2.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast_levenshtein:fast_levenshtein:2.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast-levenshtein:2.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fast:fast_levenshtein:2.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fast.js@0.1.1?package-id=988a7eee73b3203c",
-      "type": "library",
-      "name": "fast.js",
-      "version": "0.1.1",
-      "cpe": "cpe:2.3:a:fast.js:fast.js:0.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fast.js@0.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/fastify/workflows@v5?package-id=a5de9107cf50fcf9#.github/workflows/plugins-ci-package-manager.yml",
-      "type": "library",
-      "name": "fastify/workflows/.github/workflows/plugins-ci-package-manager.yml",
-      "version": "v5",
-      "cpe": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*",
-      "purl": "pkg:github/fastify/workflows@v5#.github/workflows/plugins-ci-package-manager.yml",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-action-workflow-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action-workflow"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci-package-manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci_package_manager.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fast-uri/.github/workflows/package-manager-ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/fastify/workflows@v5?package-id=74774fbf21a4ea64#.github/workflows/plugins-ci.yml",
-      "type": "library",
-      "name": "fastify/workflows/.github/workflows/plugins-ci.yml",
-      "version": "v5",
-      "cpe": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci.yml:v5:*:*:*:*:*:*:*",
-      "purl": "pkg:github/fastify/workflows@v5#.github/workflows/plugins-ci.yml",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-action-workflow-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action-workflow"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci.yml:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins:fastify\\/workflows\\/.github\\/workflows\\/plugins-ci.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fastify\\/workflows\\/.github\\/workflows\\/plugins:fastify\\/workflows\\/.github\\/workflows\\/plugins_ci.yml:v5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/fast-uri/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/figures@1.7.0?package-id=3235c3f942b2e3c0",
-      "type": "library",
-      "name": "figures",
-      "version": "1.7.0",
-      "cpe": "cpe:2.3:a:figures:figures:1.7.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/figures@1.7.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/file-uri-to-path@1.0.0?package-id=241c2890544bc1f5",
-      "type": "library",
-      "name": "file-uri-to-path",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/file-uri-to-path@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/finalhandler@1.1.1?package-id=dbc558f3e0de92ee",
-      "type": "library",
-      "name": "finalhandler",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/finalhandler@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/find-up@1.1.2?package-id=47062451dce334ec",
-      "type": "library",
-      "name": "find-up",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:find-up:find-up:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/find-up@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:find-up:find_up:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:find_up:find-up:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:find_up:find_up:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:find:find-up:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:find:find_up:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/findup-sync@0.3.0?package-id=7e101fab0b7ee1ad",
-      "type": "library",
-      "name": "findup-sync",
-      "version": "0.3.0",
-      "cpe": "cpe:2.3:a:findup-sync:findup-sync:0.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/findup-sync@0.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:findup-sync:findup_sync:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:findup_sync:findup-sync:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:findup_sync:findup_sync:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:findup:findup-sync:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:findup:findup_sync:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fontkit@1.9.0?package-id=b4c460f21869ff5d",
-      "type": "library",
-      "name": "fontkit",
-      "version": "1.9.0",
-      "cpe": "cpe:2.3:a:fontkit:fontkit:1.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fontkit@1.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/for-each@0.3.5?package-id=7cefa1dfdd493ee9",
-      "type": "library",
-      "name": "for-each",
-      "version": "0.3.5",
-      "cpe": "cpe:2.3:a:for-each:for-each:0.3.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/for-each@0.3.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:for-each:for_each:0.3.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:for_each:for-each:0.3.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:for_each:for_each:0.3.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:for:for-each:0.3.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:for:for_each:0.3.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=ef463fc220299523",
-      "type": "library",
-      "name": "forever-agent",
-      "version": "0.6.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/forever-agent@0.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever-agent:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever_agent:forever-agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever_agent:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever:forever-agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/forever-agent@0.6.1?package-id=ae787489dab8c60a",
-      "type": "library",
-      "name": "forever-agent",
-      "version": "0.6.1",
-      "cpe": "cpe:2.3:a:forever-agent:forever-agent:0.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/forever-agent@0.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever-agent:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever_agent:forever-agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever_agent:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever:forever-agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:forever:forever_agent:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/form-data@2.1.4?package-id=daf631df3c13f245",
-      "type": "library",
-      "name": "form-data",
-      "version": "2.1.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:form-data:form-data:2.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/form-data@2.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form-data:form_data:2.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form_data:form-data:2.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form_data:form_data:2.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form:form-data:2.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form:form_data:2.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/form-data@2.3.3?package-id=06b5f4f526d624cd",
-      "type": "library",
-      "name": "form-data",
-      "version": "2.3.3",
-      "cpe": "cpe:2.3:a:form-data:form-data:2.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/form-data@2.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form-data:form_data:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form_data:form-data:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form_data:form_data:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form:form-data:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:form:form_data:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=ac9b773117048524",
-      "type": "library",
-      "name": "forwarded",
-      "version": "0.2.0",
-      "cpe": "cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/forwarded@0.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/frameguard@3.0.0?package-id=98d11a44c6be43a5",
-      "type": "library",
-      "name": "frameguard",
-      "version": "3.0.0",
-      "cpe": "cpe:2.3:a:frameguard:frameguard:3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/frameguard@3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fresh@0.5.2?package-id=bde0ed2e003ba5e6",
-      "type": "library",
-      "name": "fresh",
-      "version": "0.5.2",
-      "cpe": "cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/fresh@0.5.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=9d1e5ce2cccc2604",
-      "type": "library",
-      "name": "fs-constants",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fs-constants@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fs-extra@4.0.3?package-id=45766ed41c79ac0e",
-      "type": "library",
-      "name": "fs-extra",
-      "version": "4.0.3",
-      "cpe": "cpe:2.3:a:fs-extra:fs-extra:4.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fs-extra@4.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs-extra:fs_extra:4.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_extra:fs-extra:4.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_extra:fs_extra:4.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs-extra:4.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs_extra:4.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fs-minipass@1.2.7?package-id=755306890245170a",
-      "type": "library",
-      "name": "fs-minipass",
-      "version": "1.2.7",
-      "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fs-minipass@1.2.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs-minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs_minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs-minipass:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fs:fs_minipass:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=a1a39c9aea8d8e35",
-      "type": "library",
-      "name": "fs.realpath",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fs.realpath@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=308305c4ba846c33",
-      "type": "library",
-      "name": "fs.realpath",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fs.realpath@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fstream@1.0.11?package-id=f82882065a65b189",
-      "type": "library",
-      "name": "fstream",
-      "version": "1.0.11",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:fstream:fstream:1.0.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fstream@1.0.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fstream@1.0.12?package-id=0168d7711b4a0571",
-      "type": "library",
-      "name": "fstream",
-      "version": "1.0.12",
-      "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fstream@1.0.12",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/fstream-ignore@1.0.5?package-id=8e4af4bafa3e20ef",
-      "type": "library",
-      "name": "fstream-ignore",
-      "version": "1.0.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:fstream-ignore:fstream-ignore:1.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/fstream-ignore@1.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fstream-ignore:fstream_ignore:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fstream_ignore:fstream-ignore:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fstream_ignore:fstream_ignore:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fstream:fstream-ignore:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:fstream:fstream_ignore:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/function-bind@1.1.2?package-id=5d268fee414a8dd8",
-      "type": "library",
-      "name": "function-bind",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/function-bind@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/functions-have-names@1.2.3?package-id=5599f03bbb2e58a0",
-      "type": "library",
-      "name": "functions-have-names",
-      "version": "1.2.3",
-      "cpe": "cpe:2.3:a:functions-have-names:functions-have-names:1.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/functions-have-names@1.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions-have-names:functions_have_names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions_have_names:functions-have-names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions_have_names:functions_have_names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions-have:functions-have-names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions-have:functions_have_names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions_have:functions-have-names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions_have:functions_have_names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions:functions-have-names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:functions:functions_have_names:1.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/gauge@2.7.4?package-id=3c03a736e19b3677",
-      "type": "library",
-      "name": "gauge",
-      "version": "2.7.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/gauge@2.7.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/gauge@2.7.4?package-id=d28247d5d771b7f7",
-      "type": "library",
-      "name": "gauge",
-      "version": "2.7.4",
-      "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/gauge@2.7.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/generic-pool@3.5.0?package-id=7a3c77da4bf78a89",
-      "type": "library",
-      "name": "generic-pool",
-      "version": "3.5.0",
-      "cpe": "cpe:2.3:a:generic-pool:generic-pool:3.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/generic-pool@3.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:generic-pool:generic_pool:3.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:generic_pool:generic-pool:3.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:generic_pool:generic_pool:3.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:generic:generic-pool:3.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:generic:generic_pool:3.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/geojson-utils@1.1.0?package-id=6d2cf3c108a8a240",
-      "type": "library",
-      "name": "geojson-utils",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:geojson-utils:geojson-utils:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/geojson-utils@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:geojson-utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:geojson_utils:geojson-utils:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:geojson_utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:geojson:geojson-utils:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:geojson:geojson_utils:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/get-intrinsic@1.3.0?package-id=aea1aefa22e4a4a5",
-      "type": "library",
-      "name": "get-intrinsic",
-      "version": "1.3.0",
-      "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/get-intrinsic@1.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/get-proto@1.0.1?package-id=b0ccb10ac44a883d",
-      "type": "library",
-      "name": "get-proto",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/get-proto@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/get-stdin@4.0.1?package-id=975e23d40d8e6518",
-      "type": "library",
-      "name": "get-stdin",
-      "version": "4.0.1",
-      "cpe": "cpe:2.3:a:get-stdin:get-stdin:4.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/get-stdin@4.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get-stdin:get_stdin:4.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_stdin:get-stdin:4.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get_stdin:get_stdin:4.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get-stdin:4.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:get:get_stdin:4.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/getobject@0.1.0?package-id=f488d90c85862616",
-      "type": "library",
-      "name": "getobject",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:getobject_project:getobject:0.1.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/getobject@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/getpass@0.1.7?package-id=09e4dc27daccd35e",
-      "type": "library",
-      "name": "getpass",
-      "version": "0.1.7",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:getpass:getpass:0.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/getpass@0.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/getpass@0.1.7?package-id=3d157c7dc23ca00a",
-      "type": "library",
-      "name": "getpass",
-      "version": "0.1.7",
-      "cpe": "cpe:2.3:a:getpass:getpass:0.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/getpass@0.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/github-from-package@0.0.0?package-id=d7a164164ec2e6d4",
-      "type": "library",
-      "name": "github-from-package",
-      "version": "0.0.0",
-      "cpe": "cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/github-from-package@0.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v2?package-id=d3694a7f94cd162c#analyze",
-      "type": "library",
-      "name": "github/codeql-action/analyze",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v2#analyze",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@mapbox/node-pre-gyp/.github/workflows/codeql.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v3?package-id=6e46bc88f6d5e449#analyze",
-      "type": "library",
-      "name": "github/codeql-action/analyze",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v3#analyze",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/codeql-analysis.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v2?package-id=176cb73c1a942651#autobuild",
-      "type": "library",
-      "name": "github/codeql-action/autobuild",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v2#autobuild",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@mapbox/node-pre-gyp/.github/workflows/codeql.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v3?package-id=a5b67e3e072d1094#autobuild",
-      "type": "library",
-      "name": "github/codeql-action/autobuild",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v3#autobuild",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/codeql-analysis.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v2?package-id=450d365bc352f768#init",
-      "type": "library",
-      "name": "github/codeql-action/init",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v2#init",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/@mapbox/node-pre-gyp/.github/workflows/codeql.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/github/codeql-action@v3?package-id=e44f6bc7aabf3d57#init",
-      "type": "library",
-      "name": "github/codeql-action/init",
-      "version": "v3",
-      "cpe": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*",
-      "purl": "pkg:github/github/codeql-action@v3#init",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/codeql-analysis.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/glob@5.0.15?package-id=cb5ef2c913dbb4a0",
-      "type": "library",
-      "name": "glob",
-      "version": "5.0.15",
-      "cpe": "cpe:2.3:a:glob:glob:5.0.15:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/glob@5.0.15",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/glob@7.0.6?package-id=1a60458e146b9d05",
-      "type": "library",
-      "name": "glob",
-      "version": "7.0.6",
-      "cpe": "cpe:2.3:a:glob:glob:7.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/glob@7.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/glob@7.1.2?package-id=dbadb79e725114c2",
-      "type": "library",
-      "name": "glob",
-      "version": "7.1.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:glob:glob:7.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/glob@7.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/glob@7.2.3?package-id=e7c12b590416cf68",
-      "type": "library",
-      "name": "glob",
-      "version": "7.2.3",
-      "cpe": "cpe:2.3:a:glob:glob:7.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/glob@7.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/google-github-actions/release-please-action@v2?package-id=a63a08ed319622e1",
-      "type": "library",
-      "name": "google-github-actions/release-please-action",
-      "version": "v2",
-      "cpe": "cpe:2.3:a:google-github-actions\\/release-please-action:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*",
-      "purl": "pkg:github/google-github-actions/release-please-action@v2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github-actions\\/release-please-action:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release_please_action:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release_please_action:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github-actions\\/release-please:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github-actions\\/release-please:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release_please:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release_please:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github-actions\\/release:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github-actions\\/release:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github_actions\\/release:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google-github:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google_github:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google:google-github-actions\\/release-please-action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:google:google_github_actions\\/release_please_action:v2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/release-please.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/gopd@1.2.0?package-id=d512427666ba3461",
-      "type": "library",
-      "name": "gopd",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/gopd@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/graceful-fs@4.1.11?package-id=436eaebeb5907c23",
-      "type": "library",
-      "name": "graceful-fs",
-      "version": "4.1.11",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.1.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/graceful-fs@4.1.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful-fs:4.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful_fs:4.1.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=5c391a2177b0c32e",
-      "type": "library",
-      "name": "graceful-fs",
-      "version": "4.2.11",
-      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/graceful-fs@4.2.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/graceful-readlink@1.0.1?package-id=188f6c0761650e8d",
-      "type": "library",
-      "name": "graceful-readlink",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:graceful-readlink:graceful-readlink:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/graceful-readlink@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful-readlink:graceful_readlink:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_readlink:graceful-readlink:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful_readlink:graceful_readlink:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful-readlink:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:graceful:graceful_readlink:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt@1.0.4?package-id=1beb1c17e0cb7248",
-      "type": "library",
-      "name": "grunt",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:grunt:grunt:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-angular-templates@1.1.0?package-id=73f05054f5a7e885",
-      "type": "library",
-      "name": "grunt-angular-templates",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:grunt-angular-templates:grunt-angular-templates:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-angular-templates@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-angular-templates:grunt_angular_templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_angular_templates:grunt-angular-templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_angular_templates:grunt_angular_templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-angular:grunt-angular-templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-angular:grunt_angular_templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_angular:grunt-angular-templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_angular:grunt_angular_templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-angular-templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_angular_templates:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-cli@1.2.0?package-id=e1b5c8adbedfd5cb",
-      "type": "library",
-      "name": "grunt-cli",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:grunt-cli:grunt-cli:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-cli@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-cli:grunt_cli:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_cli:grunt-cli:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_cli:grunt_cli:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-cli:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_cli:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-contrib-clean@1.1.0?package-id=ca4f481227e74d88",
-      "type": "library",
-      "name": "grunt-contrib-clean",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:grunt-contrib-clean:grunt-contrib-clean:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-contrib-clean@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib-clean:grunt_contrib_clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_clean:grunt-contrib-clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_clean:grunt_contrib_clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-contrib-clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_contrib_clean:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-contrib-compress@1.4.3?package-id=d3dddde43ebfb047",
-      "type": "library",
-      "name": "grunt-contrib-compress",
-      "version": "1.4.3",
-      "cpe": "cpe:2.3:a:grunt-contrib-compress:grunt-contrib-compress:1.4.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-contrib-compress@1.4.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib-compress:grunt_contrib_compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_compress:grunt-contrib-compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_compress:grunt_contrib_compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-contrib-compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_contrib_compress:1.4.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-contrib-concat@1.0.1?package-id=d07a0bea8801f23f",
-      "type": "library",
-      "name": "grunt-contrib-concat",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:grunt-contrib-concat:grunt-contrib-concat:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-contrib-concat@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib-concat:grunt_contrib_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_concat:grunt-contrib-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_concat:grunt_contrib_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-contrib-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_contrib_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-contrib-uglify@3.2.1?package-id=98f55b3e178a3f69",
-      "type": "library",
-      "name": "grunt-contrib-uglify",
-      "version": "3.2.1",
-      "cpe": "cpe:2.3:a:grunt-contrib-uglify:grunt-contrib-uglify:3.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-contrib-uglify@3.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib-uglify:grunt_contrib_uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_uglify:grunt-contrib-uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib_uglify:grunt_contrib_uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-contrib-uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_contrib_uglify:3.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-known-options@1.1.1?package-id=299f86316e4708a9",
-      "type": "library",
-      "name": "grunt-known-options",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:grunt-known-options:grunt-known-options:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-known-options@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-known-options:grunt_known_options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_known_options:grunt-known-options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_known_options:grunt_known_options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-known:grunt-known-options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-known:grunt_known_options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_known:grunt-known-options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_known:grunt_known_options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-known-options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_known_options:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-legacy-log@2.0.0?package-id=a26e9c5e0274f7d4",
-      "type": "library",
-      "name": "grunt-legacy-log",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-legacy-log@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-legacy-log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_legacy_log:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-legacy-log-utils@2.0.1?package-id=5185bc2cd810b00b",
-      "type": "library",
-      "name": "grunt-legacy-log-utils",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:grunt-legacy-log-utils:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-legacy-log-utils@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy-log-utils:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-legacy-log-utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_legacy_log_utils:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/grunt-legacy-util@1.1.1?package-id=c858e5936a7a7f93",
-      "type": "library",
-      "name": "grunt-legacy-util",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:grunt-legacy-util:grunt-legacy-util:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/grunt-legacy-util@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy-util:grunt_legacy_util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_util:grunt-legacy-util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy_util:grunt_legacy_util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt-legacy-util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:grunt:grunt_legacy_util:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/gzip-size@1.0.0?package-id=dfd0592b684673a5",
-      "type": "library",
-      "name": "gzip-size",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:gzip-size:gzip-size:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/gzip-size@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:gzip-size:gzip_size:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:gzip_size:gzip-size:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:gzip_size:gzip_size:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:gzip:gzip-size:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:gzip:gzip_size:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/har-schema@1.0.5?package-id=a52a316d888e3bc2",
-      "type": "library",
-      "name": "har-schema",
-      "version": "1.0.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:har-schema:har-schema:1.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/har-schema@1.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har-schema:har_schema:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_schema:har-schema:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_schema:har_schema:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har-schema:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har_schema:1.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/har-schema@2.0.0?package-id=44dec69d09ce818e",
-      "type": "library",
-      "name": "har-schema",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:har-schema:har-schema:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/har-schema@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har-schema:har_schema:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_schema:har-schema:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_schema:har_schema:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har-schema:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har_schema:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/har-validator@4.2.1?package-id=d4b156d0fb340da9",
-      "type": "library",
-      "name": "har-validator",
-      "version": "4.2.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:har-validator:har-validator:4.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/har-validator@4.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har-validator:har_validator:4.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_validator:har-validator:4.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_validator:har_validator:4.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har-validator:4.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har_validator:4.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/har-validator@5.1.5?package-id=e57a52a2036ff6c7",
-      "type": "library",
-      "name": "har-validator",
-      "version": "5.1.5",
-      "cpe": "cpe:2.3:a:har-validator:har-validator:5.1.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/har-validator@5.1.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har-validator:har_validator:5.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_validator:har-validator:5.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har_validator:har_validator:5.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har-validator:5.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:har:har_validator:5.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has@1.0.4?package-id=c0ee881dc84f3b4f",
-      "type": "library",
-      "name": "has",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:has:has:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-ansi@2.0.0?package-id=5101969cd32102a0",
-      "type": "library",
-      "name": "has-ansi",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-ansi@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_ansi:has-ansi:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-ansi:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_ansi:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-bigints@1.1.0?package-id=5b0a45cc42433c65",
-      "type": "library",
-      "name": "has-bigints",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:has-bigints:has-bigints:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-bigints@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_bigints:has-bigints:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-bigints:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_bigints:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-binary2@1.0.3?package-id=a11952c82fff560d",
-      "type": "library",
-      "name": "has-binary2",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:has-binary2:has-binary2:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-binary2@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-binary2:has_binary2:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_binary2:has-binary2:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_binary2:has_binary2:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-binary2:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_binary2:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-cors@1.1.0?package-id=aafcf28baab5430b",
-      "type": "library",
-      "name": "has-cors",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:has-cors:has-cors:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-cors@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-cors:has_cors:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_cors:has-cors:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_cors:has_cors:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-cors:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_cors:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=25b21ff2ee619c53",
-      "type": "library",
-      "name": "has-flag",
-      "version": "3.0.0",
-      "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-flag@3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-property-descriptors@1.0.2?package-id=77103c75b4d043ad",
-      "type": "library",
-      "name": "has-property-descriptors",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:has-property-descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-property-descriptors@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-property-descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_property_descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_property_descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-symbols@1.1.0?package-id=24668f607a18c29d",
-      "type": "library",
-      "name": "has-symbols",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-symbols@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-tostringtag@1.0.2?package-id=f81d05db0b3c0805",
-      "type": "library",
-      "name": "has-tostringtag",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-tostringtag@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=d8fe290aaf4cf98e",
-      "type": "library",
-      "name": "has-unicode",
-      "version": "2.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-unicode@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=f5e01a3839ee8e0b",
-      "type": "library",
-      "name": "has-unicode",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/has-unicode@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hashids@1.1.4?package-id=0fa355e7b4939b3b",
-      "type": "library",
-      "name": "hashids",
-      "version": "1.1.4",
-      "cpe": "cpe:2.3:a:hashids:hashids:1.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hashids@1.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hasown@2.0.2?package-id=3a63ebc6c0f7cb61",
-      "type": "library",
-      "name": "hasown",
-      "version": "2.0.2",
-      "cpe": "cpe:2.3:a:hasown:hasown:2.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hasown@2.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hawk@3.1.3?package-id=f823968c16d6d929",
-      "type": "library",
-      "name": "hawk",
-      "version": "3.1.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:hawk:hawk:3.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hawk@3.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/he@0.4.1?package-id=aa951949e165a34a",
-      "type": "library",
-      "name": "he",
-      "version": "0.4.1",
-      "cpe": "cpe:2.3:a:he:he:0.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/he@0.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/he@1.1.1?package-id=f20c7b982f437e66",
-      "type": "library",
-      "name": "he",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:he:he:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/he@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/header-case@1.0.1?package-id=1e276c10060e888b",
-      "type": "library",
-      "name": "header-case",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:header-case:header-case:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/header-case@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:header-case:header_case:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:header_case:header-case:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:header_case:header_case:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:header:header-case:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:header:header_case:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/helmet@3.9.0?package-id=62d88a3700cf008b",
-      "type": "library",
-      "name": "helmet",
-      "version": "3.9.0",
-      "cpe": "cpe:2.3:a:helmet:helmet:3.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/helmet@3.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/helmet-csp@2.6.0?package-id=31caa3e05ace3213",
-      "type": "library",
-      "name": "helmet-csp",
-      "version": "2.6.0",
-      "cpe": "cpe:2.3:a:helmet-csp:helmet-csp:2.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/helmet-csp@2.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:helmet-csp:helmet_csp:2.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:helmet_csp:helmet-csp:2.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:helmet_csp:helmet_csp:2.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:helmet:helmet-csp:2.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:helmet:helmet_csp:2.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hide-powered-by@1.0.0?package-id=d0faf17b7ffcf5fe",
-      "type": "library",
-      "name": "hide-powered-by",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:hide-powered-by:hide-powered-by:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hide-powered-by@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide-powered-by:hide_powered_by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide_powered_by:hide-powered-by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide_powered_by:hide_powered_by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide-powered:hide-powered-by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide-powered:hide_powered_by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide_powered:hide-powered-by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide_powered:hide_powered_by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide:hide-powered-by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hide:hide_powered_by:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hoek@2.16.3?package-id=68908c555efcb824",
-      "type": "library",
-      "name": "hoek",
-      "version": "2.16.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:hoek:hoek:2.16.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hoek@2.16.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hooker@0.2.3?package-id=bf08b1de2afd39e4",
-      "type": "library",
-      "name": "hooker",
-      "version": "0.2.3",
-      "cpe": "cpe:2.3:a:hooker:hooker:0.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hooker@0.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hosted-git-info@2.8.9?package-id=a6697cbab844de13",
-      "type": "library",
-      "name": "hosted-git-info",
-      "version": "2.8.9",
-      "cpe": "cpe:2.3:a:hosted-git-info:hosted-git-info:2.8.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hosted-git-info@2.8.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted-git-info:hosted_git_info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted_git_info:hosted-git-info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted_git_info:hosted_git_info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted-git:hosted-git-info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted-git:hosted_git_info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted_git:hosted-git-info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted_git:hosted_git_info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted:hosted-git-info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:hosted:hosted_git_info:2.8.9:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hpkp@2.0.0?package-id=cadaf9770e389a12",
-      "type": "library",
-      "name": "hpkp",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:hpkp:hpkp:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hpkp@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/hsts@2.1.0?package-id=37a3763f817f6820",
-      "type": "library",
-      "name": "hsts",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:hsts:hsts:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/hsts@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/html-entities@1.2.1?package-id=3f5a1e69a87132ea",
-      "type": "library",
-      "name": "html-entities",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:html-entities:html-entities:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/html-entities@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html-entities:html_entities:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html_entities:html-entities:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html_entities:html_entities:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html:html-entities:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html:html_entities:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/html-minifier@2.1.7?package-id=f01594a0c71bd05f",
-      "type": "library",
-      "name": "html-minifier",
-      "version": "2.1.7",
-      "cpe": "cpe:2.3:a:html-minifier:html-minifier:2.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/html-minifier@2.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html-minifier:html_minifier:2.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html_minifier:html-minifier:2.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html_minifier:html_minifier:2.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html:html-minifier:2.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:html:html_minifier:2.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/htmlparser2@3.3.0?package-id=847daea13a87aad2",
-      "type": "library",
-      "name": "htmlparser2",
-      "version": "3.3.0",
-      "cpe": "cpe:2.3:a:htmlparser2:htmlparser2:3.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/htmlparser2@3.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/http-errors@1.6.3?package-id=325a19f22ea38cde",
-      "type": "library",
-      "name": "http-errors",
-      "version": "1.6.3",
-      "cpe": "cpe:2.3:a:http-errors:http-errors:1.6.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/http-errors@1.6.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:http-errors:http_errors:1.6.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:http_errors:http-errors:1.6.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:http_errors:http_errors:1.6.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:http:http-errors:1.6.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:http:http_errors:1.6.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/http-signature@1.1.1?package-id=e84dce616d1421aa",
-      "type": "library",
-      "name": "http-signature",
-      "version": "1.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:joyent:http-signature:1.1.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/http-signature@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/http-signature@1.2.0?package-id=d22a59eeb2460268",
-      "type": "library",
-      "name": "http-signature",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:joyent:http-signature:1.2.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/http-signature@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/iconv-lite@0.4.23?package-id=b2d8880fb77d563f",
-      "type": "library",
-      "name": "iconv-lite",
-      "version": "0.4.23",
-      "cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.23:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/iconv-lite@0.4.23",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.4.23:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.4.23:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.4.23:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:iconv:iconv-lite:0.4.23:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:iconv:iconv_lite:0.4.23:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=449ae819404beed3",
-      "type": "library",
-      "name": "ieee754",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ieee754@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ienoopen@1.0.0?package-id=4d61ba29a8e04fe2",
-      "type": "library",
-      "name": "ienoopen",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:ienoopen:ienoopen:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ienoopen@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ignore-walk@3.0.4?package-id=55f6c711dfc5984e",
-      "type": "library",
-      "name": "ignore-walk",
-      "version": "3.0.4",
-      "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ignore-walk@3.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ignore-walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ignore_walk:ignore-walk:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ignore_walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ignore:ignore-walk:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:ignore:ignore_walk:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/iltorb@1.3.10?package-id=9117c3b8c1dfdfee",
-      "type": "library",
-      "name": "iltorb",
-      "version": "1.3.10",
-      "cpe": "cpe:2.3:a:iltorb:iltorb:1.3.10:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/iltorb@1.3.10",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/indent-string@2.1.0?package-id=9e362eb5f8fe3854",
-      "type": "library",
-      "name": "indent-string",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:indent-string:indent-string:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/indent-string@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:indent-string:indent_string:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:indent_string:indent-string:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:indent_string:indent_string:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:indent:indent-string:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:indent:indent_string:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/indexof@0.0.1?package-id=2df650503ce81888",
-      "type": "library",
-      "name": "indexof",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:indexof:indexof:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/indexof@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inflection@1.12.0?package-id=7426add711f583e5",
-      "type": "library",
-      "name": "inflection",
-      "version": "1.12.0",
-      "cpe": "cpe:2.3:a:inflection:inflection:1.12.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inflection@1.12.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inflection@1.13.4?package-id=fa64636f22382642",
-      "type": "library",
-      "name": "inflection",
-      "version": "1.13.4",
-      "cpe": "cpe:2.3:a:inflection:inflection:1.13.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inflection@1.13.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inflight@1.0.6?package-id=fbce672ad502adc0",
-      "type": "library",
-      "name": "inflight",
-      "version": "1.0.6",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inflight@1.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inflight@1.0.6?package-id=f6460eea99c7db45",
-      "type": "library",
-      "name": "inflight",
-      "version": "1.0.6",
-      "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inflight@1.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inherits@2.0.3?package-id=a4f55ff8257093e8",
-      "type": "library",
-      "name": "inherits",
-      "version": "2.0.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inherits@2.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inherits@2.0.3?package-id=d431cae837cb8030",
-      "type": "library",
-      "name": "inherits",
-      "version": "2.0.3",
-      "cpe": "cpe:2.3:a:inherits:inherits:2.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inherits@2.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/inherits@2.0.4?package-id=d4f56e7124f5a31e",
-      "type": "library",
-      "name": "inherits",
-      "version": "2.0.4",
-      "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/inherits@2.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ini@1.3.4?package-id=db7db9c2350d6595",
-      "type": "library",
-      "name": "ini",
-      "version": "1.3.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:ini_project:ini:1.3.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ini@1.3.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ini@1.3.8?package-id=3652f885622957f3",
-      "type": "library",
-      "name": "ini",
-      "version": "1.3.8",
-      "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ini@1.3.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/internal-slot@1.1.0?package-id=88b27b7ceb8d6fc7",
-      "type": "library",
-      "name": "internal-slot",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:internal-slot:internal-slot:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/internal-slot@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:internal-slot:internal_slot:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:internal_slot:internal-slot:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:internal_slot:internal_slot:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:internal:internal-slot:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:internal:internal_slot:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/invariant@2.2.4?package-id=6a40d44347a86695",
-      "type": "library",
-      "name": "invariant",
-      "version": "2.2.4",
-      "cpe": "cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/invariant@2.2.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=e0e31e8c71268207",
-      "type": "library",
-      "name": "ipaddr.js",
-      "version": "1.9.1",
-      "cpe": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ipaddr.js@1.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-arguments@1.2.0?package-id=dec67fd7ab342629",
-      "type": "library",
-      "name": "is-arguments",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:is-arguments:is-arguments:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-arguments@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_arguments:is-arguments:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-arguments:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_arguments:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-array-buffer@3.0.5?package-id=9c3f51668fc3f8c6",
-      "type": "library",
-      "name": "is-array-buffer",
-      "version": "3.0.5",
-      "cpe": "cpe:2.3:a:is-array-buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-array-buffer@3.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-array-buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_array_buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_array_buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-arrayish@0.2.1?package-id=ae4cbeab9d3c52a6",
-      "type": "library",
-      "name": "is-arrayish",
-      "version": "0.2.1",
-      "cpe": "cpe:2.3:a:is-arrayish:is-arrayish:0.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-arrayish@0.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-arrayish:is_arrayish:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_arrayish:is-arrayish:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_arrayish:is_arrayish:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-arrayish:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_arrayish:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-bigint@1.1.0?package-id=761cb421ab769877",
-      "type": "library",
-      "name": "is-bigint",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:is-bigint:is-bigint:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-bigint@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-bigint:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_bigint:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-bluebird@1.0.2?package-id=1d893ba33ebb2d0b",
-      "type": "library",
-      "name": "is-bluebird",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:is-bluebird:is-bluebird:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-bluebird@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-bluebird:is_bluebird:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_bluebird:is-bluebird:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_bluebird:is_bluebird:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-bluebird:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_bluebird:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-boolean-object@1.2.2?package-id=da9364e3fe8e250d",
-      "type": "library",
-      "name": "is-boolean-object",
-      "version": "1.2.2",
-      "cpe": "cpe:2.3:a:is-boolean-object:is-boolean-object:1.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-boolean-object@1.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-boolean-object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_boolean_object:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_boolean_object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-buffer@1.1.6?package-id=052005ddded1f151",
-      "type": "library",
-      "name": "is-buffer",
-      "version": "1.1.6",
-      "cpe": "cpe:2.3:a:is-buffer:is-buffer:1.1.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-buffer@1.1.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-buffer:is_buffer:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_buffer:is-buffer:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_buffer:is_buffer:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-buffer:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_buffer:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-callable@1.2.7?package-id=44b7ec5100623b06",
-      "type": "library",
-      "name": "is-callable",
-      "version": "1.2.7",
-      "cpe": "cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-callable@1.2.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-callable:is_callable:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_callable:is-callable:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_callable:is_callable:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-callable:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_callable:1.2.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-core-module@2.16.1?package-id=99644fc660963283",
-      "type": "library",
-      "name": "is-core-module",
-      "version": "2.16.1",
-      "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.16.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-core-module@2.16.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-core-module:is_core_module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_core_module:is-core-module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_core_module:is_core_module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-core:is-core-module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-core:is_core_module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_core:is-core-module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_core:is_core_module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-core-module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_core_module:2.16.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-date-object@1.1.0?package-id=917f2086853303ff",
-      "type": "library",
-      "name": "is-date-object",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-date-object@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-date-object:is_date_object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_date_object:is-date-object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_date_object:is_date_object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-date:is-date-object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-date:is_date_object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_date:is-date-object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_date:is_date_object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-date-object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_date_object:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-finite@1.1.0?package-id=4550918a2c809b9d",
-      "type": "library",
-      "name": "is-finite",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:is-finite:is-finite:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-finite@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-finite:is_finite:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_finite:is-finite:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_finite:is_finite:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-finite:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_finite:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=96f533cb60ea1ebf",
-      "type": "library",
-      "name": "is-fullwidth-code-point",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=baa5e0c452e86865",
-      "type": "library",
-      "name": "is-fullwidth-code-point",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=d9e4c9d4e5143f01",
-      "type": "library",
-      "name": "is-fullwidth-code-point",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-lower-case@1.1.3?package-id=f89299546f1fda73",
-      "type": "library",
-      "name": "is-lower-case",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:is-lower-case:is-lower-case:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-lower-case@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-lower-case:is_lower_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_lower_case:is-lower-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_lower_case:is_lower_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-lower:is-lower-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-lower:is_lower_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_lower:is-lower-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_lower:is_lower_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-lower-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_lower_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-map@2.0.3?package-id=84fafbf817a204ae",
-      "type": "library",
-      "name": "is-map",
-      "version": "2.0.3",
-      "cpe": "cpe:2.3:a:is-map:is-map:2.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-map@2.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-map:is_map:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_map:is-map:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_map:is_map:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-map:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_map:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-number-object@1.1.1?package-id=34779a4a3b858d01",
-      "type": "library",
-      "name": "is-number-object",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:is-number-object:is-number-object:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-number-object@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-number-object:is_number_object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_number_object:is-number-object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_number_object:is_number_object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-number:is-number-object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-number:is_number_object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_number:is-number-object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_number:is_number_object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-number-object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_number_object:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-regex@1.2.1?package-id=30ccb429f220fb81",
-      "type": "library",
-      "name": "is-regex",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:is-regex:is-regex:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-regex@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-regex:is_regex:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_regex:is-regex:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_regex:is_regex:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-regex:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_regex:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-set@2.0.3?package-id=faada1b4a92f94bd",
-      "type": "library",
-      "name": "is-set",
-      "version": "2.0.3",
-      "cpe": "cpe:2.3:a:is-set:is-set:2.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-set@2.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-set:is_set:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_set:is-set:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_set:is_set:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-set:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_set:2.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4?package-id=d8d24ddf49c541c1",
-      "type": "library",
-      "name": "is-shared-array-buffer",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:is-shared-array-buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-shared-array-buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared_array_buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared_array_buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-shared-array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-shared-array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared_array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared_array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-string@1.1.1?package-id=b85ffbe7e3cccfca",
-      "type": "library",
-      "name": "is-string",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:is-string:is-string:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-string@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-string:is_string:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_string:is-string:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_string:is_string:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-string:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_string:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-symbol@1.1.1?package-id=fe4a124cfedb3091",
-      "type": "library",
-      "name": "is-symbol",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:is-symbol:is-symbol:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-symbol@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-symbol:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_symbol:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=14cb0ea20e81d58e",
-      "type": "library",
-      "name": "is-typedarray",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-typedarray@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-typedarray:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_typedarray:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-typedarray@1.0.0?package-id=850355b3d037a207",
-      "type": "library",
-      "name": "is-typedarray",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:is-typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-typedarray@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-typedarray:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_typedarray:is-typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_typedarray:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_typedarray:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-upper-case@1.1.2?package-id=c12500cf7930f1bb",
-      "type": "library",
-      "name": "is-upper-case",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:is-upper-case:is-upper-case:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-upper-case@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-upper-case:is_upper_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_upper_case:is-upper-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_upper_case:is_upper_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-upper:is-upper-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-upper:is_upper_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_upper:is-upper-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_upper:is_upper_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-upper-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_upper_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-utf8@0.2.1?package-id=53c47d8eea12cbc0",
-      "type": "library",
-      "name": "is-utf8",
-      "version": "0.2.1",
-      "cpe": "cpe:2.3:a:is-utf8:is-utf8:0.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-utf8@0.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-utf8:is_utf8:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_utf8:is-utf8:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_utf8:is_utf8:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-utf8:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_utf8:0.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-weakmap@2.0.2?package-id=68946b0eefc751d1",
-      "type": "library",
-      "name": "is-weakmap",
-      "version": "2.0.2",
-      "cpe": "cpe:2.3:a:is-weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-weakmap@2.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-weakmap:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_weakmap:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/is-weakset@2.0.4?package-id=0bb053c0946baf45",
-      "type": "library",
-      "name": "is-weakset",
-      "version": "2.0.4",
-      "cpe": "cpe:2.3:a:is-weakset:is-weakset:2.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/is-weakset@2.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is-weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is_weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is-weakset:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:is:is_weakset:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isarray@0.0.1?package-id=6c00661987e2d9a3",
-      "type": "library",
-      "name": "isarray",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isarray@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isarray@1.0.0?package-id=953acb4f4108c2da",
-      "type": "library",
-      "name": "isarray",
-      "version": "1.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isarray@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isarray@1.0.0?package-id=a16c0d7ecc02983c",
-      "type": "library",
-      "name": "isarray",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isarray@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isarray@2.0.1?package-id=66f811718c70eb0a",
-      "type": "library",
-      "name": "isarray",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:isarray:isarray:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isarray@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isarray@2.0.5?package-id=55043ee36afff97d",
-      "type": "library",
-      "name": "isarray",
-      "version": "2.0.5",
-      "cpe": "cpe:2.3:a:isarray:isarray:2.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isarray@2.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isexe@2.0.0?package-id=8ba83d54e5c9edc5",
-      "type": "library",
-      "name": "isexe",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isexe@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isstream@0.1.2?package-id=fad6be50d5121b31",
-      "type": "library",
-      "name": "isstream",
-      "version": "0.1.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isstream@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/isstream@0.1.2?package-id=c869e617eb2ac846",
-      "type": "library",
-      "name": "isstream",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:isstream:isstream:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/isstream@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jasmine@2.99.0?package-id=3b4ddb1c8ad22c5c",
-      "type": "library",
-      "name": "jasmine",
-      "version": "2.99.0",
-      "cpe": "cpe:2.3:a:jasmine:jasmine:2.99.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jasmine@2.99.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jasmine-core@2.99.1?package-id=dac33f354db721a6",
-      "type": "library",
-      "name": "jasmine-core",
-      "version": "2.99.1",
-      "cpe": "cpe:2.3:a:jasmine-core:jasmine-core:2.99.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jasmine-core@2.99.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:jasmine-core:jasmine_core:2.99.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:jasmine_core:jasmine-core:2.99.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:jasmine_core:jasmine_core:2.99.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:jasmine:jasmine-core:2.99.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:jasmine:jasmine_core:2.99.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/js-tokens@3.0.2?package-id=434795db7e1c3ae2",
-      "type": "library",
-      "name": "js-tokens",
-      "version": "3.0.2",
-      "cpe": "cpe:2.3:a:js-tokens:js-tokens:3.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/js-tokens@3.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js-tokens:js_tokens:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_tokens:js-tokens:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_tokens:js_tokens:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js-tokens:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js_tokens:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/js-yaml@3.10.0?package-id=44c6041e5b35e353",
-      "type": "library",
-      "name": "js-yaml",
-      "version": "3.10.0",
-      "cpe": "cpe:2.3:a:js-yaml:js-yaml:3.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/js-yaml@3.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js-yaml:js_yaml:3.10.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_yaml:js-yaml:3.10.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_yaml:js_yaml:3.10.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js-yaml:3.10.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js_yaml:3.10.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/js-yaml@3.13.1?package-id=0f84dc3819b9c24f",
-      "type": "library",
-      "name": "js-yaml",
-      "version": "3.13.1",
-      "cpe": "cpe:2.3:a:js-yaml:js-yaml:3.13.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/js-yaml@3.13.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js-yaml:js_yaml:3.13.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_yaml:js-yaml:3.13.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js_yaml:js_yaml:3.13.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js-yaml:3.13.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:js:js_yaml:3.13.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=8f991d733ca4fcdf",
-      "type": "library",
-      "name": "jsbn",
-      "version": "0.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:jsbn:jsbn:0.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsbn@0.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsbn@0.1.1?package-id=5bd026b2b0316a46",
-      "type": "library",
-      "name": "jsbn",
-      "version": "0.1.1",
-      "cpe": "cpe:2.3:a:jsbn:jsbn:0.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsbn@0.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-schema@0.2.3?package-id=46be80ebf5574638",
-      "type": "library",
-      "name": "json-schema",
-      "version": "0.2.3",
-      "cpe": "cpe:2.3:a:json-schema:json-schema:0.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-schema@0.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-schema:json_schema:0.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json-schema:0.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json_schema:0.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-schema:0.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_schema:0.2.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=dc39ff9bbac3e8c2",
-      "type": "library",
-      "name": "json-schema",
-      "version": "0.4.0",
-      "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-schema@0.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-schema:json_schema:0.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json-schema:0.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json_schema:0.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-schema:0.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_schema:0.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1?package-id=d26a775fbd1e01d1",
-      "type": "library",
-      "name": "json-schema-traverse",
-      "version": "0.4.1",
-      "cpe": "cpe:2.3:a:json-schema-traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-schema-traverse@0.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-schema-traverse:json_schema_traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema_traverse:json-schema-traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema_traverse:json_schema_traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-schema:json-schema-traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-schema:json_schema_traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json-schema-traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_schema:json_schema_traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-schema-traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_schema_traverse:0.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-stable-stringify@1.0.1?package-id=4c208f80d9611c26",
-      "type": "library",
-      "name": "json-stable-stringify",
-      "version": "1.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:json-stable-stringify:json-stable-stringify:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-stable-stringify@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stable-stringify:json_stable_stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stable_stringify:json-stable-stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stable_stringify:json_stable_stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stable:json-stable-stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stable:json_stable_stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stable:json-stable-stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stable:json_stable_stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-stable-stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_stable_stringify:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=7dbb62c18dec2450",
-      "type": "library",
-      "name": "json-stringify-safe",
-      "version": "5.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-stringify-safe@5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify-safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify_safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify_safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1?package-id=ab9ba12e036ca872",
-      "type": "library",
-      "name": "json-stringify-safe",
-      "version": "5.0.1",
-      "cpe": "cpe:2.3:a:json-stringify-safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/json-stringify-safe@5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify-safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify_safe:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify_safe:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json-stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json_stringify:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json-stringify-safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:json:json_stringify_safe:5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/json5@0.4.0?package-id=ffd41bd8ac935f31",
-      "type": "library",
-      "name": "json5",
-      "version": "0.4.0",
-      "cpe": "cpe:2.3:a:json5:json5:0.4.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/json5@0.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsonfile@4.0.0?package-id=b62cadf469ea0037",
-      "type": "library",
-      "name": "jsonfile",
-      "version": "4.0.0",
-      "cpe": "cpe:2.3:a:jsonfile:jsonfile:4.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsonfile@4.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsonify@0.0.0?package-id=5bd5ae1411ac1896",
-      "type": "library",
-      "name": "jsonify",
-      "version": "0.0.0",
-      "licenses": [
-        {
-          "license": {
-            "name": "Public Domain"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:jsonify:jsonify:0.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsonify@0.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsonwebtoken@0.1.0?package-id=eae167a21bf474df",
-      "type": "library",
-      "name": "jsonwebtoken",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:auth0:jsonwebtoken:0.1.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/jsonwebtoken@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsonwebtoken@8.5.1?package-id=7e63e72c1325d540",
-      "type": "library",
-      "name": "jsonwebtoken",
-      "version": "8.5.1",
-      "cpe": "cpe:2.3:a:auth0:jsonwebtoken:8.5.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/jsonwebtoken@8.5.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsprim@1.4.1?package-id=7113b0b630a44cbc",
-      "type": "library",
-      "name": "jsprim",
-      "version": "1.4.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:jsprim:jsprim:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsprim@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jsprim@1.4.2?package-id=2c19490cc3bcdd15",
-      "type": "library",
-      "name": "jsprim",
-      "version": "1.4.2",
-      "cpe": "cpe:2.3:a:jsprim:jsprim:1.4.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jsprim@1.4.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jssha@2.3.1?package-id=15dfffd373b646e0",
-      "type": "library",
-      "name": "jssha",
-      "version": "2.3.1",
-      "cpe": "cpe:2.3:a:jssha:jssha:2.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jssha@2.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/juice-shop@6.2.0-SNAPSHOT?package-id=83413318c180b411",
-      "type": "library",
-      "name": "juice-shop",
-      "version": "6.2.0-SNAPSHOT",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:juice-shop:juice-shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/juice-shop@6.2.0-SNAPSHOT",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:juice-shop:juice_shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:juice_shop:juice-shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:juice_shop:juice_shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:juice:juice-shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:juice:juice_shop:6.2.0-SNAPSHOT:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jwa@0.0.1?package-id=b59ba68ef8bc97b7",
-      "type": "library",
-      "name": "jwa",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:jwa:jwa:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jwa@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jwa@1.4.1?package-id=bf2d8fd3cd9d0092",
-      "type": "library",
-      "name": "jwa",
-      "version": "1.4.1",
-      "cpe": "cpe:2.3:a:jwa:jwa:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jwa@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jws@0.2.6?package-id=2ea102b47b054cd3",
-      "type": "library",
-      "name": "jws",
-      "version": "0.2.6",
-      "cpe": "cpe:2.3:a:jws:jws:0.2.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jws@0.2.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/jws@3.2.2?package-id=b6aa7b7c8b47ceef",
-      "type": "library",
-      "name": "jws",
-      "version": "3.2.2",
-      "cpe": "cpe:2.3:a:jws:jws:3.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/jws@3.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/kind-of@3.2.2?package-id=32a04a1c5ec7f15a",
-      "type": "library",
-      "name": "kind-of",
-      "version": "3.2.2",
-      "cpe": "cpe:2.3:a:kind-of:kind-of:3.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/kind-of@3.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:kind-of:kind_of:3.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:kind_of:kind-of:3.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:kind_of:kind_of:3.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:kind:kind-of:3.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:kind:kind_of:3.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lazy-cache@1.0.4?package-id=6c0e824151c2a3b3",
-      "type": "library",
-      "name": "lazy-cache",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:lazy-cache:lazy-cache:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lazy-cache@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lazy-cache:lazy_cache:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lazy_cache:lazy-cache:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lazy_cache:lazy_cache:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lazy:lazy-cache:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lazy:lazy_cache:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lazystream@1.0.1?package-id=b0cf9dab9f147600",
-      "type": "library",
-      "name": "lazystream",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lazystream@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/levn@0.3.0?package-id=3458e4c7c96032a8",
-      "type": "library",
-      "name": "levn",
-      "version": "0.3.0",
-      "cpe": "cpe:2.3:a:levn:levn:0.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/levn@0.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/libxmljs@0.18.8?package-id=60ead5ee48ca22d7",
-      "type": "library",
-      "name": "libxmljs",
-      "version": "0.18.8",
-      "cpe": "cpe:2.3:a:libxmljs:libxmljs:0.18.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/libxmljs@0.18.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/linebreak@0.3.0?package-id=6c8a2fa97e8f3586",
-      "type": "library",
-      "name": "linebreak",
-      "version": "0.3.0",
-      "cpe": "cpe:2.3:a:linebreak:linebreak:0.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/linebreak@0.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/load-json-file@1.1.0?package-id=5ebca4f27f9de701",
-      "type": "library",
-      "name": "load-json-file",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:load-json-file:load-json-file:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/load-json-file@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load-json-file:load_json_file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load_json_file:load-json-file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load_json_file:load_json_file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load-json:load-json-file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load-json:load_json_file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load_json:load-json-file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load_json:load_json_file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load:load-json-file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:load:load_json_file:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash@2.4.2?package-id=25b07e8dbc23d376",
-      "type": "library",
-      "name": "lodash",
-      "version": "2.4.2",
-      "cpe": "cpe:2.3:a:lodash:lodash:2.4.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/lodash@2.4.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash@4.17.21?package-id=8ae150d701ef53dc",
-      "type": "library",
-      "name": "lodash",
-      "version": "4.17.21",
-      "cpe": "cpe:2.3:a:lodash:lodash:4.17.21:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/lodash@4.17.21",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.includes@4.3.0?package-id=9c248cfcffc51c9f",
-      "type": "library",
-      "name": "lodash.includes",
-      "version": "4.3.0",
-      "cpe": "cpe:2.3:a:lodash.includes:lodash.includes:4.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.includes@4.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.isboolean@3.0.3?package-id=c7215cebde51628c",
-      "type": "library",
-      "name": "lodash.isboolean",
-      "version": "3.0.3",
-      "cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.isboolean@3.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.isinteger@4.0.4?package-id=713485e5b68b1065",
-      "type": "library",
-      "name": "lodash.isinteger",
-      "version": "4.0.4",
-      "cpe": "cpe:2.3:a:lodash.isinteger:lodash.isinteger:4.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.isinteger@4.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.isnumber@3.0.3?package-id=dbfba263b4928d85",
-      "type": "library",
-      "name": "lodash.isnumber",
-      "version": "3.0.3",
-      "cpe": "cpe:2.3:a:lodash.isnumber:lodash.isnumber:3.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.isnumber@3.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6?package-id=fac372858f94e911",
-      "type": "library",
-      "name": "lodash.isplainobject",
-      "version": "4.0.6",
-      "cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.isstring@4.0.1?package-id=61b4cddb7363b218",
-      "type": "library",
-      "name": "lodash.isstring",
-      "version": "4.0.1",
-      "cpe": "cpe:2.3:a:lodash.isstring:lodash.isstring:4.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.isstring@4.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.once@4.1.1?package-id=db0b9eaa6f242932",
-      "type": "library",
-      "name": "lodash.once",
-      "version": "4.1.1",
-      "cpe": "cpe:2.3:a:lodash.once:lodash.once:4.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.once@4.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lodash.reduce@4.6.0?package-id=e8c03b44d1bf7915",
-      "type": "library",
-      "name": "lodash.reduce",
-      "version": "4.6.0",
-      "cpe": "cpe:2.3:a:lodash.reduce:lodash.reduce:4.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lodash.reduce@4.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/longest@1.0.1?package-id=969ecee017dcfa68",
-      "type": "library",
-      "name": "longest",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:longest:longest:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/longest@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=8d5467f444ffd3e7",
-      "type": "library",
-      "name": "loose-envify",
-      "version": "1.4.0",
-      "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/loose-envify@1.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/loud-rejection@1.6.0?package-id=28c4954b11eedd85",
-      "type": "library",
-      "name": "loud-rejection",
-      "version": "1.6.0",
-      "cpe": "cpe:2.3:a:loud-rejection:loud-rejection:1.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/loud-rejection@1.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loud-rejection:loud_rejection:1.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loud_rejection:loud-rejection:1.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loud_rejection:loud_rejection:1.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loud:loud-rejection:1.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:loud:loud_rejection:1.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lower-case@1.1.4?package-id=04a1f6ea0e4e33c8",
-      "type": "library",
-      "name": "lower-case",
-      "version": "1.1.4",
-      "cpe": "cpe:2.3:a:lower-case:lower-case:1.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lower-case@1.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower-case:lower_case:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case:lower-case:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case:lower_case:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower:lower-case:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower:lower_case:1.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lower-case-first@1.0.2?package-id=ef5953e3200c6d63",
-      "type": "library",
-      "name": "lower-case-first",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:lower-case-first:lower-case-first:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lower-case-first@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower-case-first:lower_case_first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case_first:lower-case-first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case_first:lower_case_first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower-case:lower-case-first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower-case:lower_case_first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case:lower-case-first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower_case:lower_case_first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower:lower-case-first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lower:lower_case_first:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/lru-cache@2.7.3?package-id=da69cf426bace5c5",
-      "type": "library",
-      "name": "lru-cache",
-      "version": "2.7.3",
-      "cpe": "cpe:2.3:a:lru-cache:lru-cache:2.7.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/lru-cache@2.7.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lru-cache:lru_cache:2.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lru_cache:lru-cache:2.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lru_cache:lru_cache:2.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lru:lru-cache:2.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:lru:lru_cache:2.7.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/magic-string@0.22.5?package-id=a7e325131bf03963",
-      "type": "library",
-      "name": "magic-string",
-      "version": "0.22.5",
-      "cpe": "cpe:2.3:a:magic-string:magic-string:0.22.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/magic-string@0.22.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:magic-string:magic_string:0.22.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:magic_string:magic-string:0.22.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:magic_string:magic_string:0.22.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:magic:magic-string:0.22.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:magic:magic_string:0.22.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/map-obj@1.0.1?package-id=51129ce38e916f4c",
-      "type": "library",
-      "name": "map-obj",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:map-obj:map-obj:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/map-obj@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:map-obj:map_obj:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:map_obj:map-obj:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:map_obj:map_obj:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:map:map-obj:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:map:map_obj:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/marsdb@0.6.11?package-id=b84623c6f329624e",
-      "type": "library",
-      "name": "marsdb",
-      "version": "0.6.11",
-      "cpe": "cpe:2.3:a:marsdb:marsdb:0.6.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/marsdb@0.6.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/math-intrinsics@1.1.0?package-id=9e7b3f2dc6d407d8",
-      "type": "library",
-      "name": "math-intrinsics",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/math-intrinsics@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/maxmin@1.1.0?package-id=c342e576fe720b62",
-      "type": "library",
-      "name": "maxmin",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:maxmin:maxmin:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/maxmin@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=039bd719785f97ac",
-      "type": "library",
-      "name": "media-typer",
-      "version": "0.3.0",
-      "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/media-typer@0.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/meow@3.7.0?package-id=7fa88a0f3bc407fb",
-      "type": "library",
-      "name": "meow",
-      "version": "3.7.0",
-      "cpe": "cpe:2.3:a:meow:meow:3.7.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/meow@3.7.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/merge-descriptors@1.0.1?package-id=bf5105ee48004816",
-      "type": "library",
-      "name": "merge-descriptors",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/merge-descriptors@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge:merge-descriptors:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge:merge_descriptors:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/merge-source-map@1.0.4?package-id=596cef55a7cac08a",
-      "type": "library",
-      "name": "merge-source-map",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:merge-source-map:merge-source-map:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/merge-source-map@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge-source-map:merge_source_map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_source_map:merge-source-map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_source_map:merge_source_map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge-source:merge-source-map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge-source:merge_source_map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_source:merge-source-map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge_source:merge_source_map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge:merge-source-map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:merge:merge_source_map:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/methods@1.1.2?package-id=9877666492043fd6",
-      "type": "library",
-      "name": "methods",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/methods@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mime@1.4.1?package-id=ea82cfadfa6e9037",
-      "type": "library",
-      "name": "mime",
-      "version": "1.4.1",
-      "cpe": "cpe:2.3:a:mime_project:mime:1.4.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/mime@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mime-db@1.30.0?package-id=7876d041cbdb1d3a",
-      "type": "library",
-      "name": "mime-db",
-      "version": "1.30.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:mime-db:mime-db:1.30.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mime-db@1.30.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime-db:mime_db:1.30.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_db:mime-db:1.30.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_db:mime_db:1.30.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime-db:1.30.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime_db:1.30.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=98361044f9399cfd",
-      "type": "library",
-      "name": "mime-db",
-      "version": "1.52.0",
-      "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mime-db@1.52.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mime-types@2.1.17?package-id=2de5aea2ed0e61a4",
-      "type": "library",
-      "name": "mime-types",
-      "version": "2.1.17",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.17:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mime-types@2.1.17",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime-types:mime_types:2.1.17:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_types:mime-types:2.1.17:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_types:mime_types:2.1.17:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime-types:2.1.17:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime_types:2.1.17:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=7b441e2c8ff1bbf3",
-      "type": "library",
-      "name": "mime-types",
-      "version": "2.1.35",
-      "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mime-types@2.1.35",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mimic-response@1.0.1?package-id=5a69cc8c8eb5bfad",
-      "type": "library",
-      "name": "mimic-response",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mimic-response@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mimic-response:mimic_response:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mimic_response:mimic-response:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mimic_response:mimic_response:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mimic:mimic-response:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:mimic:mimic_response:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimatch@0.2.14?package-id=a7ab5d8256e01772",
-      "type": "library",
-      "name": "minimatch",
-      "version": "0.2.14",
-      "cpe": "cpe:2.3:a:minimatch_project:minimatch:0.2.14:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/minimatch@0.2.14",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimatch@3.0.4?package-id=775b1759c70a9172",
-      "type": "library",
-      "name": "minimatch",
-      "version": "3.0.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.0.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/minimatch@3.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimatch@3.0.8?package-id=13e52f5aba3529d9",
-      "type": "library",
-      "name": "minimatch",
-      "version": "3.0.8",
-      "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.0.8:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/minimatch@3.0.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimatch@3.1.2?package-id=172399310a022754",
-      "type": "library",
-      "name": "minimatch",
-      "version": "3.1.2",
-      "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/minimatch@3.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimist@0.0.8?package-id=cee1f4a6e641e21b",
-      "type": "library",
-      "name": "minimist",
-      "version": "0.0.8",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:minimist:minimist:0.0.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/minimist@0.0.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimist@1.2.0?package-id=5e19bea0c118a2bb",
-      "type": "library",
-      "name": "minimist",
-      "version": "1.2.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:minimist:minimist:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/minimist@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minimist@1.2.8?package-id=1241e01ddc177a67",
-      "type": "library",
-      "name": "minimist",
-      "version": "1.2.8",
-      "cpe": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/minimist@1.2.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minipass@2.9.0?package-id=a40ac7090330a89b",
-      "type": "library",
-      "name": "minipass",
-      "version": "2.9.0",
-      "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/minipass@2.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/minizlib@1.3.3?package-id=1da556a6cb9f8976",
-      "type": "library",
-      "name": "minizlib",
-      "version": "1.3.3",
-      "cpe": "cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/minizlib@1.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mkdirp@0.5.1?package-id=be937e75b4db20ed",
-      "type": "library",
-      "name": "mkdirp",
-      "version": "0.5.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:mkdirp:mkdirp:0.5.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mkdirp@0.5.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=549ad6f80af41d01",
-      "type": "library",
-      "name": "mkdirp",
-      "version": "0.5.6",
-      "cpe": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/mkdirp@0.5.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/moment@2.0.0?package-id=5f2c1655c9afeaa4",
-      "type": "library",
-      "name": "moment",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:momentjs:moment:2.0.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/moment@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/moment@2.30.1?package-id=aa3a5a6b45acb2a1",
-      "type": "library",
-      "name": "moment",
-      "version": "2.30.1",
-      "cpe": "cpe:2.3:a:momentjs:moment:2.30.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/moment@2.30.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/moment-timezone@0.5.48?package-id=d8a4744d1a104b56",
-      "type": "library",
-      "name": "moment-timezone",
-      "version": "0.5.48",
-      "cpe": "cpe:2.3:a:moment-timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/moment-timezone@0.5.48",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:moment-timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:moment_timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:moment_timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:moment:moment-timezone:0.5.48:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:moment:moment_timezone:0.5.48:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/morgan@1.9.1?package-id=131d3a66a140b0d4",
-      "type": "library",
-      "name": "morgan",
-      "version": "1.9.1",
-      "cpe": "cpe:2.3:a:morgan_project:morgan:1.9.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/morgan@1.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ms@2.0.0?package-id=eae04043381fe287",
-      "type": "library",
-      "name": "ms",
-      "version": "2.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ms@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ms@2.0.0?package-id=0d27cec2fb810941",
-      "type": "library",
-      "name": "ms",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ms@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ms@2.1.3?package-id=1bcbb64797010233",
-      "type": "library",
-      "name": "ms",
-      "version": "2.1.3",
-      "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ms@2.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/multer@1.3.1?package-id=c2f0dd48c3c15d0f",
-      "type": "library",
-      "name": "multer",
-      "version": "1.3.1",
-      "cpe": "cpe:2.3:a:multer:multer:1.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/multer@1.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nan@2.10.0?package-id=6a5a4e1b22f3cb75",
-      "type": "library",
-      "name": "nan",
-      "version": "2.10.0",
-      "cpe": "cpe:2.3:a:nan:nan:2.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nan@2.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nan@2.22.2?package-id=0ae0d29d9918954c",
-      "type": "library",
-      "name": "nan",
-      "version": "2.22.2",
-      "cpe": "cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nan@2.22.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nan@2.7.0?package-id=47e960e5fb7f32f8",
-      "type": "library",
-      "name": "nan",
-      "version": "2.7.0",
-      "cpe": "cpe:2.3:a:nan:nan:2.7.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nan@2.7.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ncname@1.0.0?package-id=f2342bc4947c3af8",
-      "type": "library",
-      "name": "ncname",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:ncname:ncname:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ncname@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/needle@2.9.1?package-id=524a0d7656ef6230",
-      "type": "library",
-      "name": "needle",
-      "version": "2.9.1",
-      "cpe": "cpe:2.3:a:needle:needle:2.9.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/needle@2.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=65bc7382293bc79c",
-      "type": "library",
-      "name": "negotiator",
-      "version": "0.6.3",
-      "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/negotiator@0.6.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/nick-invision/retry@v3.0.0?package-id=58d664cac6459bc5",
-      "type": "library",
-      "name": "nick-invision/retry",
-      "version": "v3.0.0",
-      "cpe": "cpe:2.3:a:nick-invision\\/retry:nick-invision\\/retry:v3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/nick-invision/retry@v3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:nick-invision\\/retry:nick_invision\\/retry:v3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:nick_invision\\/retry:nick-invision\\/retry:v3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:nick_invision\\/retry:nick_invision\\/retry:v3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:nick:nick-invision\\/retry:v3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:nick:nick_invision\\/retry:v3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/ci.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/no-case@2.3.2?package-id=38be1df522b9e996",
-      "type": "library",
-      "name": "no-case",
-      "version": "2.3.2",
-      "cpe": "cpe:2.3:a:no-case_project:no-case:2.3.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/no-case@2.3.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nocache@2.0.0?package-id=6b6e18c027b18c78",
-      "type": "library",
-      "name": "nocache",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:nocache:nocache:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nocache@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/node-abi@2.30.1?package-id=28eb1bd0dee5b190",
-      "type": "library",
-      "name": "node-abi",
-      "version": "2.30.1",
-      "cpe": "cpe:2.3:a:node-abi:node-abi:2.30.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/node-abi@2.30.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-abi:node_abi:2.30.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_abi:node-abi:2.30.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_abi:node_abi:2.30.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node-abi:2.30.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node_abi:2.30.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/node-gyp@3.8.0?package-id=f797ebf11c8c94f1",
-      "type": "library",
-      "name": "node-gyp",
-      "version": "3.8.0",
-      "cpe": "cpe:2.3:a:node-gyp:node-gyp:3.8.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/node-gyp@3.8.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-gyp:node_gyp:3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_gyp:node-gyp:3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_gyp:node_gyp:3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node-gyp:3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node_gyp:3.8.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/node-pre-gyp@0.6.38?package-id=c3d347c3e4e47661",
-      "type": "library",
-      "name": "node-pre-gyp",
-      "version": "0.6.38",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.6.38:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/node-pre-gyp@0.6.38",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre:node-pre-gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre:node_pre_gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre:node-pre-gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre:node_pre_gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node-pre-gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node_pre_gyp:0.6.38:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/node-pre-gyp@0.9.1?package-id=dd4382e7ff42d90d",
-      "type": "library",
-      "name": "node-pre-gyp",
-      "version": "0.9.1",
-      "cpe": "cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.9.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/node-pre-gyp@0.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre:node-pre-gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node-pre:node_pre_gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre:node-pre-gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node_pre:node_pre_gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node-pre-gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:node:node_pre_gyp:0.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nomnom@1.6.2?package-id=d1c71d2b37926597",
-      "type": "library",
-      "name": "nomnom",
-      "version": "1.6.2",
-      "cpe": "cpe:2.3:a:nomnom:nomnom:1.6.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nomnom@1.6.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/noop-logger@0.1.1?package-id=090a9db64a2ed899",
-      "type": "library",
-      "name": "noop-logger",
-      "version": "0.1.1",
-      "cpe": "cpe:2.3:a:noop-logger:noop-logger:0.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/noop-logger@0.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:noop-logger:noop_logger:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:noop_logger:noop-logger:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:noop_logger:noop_logger:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:noop:noop-logger:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:noop:noop_logger:0.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nopt@3.0.6?package-id=6c5c4c6a6a5ae2c0",
-      "type": "library",
-      "name": "nopt",
-      "version": "3.0.6",
-      "cpe": "cpe:2.3:a:nopt:nopt:3.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nopt@3.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nopt@4.0.1?package-id=0c60b3f45096aadf",
-      "type": "library",
-      "name": "nopt",
-      "version": "4.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:nopt:nopt:4.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nopt@4.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/nopt@4.0.3?package-id=ca5c015c9bdfec9c",
-      "type": "library",
-      "name": "nopt",
-      "version": "4.0.3",
-      "cpe": "cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/nopt@4.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/normalize-package-data@2.5.0?package-id=1f9fa850eef8b80f",
-      "type": "library",
-      "name": "normalize-package-data",
-      "version": "2.5.0",
-      "cpe": "cpe:2.3:a:normalize-package-data:normalize-package-data:2.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/normalize-package-data@2.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize-package-data:normalize_package_data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_package_data:normalize-package-data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_package_data:normalize_package_data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize-package:normalize-package-data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize-package:normalize_package_data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_package:normalize-package-data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_package:normalize_package_data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize:normalize-package-data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize:normalize_package_data:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/normalize-path@2.1.1?package-id=0e782c7e94710e6b",
-      "type": "library",
-      "name": "normalize-path",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:normalize-path:normalize-path:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/normalize-path@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize-path:normalize_path:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_path:normalize-path:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize_path:normalize_path:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize:normalize-path:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:normalize:normalize_path:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=4cd7780fc912b332",
-      "type": "library",
-      "name": "npm-bundled",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/npm-bundled@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=226f71f48951703a",
-      "type": "library",
-      "name": "npm-normalize-package-bin",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/npm-normalize-package-bin@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=eb04e39a3e5e637f",
-      "type": "library",
-      "name": "npm-packlist",
-      "version": "1.4.8",
-      "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/npm-packlist@1.4.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm-packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm_packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm-packlist:1.4.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:npm:npm_packlist:1.4.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=327f55e9e8618d33",
-      "type": "library",
-      "name": "npmlog",
-      "version": "4.1.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/npmlog@4.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=5bea3fb2bc07ada9",
-      "type": "library",
-      "name": "npmlog",
-      "version": "4.1.2",
-      "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/npmlog@4.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=b87d7c3255867183",
-      "type": "library",
-      "name": "number-is-nan",
-      "version": "1.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/number-is-nan@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=5de5119ad009fedb",
-      "type": "library",
-      "name": "number-is-nan",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/number-is-nan@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/oauth-sign@0.8.2?package-id=f0ac570004644397",
-      "type": "library",
-      "name": "oauth-sign",
-      "version": "0.8.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.8.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/oauth-sign@0.8.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth-sign:oauth_sign:0.8.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth_sign:oauth-sign:0.8.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth_sign:oauth_sign:0.8.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth:oauth-sign:0.8.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth:oauth_sign:0.8.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/oauth-sign@0.9.0?package-id=39f47edd9f0f5242",
-      "type": "library",
-      "name": "oauth-sign",
-      "version": "0.9.0",
-      "cpe": "cpe:2.3:a:oauth-sign:oauth-sign:0.9.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/oauth-sign@0.9.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth-sign:oauth_sign:0.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth_sign:oauth-sign:0.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth_sign:oauth_sign:0.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth:oauth-sign:0.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:oauth:oauth_sign:0.9.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-assign@3.0.0?package-id=9b6b9c8eaaa4dc69",
-      "type": "library",
-      "name": "object-assign",
-      "version": "3.0.0",
-      "cpe": "cpe:2.3:a:object-assign:object-assign:3.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-assign@3.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-assign:object_assign:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object-assign:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object_assign:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-assign:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_assign:3.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=8b593a0e888a752d",
-      "type": "library",
-      "name": "object-assign",
-      "version": "4.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-assign@4.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=2565b964369be903",
-      "type": "library",
-      "name": "object-assign",
-      "version": "4.1.1",
-      "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-assign@4.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-component@0.0.3?package-id=78382e23ca453165",
-      "type": "library",
-      "name": "object-component",
-      "version": "0.0.3",
-      "cpe": "cpe:2.3:a:object-component:object-component:0.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-component@0.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-component:object_component:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_component:object-component:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_component:object_component:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-component:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_component:0.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-inspect@1.13.4?package-id=1ee83ea0c67e0b80",
-      "type": "library",
-      "name": "object-inspect",
-      "version": "1.13.4",
-      "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-inspect@1.13.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-inspect@1.4.1?package-id=cf32533361b6c40b",
-      "type": "library",
-      "name": "object-inspect",
-      "version": "1.4.1",
-      "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-inspect@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-inspect:object_inspect:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_inspect:object-inspect:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_inspect:object_inspect:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-inspect:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_inspect:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-is@1.1.6?package-id=7d2b1f7bd8dfb8fa",
-      "type": "library",
-      "name": "object-is",
-      "version": "1.1.6",
-      "cpe": "cpe:2.3:a:object-is:object-is:1.1.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-is@1.1.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-is:object_is:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_is:object-is:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_is:object_is:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-is:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_is:1.1.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=1dd11cb6fcc69ccc",
-      "type": "library",
-      "name": "object-keys",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object-keys@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object-keys:object_keys:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_keys:object-keys:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object_keys:object_keys:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object-keys:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:object:object_keys:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/object.assign@4.1.7?package-id=89710efe39886c35",
-      "type": "library",
-      "name": "object.assign",
-      "version": "4.1.7",
-      "cpe": "cpe:2.3:a:object.assign:object.assign:4.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/object.assign@4.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=7864668ddaadd21e",
-      "type": "library",
-      "name": "on-finished",
-      "version": "2.3.0",
-      "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/on-finished@2.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/on-headers@1.0.2?package-id=1afb68d9b1cd2fe0",
-      "type": "library",
-      "name": "on-headers",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:on-headers:on-headers:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/on-headers@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on-headers:on_headers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on_headers:on-headers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on_headers:on_headers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on:on-headers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:on:on_headers:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/once@1.4.0?package-id=51a057bfcb8d8cc8",
-      "type": "library",
-      "name": "once",
-      "version": "1.4.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/once@1.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/once@1.4.0?package-id=f4b375a83d3c20f7",
-      "type": "library",
-      "name": "once",
-      "version": "1.4.0",
-      "cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/once@1.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/optionator@0.8.3?package-id=d52969094618b029",
-      "type": "library",
-      "name": "optionator",
-      "version": "0.8.3",
-      "cpe": "cpe:2.3:a:optionator:optionator:0.8.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/optionator@0.8.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=6a35122eccecbc1b",
-      "type": "library",
-      "name": "os-homedir",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/os-homedir@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=c8d25da7eaff33c0",
-      "type": "library",
-      "name": "os-homedir",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/os-homedir@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=0f39df5110826c07",
-      "type": "library",
-      "name": "os-tmpdir",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/os-tmpdir@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=ce3b287e584defc1",
-      "type": "library",
-      "name": "os-tmpdir",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/os-tmpdir@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/osenv@0.1.4?package-id=2a1d0f8fc0523a42",
-      "type": "library",
-      "name": "osenv",
-      "version": "0.1.4",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:osenv:osenv:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/osenv@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/osenv@0.1.5?package-id=0c25bf84212db8e6",
-      "type": "library",
-      "name": "osenv",
-      "version": "0.1.5",
-      "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/osenv@0.1.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pako@0.2.9?package-id=16672fedbaab8f37",
-      "type": "library",
-      "name": "pako",
-      "version": "0.2.9",
-      "cpe": "cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pako@0.2.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/param-case@2.1.1?package-id=2c0a286d4cea0726",
-      "type": "library",
-      "name": "param-case",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:param-case:param-case:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/param-case@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:param-case:param_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:param_case:param-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:param_case:param_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:param:param-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:param:param_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/parse-json@2.2.0?package-id=c51adda5f2c62d05",
-      "type": "library",
-      "name": "parse-json",
-      "version": "2.2.0",
-      "cpe": "cpe:2.3:a:parse-json:parse-json:2.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/parse-json@2.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:parse-json:parse_json:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:parse_json:parse-json:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:parse_json:parse_json:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:parse:parse-json:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:parse:parse_json:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/parseqs@0.0.5?package-id=96d6767f2728608b",
-      "type": "library",
-      "name": "parseqs",
-      "version": "0.0.5",
-      "cpe": "cpe:2.3:a:parseqs:parseqs:0.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/parseqs@0.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/parseuri@0.0.5?package-id=b18198220aa3fa41",
-      "type": "library",
-      "name": "parseuri",
-      "version": "0.0.5",
-      "cpe": "cpe:2.3:a:parseuri:parseuri:0.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/parseuri@0.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=83e9078802ca2e01",
-      "type": "library",
-      "name": "parseurl",
-      "version": "1.3.3",
-      "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/parseurl@1.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pascal-case@2.0.1?package-id=a371b92f7249c3dc",
-      "type": "library",
-      "name": "pascal-case",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:pascal-case:pascal-case:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pascal-case@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pascal-case:pascal_case:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pascal_case:pascal-case:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pascal_case:pascal_case:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pascal:pascal-case:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pascal:pascal_case:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-case@2.1.1?package-id=25e9c81e07219f22",
-      "type": "library",
-      "name": "path-case",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:path-case:path-case:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-case@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-case:path_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_case:path-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_case:path_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-exists@2.1.0?package-id=4a7ff1c116cab44a",
-      "type": "library",
-      "name": "path-exists",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:path-exists:path-exists:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-exists@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-exists:path_exists:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_exists:path-exists:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_exists:path_exists:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-exists:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_exists:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=83a43fda72601702",
-      "type": "library",
-      "name": "path-is-absolute",
-      "version": "1.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-is-absolute@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=5d05e24c9aa1048c",
-      "type": "library",
-      "name": "path-is-absolute",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-is-absolute@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=c0836cf8db54c3ac",
-      "type": "library",
-      "name": "path-parse",
-      "version": "1.0.7",
-      "cpe": "cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/path-parse@1.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-to-regexp@0.1.7?package-id=3913fec5b080551f",
-      "type": "library",
-      "name": "path-to-regexp",
-      "version": "0.1.7",
-      "cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-to-regexp@0.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-to-regexp:path_to_regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_to_regexp:path-to-regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_to_regexp:path_to_regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-to:path-to-regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-to:path_to_regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_to:path-to-regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_to:path_to_regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-to-regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_to_regexp:0.1.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/path-type@1.1.0?package-id=2f1f1e99dac6dd42",
-      "type": "library",
-      "name": "path-type",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:path-type:path-type:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/path-type@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path-type:path_type:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_type:path-type:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path_type:path_type:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path-type:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:path:path_type:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pdfkit@0.8.3?package-id=43d332aed951e750",
-      "type": "library",
-      "name": "pdfkit",
-      "version": "0.8.3",
-      "cpe": "cpe:2.3:a:pdfkit:pdfkit:0.8.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pdfkit@0.8.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/performance-now@0.2.0?package-id=3f85c265a91b6d8c",
-      "type": "library",
-      "name": "performance-now",
-      "version": "0.2.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:performance-now:performance-now:0.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/performance-now@0.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance-now:performance_now:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance_now:performance-now:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance_now:performance_now:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance:performance-now:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance:performance_now:0.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/performance-now@2.1.0?package-id=b93e628039a3d3a0",
-      "type": "library",
-      "name": "performance-now",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:performance-now:performance-now:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/performance-now@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance-now:performance_now:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance_now:performance-now:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance_now:performance_now:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance:performance-now:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:performance:performance_now:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pify@2.3.0?package-id=49a49298baee4ea7",
-      "type": "library",
-      "name": "pify",
-      "version": "2.3.0",
-      "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pify@2.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=1d69910c6ba854f3",
-      "type": "library",
-      "name": "pinkie",
-      "version": "2.0.4",
-      "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pinkie@2.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=bc85084b66b5cca8",
-      "type": "library",
-      "name": "pinkie-promise",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pinkie-promise@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pinkie-promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pinkie_promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pinkie_promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pinkie:pinkie-promise:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pinkie:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/platform@1.3.4?package-id=89eadcd2207c1bd4",
-      "type": "library",
-      "name": "platform",
-      "version": "1.3.4",
-      "cpe": "cpe:2.3:a:platform:platform:1.3.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/platform@1.3.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/png-js@1.0.0?package-id=45718c1688a9f62a",
-      "type": "library",
-      "name": "png-js",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:png-js:png-js:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/png-js@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:png-js:png_js:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:png_js:png-js:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:png_js:png_js:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:png:png-js:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:png:png_js:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0?package-id=eb8f843776680eda",
-      "type": "library",
-      "name": "possible-typed-array-names",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:possible-typed-array-names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible-typed-array-names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed_array_names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed_array_names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible-typed-array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible-typed-array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed_array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed_array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible-typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible-typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible_typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:possible:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/prebuild-install@2.5.3?package-id=dc5fe7f546b96a77",
-      "type": "library",
-      "name": "prebuild-install",
-      "version": "2.5.3",
-      "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:2.5.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/prebuild-install@2.5.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prebuild-install:prebuild_install:2.5.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prebuild_install:prebuild-install:2.5.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prebuild_install:prebuild_install:2.5.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prebuild:prebuild-install:2.5.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prebuild:prebuild_install:2.5.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/prelude-ls@1.1.2?package-id=ef898a9b80d9488d",
-      "type": "library",
-      "name": "prelude-ls",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:prelude-ls:prelude-ls:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/prelude-ls@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prelude-ls:prelude_ls:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prelude_ls:prelude-ls:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prelude_ls:prelude_ls:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prelude:prelude-ls:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:prelude:prelude_ls:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pretty-bytes@1.0.4?package-id=eac3ff11a084e62d",
-      "type": "library",
-      "name": "pretty-bytes",
-      "version": "1.0.4",
-      "cpe": "cpe:2.3:a:pretty-bytes:pretty-bytes:1.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pretty-bytes@1.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty-bytes:pretty_bytes:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty_bytes:pretty-bytes:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty_bytes:pretty_bytes:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty:pretty-bytes:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty:pretty_bytes:1.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pretty-bytes@4.0.2?package-id=3b9b8ebced9d06e7",
-      "type": "library",
-      "name": "pretty-bytes",
-      "version": "4.0.2",
-      "cpe": "cpe:2.3:a:pretty-bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pretty-bytes@4.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty-bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty_bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty_bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty:pretty-bytes:4.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:pretty:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/process-nextick-args@1.0.7?package-id=9eed470030453e4e",
-      "type": "library",
-      "name": "process-nextick-args",
-      "version": "1.0.7",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:1.0.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/process-nextick-args@1.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick-args:process_nextick_args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick_args:process-nextick-args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick_args:process_nextick_args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick:process-nextick-args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick:process_nextick_args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick:process-nextick-args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick:process_nextick_args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process:process-nextick-args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process:process_nextick_args:1.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=d5b79cedcd0f4e94",
-      "type": "library",
-      "name": "process-nextick-args",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/process-nextick-args@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=a734dabe94314908",
-      "type": "library",
-      "name": "proxy-addr",
-      "version": "2.0.7",
-      "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/proxy-addr@2.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/psl@1.15.0?package-id=cf34ff09705b3216",
-      "type": "library",
-      "name": "psl",
-      "version": "1.15.0",
-      "cpe": "cpe:2.3:a:psl:psl:1.15.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/psl@1.15.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pump@1.0.3?package-id=de0a9f19b1fab064",
-      "type": "library",
-      "name": "pump",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:pump:pump:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pump@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/pump@2.0.1?package-id=9e29e744db6d29ce",
-      "type": "library",
-      "name": "pump",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:pump:pump:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/pump@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/punycode@1.4.1?package-id=acbe74afb7ee1a46",
-      "type": "library",
-      "name": "punycode",
-      "version": "1.4.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:punycode:punycode:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/punycode@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/punycode@2.3.1?package-id=ada718b38fc1f414",
-      "type": "library",
-      "name": "punycode",
-      "version": "2.3.1",
-      "cpe": "cpe:2.3:a:punycode:punycode:2.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/punycode@2.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/qs@6.4.0?package-id=355a47c7a4857dbd",
-      "type": "library",
-      "name": "qs",
-      "version": "6.4.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:qs_project:qs:6.4.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/qs@6.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/qs@6.5.2?package-id=31af60477e8800e2",
-      "type": "library",
-      "name": "qs",
-      "version": "6.5.2",
-      "cpe": "cpe:2.3:a:qs_project:qs:6.5.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/qs@6.5.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/quote-stream@1.0.2?package-id=18ada8330f528486",
-      "type": "library",
-      "name": "quote-stream",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:quote-stream:quote-stream:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/quote-stream@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:quote-stream:quote_stream:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:quote_stream:quote-stream:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:quote_stream:quote_stream:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:quote:quote-stream:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:quote:quote_stream:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=70ed0fda380220f3",
-      "type": "library",
-      "name": "range-parser",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/range-parser@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/raw-body@2.3.3?package-id=3609768b8ba84a37",
-      "type": "library",
-      "name": "raw-body",
-      "version": "2.3.3",
-      "cpe": "cpe:2.3:a:raw-body:raw-body:2.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/raw-body@2.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:raw-body:raw_body:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:raw_body:raw-body:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:raw_body:raw_body:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:raw:raw-body:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:raw:raw_body:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/rc@1.2.1?package-id=3474d8ce810c5e63",
-      "type": "library",
-      "name": "rc",
-      "version": "1.2.1",
-      "licenses": [
-        {
-          "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
-        }
-      ],
-      "cpe": "cpe:2.3:a:rc:rc:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/rc@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/rc@1.2.8?package-id=f0e3361b3f8f9805",
-      "type": "library",
-      "name": "rc",
-      "version": "1.2.8",
-      "cpe": "cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/rc@1.2.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/read-pkg@1.1.0?package-id=fbb8875d5e10827f",
-      "type": "library",
-      "name": "read-pkg",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:read-pkg:read-pkg:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/read-pkg@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read-pkg:read_pkg:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg:read-pkg:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg:read_pkg:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read:read-pkg:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read:read_pkg:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/read-pkg-up@1.0.1?package-id=07ff9db4245d3263",
-      "type": "library",
-      "name": "read-pkg-up",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:read-pkg-up:read-pkg-up:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/read-pkg-up@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read-pkg-up:read_pkg_up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg_up:read-pkg-up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg_up:read_pkg_up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read-pkg:read-pkg-up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read-pkg:read_pkg_up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg:read-pkg-up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read_pkg:read_pkg_up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read:read-pkg-up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:read:read_pkg_up:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/readable-stream@1.0.34?package-id=0e1614080a57903e",
-      "type": "library",
-      "name": "readable-stream",
-      "version": "1.0.34",
-      "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.0.34:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/readable-stream@1.0.34",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable-stream:readable_stream:1.0.34:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable-stream:1.0.34:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable_stream:1.0.34:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable-stream:1.0.34:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable_stream:1.0.34:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/readable-stream@1.1.14?package-id=0228c890939122e3",
-      "type": "library",
-      "name": "readable-stream",
-      "version": "1.1.14",
-      "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.1.14:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/readable-stream@1.1.14",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable-stream:readable_stream:1.1.14:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable-stream:1.1.14:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable_stream:1.1.14:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable-stream:1.1.14:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable_stream:1.1.14:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/readable-stream@2.3.3?package-id=a5eee66541db9cac",
-      "type": "library",
-      "name": "readable-stream",
-      "version": "2.3.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/readable-stream@2.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable-stream:readable_stream:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable-stream:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable_stream:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable-stream:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable_stream:2.3.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=f05546165684499a",
-      "type": "library",
-      "name": "readable-stream",
-      "version": "2.3.8",
-      "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/readable-stream@2.3.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/redent@1.0.0?package-id=62d8e6441962c5d3",
-      "type": "library",
-      "name": "redent",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:redent:redent:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/redent@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/referrer-policy@1.1.0?package-id=39c7b97f9558f20a",
-      "type": "library",
-      "name": "referrer-policy",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:referrer-policy:referrer-policy:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/referrer-policy@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:referrer-policy:referrer_policy:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:referrer_policy:referrer-policy:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:referrer_policy:referrer_policy:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:referrer:referrer-policy:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:referrer:referrer_policy:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4?package-id=f8458ef5e455d490",
-      "type": "library",
-      "name": "regexp.prototype.flags",
-      "version": "1.5.4",
-      "cpe": "cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/relateurl@0.2.7?package-id=618bdff81e1e5e10",
-      "type": "library",
-      "name": "relateurl",
-      "version": "0.2.7",
-      "cpe": "cpe:2.3:a:relateurl:relateurl:0.2.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/relateurl@0.2.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0?package-id=9d00f578cea32e94",
-      "type": "library",
-      "name": "remove-trailing-separator",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove-trailing-separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove_trailing_separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove_trailing_separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove-trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove-trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove_trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove_trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:remove:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/repeat-string@1.6.1?package-id=73fd14f451590723",
-      "type": "library",
-      "name": "repeat-string",
-      "version": "1.6.1",
-      "cpe": "cpe:2.3:a:repeat-string:repeat-string:1.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/repeat-string@1.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:repeat-string:repeat_string:1.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:repeat_string:repeat-string:1.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:repeat_string:repeat_string:1.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:repeat:repeat-string:1.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:repeat:repeat_string:1.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/repeating@2.0.1?package-id=b45ebf642db95fd6",
-      "type": "library",
-      "name": "repeating",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:repeating:repeating:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/repeating@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/replace@0.3.0?package-id=c32c3678bbdad9e2",
-      "type": "library",
-      "name": "replace",
-      "version": "0.3.0",
-      "cpe": "cpe:2.3:a:replace:replace:0.3.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/replace@0.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/request@2.81.0?package-id=d49e8132ee35b391",
-      "type": "library",
-      "name": "request",
-      "version": "2.81.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:request_project:request:2.81.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/request@2.81.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/request@2.88.2?package-id=8a0ab67cfead7528",
-      "type": "library",
-      "name": "request",
-      "version": "2.88.2",
-      "cpe": "cpe:2.3:a:request_project:request:2.88.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/request@2.88.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/resolve@1.1.7?package-id=b78257c1e4215ec0",
-      "type": "library",
-      "name": "resolve",
-      "version": "1.1.7",
-      "cpe": "cpe:2.3:a:resolve:resolve:1.1.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/resolve@1.1.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/resolve@1.22.10?package-id=00783bcf5ee028c8",
-      "type": "library",
-      "name": "resolve",
-      "version": "1.22.10",
-      "cpe": "cpe:2.3:a:resolve:resolve:1.22.10:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/resolve@1.22.10",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/restructure@2.0.1?package-id=4e3965e4914ce033",
-      "type": "library",
-      "name": "restructure",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:restructure:restructure:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/restructure@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/retry-as-promised@2.3.2?package-id=9238a6d1949753f4",
-      "type": "library",
-      "name": "retry-as-promised",
-      "version": "2.3.2",
-      "cpe": "cpe:2.3:a:retry-as-promised:retry-as-promised:2.3.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/retry-as-promised@2.3.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry-as-promised:retry_as_promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry_as_promised:retry-as-promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry_as_promised:retry_as_promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry-as:retry-as-promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry-as:retry_as_promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry_as:retry-as-promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry_as:retry_as_promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry:retry-as-promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:retry:retry_as_promised:2.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/right-align@0.1.3?package-id=145453aed39a96b3",
-      "type": "library",
-      "name": "right-align",
-      "version": "0.1.3",
-      "cpe": "cpe:2.3:a:right-align:right-align:0.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/right-align@0.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:right-align:right_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:right_align:right-align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:right_align:right_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:right:right-align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:right:right_align:0.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/rimraf@2.6.2?package-id=95a997fe606eb01e",
-      "type": "library",
-      "name": "rimraf",
-      "version": "2.6.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:rimraf:rimraf:2.6.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/rimraf@2.6.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/rimraf@2.6.3?package-id=1b7c71f403c5c96d",
-      "type": "library",
-      "name": "rimraf",
-      "version": "2.6.3",
-      "cpe": "cpe:2.3:a:rimraf:rimraf:2.6.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/rimraf@2.6.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safe-buffer@5.1.1?package-id=a966e7b6a1d82100",
-      "type": "library",
-      "name": "safe-buffer",
-      "version": "5.1.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safe-buffer@5.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe-buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safe-buffer@5.1.1?package-id=da9cc56228811f66",
-      "type": "library",
-      "name": "safe-buffer",
-      "version": "5.1.1",
-      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safe-buffer@5.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe-buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe_buffer:5.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=31c6078320e3e050",
-      "type": "library",
-      "name": "safe-buffer",
-      "version": "5.1.2",
-      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safe-buffer@5.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=3d55e049a6842058",
-      "type": "library",
-      "name": "safe-buffer",
-      "version": "5.2.1",
-      "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safe-buffer@5.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safe-regex-test@1.1.0?package-id=953b882515844806",
-      "type": "library",
-      "name": "safe-regex-test",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:safe-regex-test:safe-regex-test:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safe-regex-test@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-regex-test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_regex_test:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_regex_test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe-regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe_regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safe:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=f1c86d7e4cddfedb",
-      "type": "library",
-      "name": "safer-buffer",
-      "version": "2.1.2",
-      "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/safer-buffer@2.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sanitize-html@1.4.2?package-id=62fd661ff049368c",
-      "type": "library",
-      "name": "sanitize-html",
-      "version": "1.4.2",
-      "cpe": "cpe:2.3:a:apostrophecms:sanitize-html:1.4.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/sanitize-html@1.4.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:punkave:sanitize-html:1.4.2:*:*:*:*:node.js:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sax@1.4.1?package-id=15ab80412c23ba51",
-      "type": "library",
-      "name": "sax",
-      "version": "1.4.1",
-      "cpe": "cpe:2.3:a:sax:sax:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sax@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/semver@5.3.0?package-id=2d9e9cf6ccf9903f",
-      "type": "library",
-      "name": "semver",
-      "version": "5.3.0",
-      "cpe": "cpe:2.3:a:npmjs:semver:5.3.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/semver@5.3.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/semver@5.4.1?package-id=78e8972300195b90",
-      "type": "library",
-      "name": "semver",
-      "version": "5.4.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:npmjs:semver:5.4.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/semver@5.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/semver@5.7.2?package-id=3802cb3a28562627",
-      "type": "library",
-      "name": "semver",
-      "version": "5.7.2",
-      "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/semver@5.7.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/send@0.16.2?package-id=d109d1b49e105744",
-      "type": "library",
-      "name": "send",
-      "version": "0.16.2",
-      "cpe": "cpe:2.3:a:send_project:send:0.16.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/send@0.16.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sentence-case@2.1.1?package-id=fc412f16168c83a1",
-      "type": "library",
-      "name": "sentence-case",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:sentence-case:sentence-case:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sentence-case@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sentence-case:sentence_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sentence_case:sentence-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sentence_case:sentence_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sentence:sentence-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sentence:sentence_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sequelize@4.44.4?package-id=3c520f3b42e8c14a",
-      "type": "library",
-      "name": "sequelize",
-      "version": "4.44.4",
-      "cpe": "cpe:2.3:a:sequelizejs:sequelize:4.44.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/sequelize@4.44.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/serve-favicon@2.4.5?package-id=b219efc46286eb92",
-      "type": "library",
-      "name": "serve-favicon",
-      "version": "2.4.5",
-      "cpe": "cpe:2.3:a:serve-favicon:serve-favicon:2.4.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/serve-favicon@2.4.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve-favicon:serve_favicon:2.4.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_favicon:serve-favicon:2.4.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_favicon:serve_favicon:2.4.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve-favicon:2.4.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve_favicon:2.4.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/serve-index@1.9.1?package-id=e8bc17ff9d211fcd",
-      "type": "library",
-      "name": "serve-index",
-      "version": "1.9.1",
-      "cpe": "cpe:2.3:a:serve-index:serve-index:1.9.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/serve-index@1.9.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve-index:serve_index:1.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_index:serve-index:1.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_index:serve_index:1.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve-index:1.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve_index:1.9.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/serve-static@1.13.2?package-id=27adb53d91b428ca",
-      "type": "library",
-      "name": "serve-static",
-      "version": "1.13.2",
-      "cpe": "cpe:2.3:a:serve-static:serve-static:1.13.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/serve-static@1.13.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve-static:serve_static:1.13.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_static:serve-static:1.13.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve_static:serve_static:1.13.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve-static:1.13.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:serve:serve_static:1.13.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=6cb97f85675da444",
-      "type": "library",
-      "name": "set-blocking",
-      "version": "2.0.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/set-blocking@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=ac32b31e5a3692ec",
-      "type": "library",
-      "name": "set-blocking",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/set-blocking@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/set-function-length@1.2.2?package-id=d9d79c98e27b06ad",
-      "type": "library",
-      "name": "set-function-length",
-      "version": "1.2.2",
-      "cpe": "cpe:2.3:a:set-function-length:set-function-length:1.2.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/set-function-length@1.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function-length:set_function_length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function_length:set-function-length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function_length:set_function_length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function:set-function-length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function:set_function_length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function:set-function-length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function:set_function_length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set-function-length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set_function_length:1.2.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/set-function-name@2.0.2?package-id=97eb9777d73105eb",
-      "type": "library",
-      "name": "set-function-name",
-      "version": "2.0.2",
-      "cpe": "cpe:2.3:a:set-function-name:set-function-name:2.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/set-function-name@2.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function-name:set_function_name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function_name:set-function-name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function_name:set_function_name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function:set-function-name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set-function:set_function_name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function:set-function-name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set_function:set_function_name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set-function-name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:set:set_function_name:2.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/setprototypeof@1.1.0?package-id=6e6202cb919385b6",
-      "type": "library",
-      "name": "setprototypeof",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/setprototypeof@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/shallow-copy@0.0.1?package-id=faf6d004d75b2eb7",
-      "type": "library",
-      "name": "shallow-copy",
-      "version": "0.0.1",
-      "cpe": "cpe:2.3:a:shallow-copy:shallow-copy:0.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/shallow-copy@0.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:shallow-copy:shallow_copy:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:shallow_copy:shallow-copy:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:shallow_copy:shallow_copy:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:shallow:shallow-copy:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:shallow:shallow_copy:0.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/shimmer@1.2.1?package-id=8889457ba76aea3c",
-      "type": "library",
-      "name": "shimmer",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:shimmer:shimmer:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/shimmer@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/side-channel@1.1.0?package-id=c30218ac39b298e4",
-      "type": "library",
-      "name": "side-channel",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/side-channel@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/side-channel-list@1.0.0?package-id=e2d8b02323111025",
-      "type": "library",
-      "name": "side-channel-list",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/side-channel-list@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side-channel-list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side_channel_list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side-channel-list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side_channel_list:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/side-channel-map@1.0.1?package-id=59c5f9d92f249656",
-      "type": "library",
-      "name": "side-channel-map",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/side-channel-map@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2?package-id=7d8baa1437b30302",
-      "type": "library",
-      "name": "side-channel-weakmap",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sigmund@1.0.1?package-id=6e6f3eff33c54b6a",
-      "type": "library",
-      "name": "sigmund",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:sigmund:sigmund:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sigmund@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/signal-exit@3.0.2?package-id=4aac2c41f668e074",
-      "type": "library",
-      "name": "signal-exit",
-      "version": "3.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/signal-exit@3.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal-exit:signal_exit:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal_exit:signal-exit:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal_exit:signal_exit:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal:signal-exit:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal:signal_exit:3.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=83f35e873252a66b",
-      "type": "library",
-      "name": "signal-exit",
-      "version": "3.0.7",
-      "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/signal-exit@3.0.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/simple-concat@1.0.1?package-id=a8dfa5f0e2d27327",
-      "type": "library",
-      "name": "simple-concat",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/simple-concat@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/simple-get@2.8.2?package-id=cdd2e3d71f1a7197",
-      "type": "library",
-      "name": "simple-get",
-      "version": "2.8.2",
-      "cpe": "cpe:2.3:a:simple-get_project:simple-get:2.8.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/simple-get@2.8.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/snake-case@2.1.0?package-id=34d5dfdf9392afcc",
-      "type": "library",
-      "name": "snake-case",
-      "version": "2.1.0",
-      "cpe": "cpe:2.3:a:snake-case:snake-case:2.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/snake-case@2.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:snake-case:snake_case:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:snake_case:snake-case:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:snake_case:snake_case:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:snake:snake-case:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:snake:snake_case:2.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sntp@1.0.9?package-id=59bcf5489c44bb8f",
-      "type": "library",
-      "name": "sntp",
-      "version": "1.0.9",
-      "cpe": "cpe:2.3:a:sntp:sntp:1.0.9:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sntp@1.0.9",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/socket.io@2.0.4?package-id=7b7e96c11f92530c",
-      "type": "library",
-      "name": "socket.io",
-      "version": "2.0.4",
-      "cpe": "cpe:2.3:a:socket:socket.io:2.0.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/socket.io@2.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/socket.io-adapter@1.1.2?package-id=e6339535547f1ff8",
-      "type": "library",
-      "name": "socket.io-adapter",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:socket.io-adapter:socket.io-adapter:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/socket.io-adapter@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io-adapter:socket.io_adapter:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io_adapter:socket.io-adapter:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io_adapter:socket.io_adapter:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io:socket.io-adapter:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io:socket.io_adapter:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/socket.io-client@2.0.4?package-id=3cbe9ffdfe766422",
-      "type": "library",
-      "name": "socket.io-client",
-      "version": "2.0.4",
-      "cpe": "cpe:2.3:a:socket.io-client:socket.io-client:2.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/socket.io-client@2.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io-client:socket.io_client:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io_client:socket.io-client:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io_client:socket.io_client:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io:socket.io-client:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:socket.io:socket.io_client:2.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/socket.io-parser@3.1.3?package-id=1cc0b082dadeffa7",
-      "type": "library",
-      "name": "socket.io-parser",
-      "version": "3.1.3",
-      "cpe": "cpe:2.3:a:socket:socket.io-parser:3.1.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/socket.io-parser@3.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/softprops/action-gh-release@v2.2.1?package-id=64d69df02b974f12",
-      "type": "library",
-      "name": "softprops/action-gh-release",
-      "version": "v2.2.1",
-      "cpe": "cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action-gh-release:v2.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/softprops/action-gh-release@v2.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action_gh_release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action-gh-release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action_gh_release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action-gh:softprops\\/action-gh-release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action-gh:softprops\\/action_gh_release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action_gh:softprops\\/action-gh-release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action_gh:softprops\\/action_gh_release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action:softprops\\/action-gh-release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:softprops\\/action:softprops\\/action_gh_release:v2.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/release.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/source-map@0.4.4?package-id=c12d077bbb90ee82",
-      "type": "library",
-      "name": "source-map",
-      "version": "0.4.4",
-      "cpe": "cpe:2.3:a:source-map:source-map:0.4.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/source-map@0.4.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source-map:source_map:0.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source-map:0.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source_map:0.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source-map:0.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source_map:0.4.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/source-map@0.5.7?package-id=51a36da31c5e9352",
-      "type": "library",
-      "name": "source-map",
-      "version": "0.5.7",
-      "cpe": "cpe:2.3:a:source-map:source-map:0.5.7:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/source-map@0.5.7",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source-map:source_map:0.5.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source-map:0.5.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source_map:0.5.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source-map:0.5.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source_map:0.5.7:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/source-map@0.6.1?package-id=2f346505162fd457",
-      "type": "library",
-      "name": "source-map",
-      "version": "0.6.1",
-      "cpe": "cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/source-map@0.6.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source-map:source_map:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source-map:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source_map:source_map:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source-map:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:source:source_map:0.6.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/spdx-correct@3.2.0?package-id=3bba53782def4e93",
-      "type": "library",
-      "name": "spdx-correct",
-      "version": "3.2.0",
-      "cpe": "cpe:2.3:a:spdx-correct:spdx-correct:3.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/spdx-correct@3.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_correct:spdx-correct:3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_correct:spdx_correct:3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx-correct:3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx_correct:3.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0?package-id=74dfb77c2fe839aa",
-      "type": "library",
-      "name": "spdx-exceptions",
-      "version": "2.5.0",
-      "cpe": "cpe:2.3:a:spdx-exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/spdx-exceptions@2.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_exceptions:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_exceptions:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx-exceptions:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx_exceptions:2.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1?package-id=b3cd09e23e228fa2",
-      "type": "library",
-      "name": "spdx-expression-parse",
-      "version": "3.0.1",
-      "cpe": "cpe:2.3:a:spdx-expression-parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-expression-parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_expression_parse:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_expression_parse:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_expression:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_expression:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx-expression-parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx_expression_parse:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/spdx-license-ids@3.0.21?package-id=7f08eeebaf07c55a",
-      "type": "library",
-      "name": "spdx-license-ids",
-      "version": "3.0.21",
-      "cpe": "cpe:2.3:a:spdx-license-ids:spdx-license-ids:3.0.21:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/spdx-license-ids@3.0.21",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-license-ids:spdx_license_ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_license_ids:spdx-license-ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_license_ids:spdx_license_ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-license:spdx-license-ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx-license:spdx_license_ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_license:spdx-license-ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx_license:spdx_license_ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx-license-ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:spdx:spdx_license_ids:3.0.21:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=2920c10d8e3ade87",
-      "type": "library",
-      "name": "sprintf-js",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sprintf-js@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf:sprintf-js:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf:sprintf_js:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sprintf-js@1.1.3?package-id=c79310b1fe3be2f9",
-      "type": "library",
-      "name": "sprintf-js",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/sprintf-js@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf:sprintf-js:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:sprintf:sprintf_js:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sqlite3@3.1.13?package-id=d6410d8cd88e4f1c",
-      "type": "library",
-      "name": "sqlite3",
-      "version": "3.1.13",
-      "cpe": "cpe:2.3:a:ghost:sqlite3:3.1.13:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/sqlite3@3.1.13",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sshpk@1.13.1?package-id=d0d9ad39d838a8c2",
-      "type": "library",
-      "name": "sshpk",
-      "version": "1.13.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:joyent:sshpk:1.13.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/sshpk@1.13.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/sshpk@1.18.0?package-id=859d9caed18cf115",
-      "type": "library",
-      "name": "sshpk",
-      "version": "1.18.0",
-      "cpe": "cpe:2.3:a:joyent:sshpk:1.18.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/sshpk@1.18.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/static-eval@2.1.1?package-id=dbe560e22f1f1e72",
-      "type": "library",
-      "name": "static-eval",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:static-eval_project:static-eval:2.1.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/static-eval@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/static-module@2.2.5?package-id=5595fac149970916",
-      "type": "library",
-      "name": "static-module",
-      "version": "2.2.5",
-      "cpe": "cpe:2.3:a:static-module:static-module:2.2.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/static-module@2.2.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:static-module:static_module:2.2.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:static_module:static-module:2.2.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:static_module:static_module:2.2.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:static:static-module:2.2.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:static:static_module:2.2.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/statuses@1.4.0?package-id=3fcba449ec7cfead",
-      "type": "library",
-      "name": "statuses",
-      "version": "1.4.0",
-      "cpe": "cpe:2.3:a:statuses:statuses:1.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/statuses@1.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/stefanzweifel/git-auto-commit-action@v4.0.0?package-id=ee4a449344a0537f",
-      "type": "library",
-      "name": "stefanzweifel/git-auto-commit-action",
-      "version": "v4.0.0",
-      "cpe": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/stefanzweifel/git-auto-commit-action@v4.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git-auto-commit-action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git_auto_commit_action:v4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/node_modules/juicy-chat-bot/.github/workflows/lint-fixer.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1?package-id=22993624429b9d37",
-      "type": "library",
-      "name": "stefanzweifel/git-auto-commit-action",
-      "version": "v5.0.1",
-      "cpe": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/lint-fixer.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1?package-id=8dc9ac055bc9ebde",
-      "type": "library",
-      "name": "stefanzweifel/git-auto-commit-action",
-      "version": "v5.0.1",
-      "cpe": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/update-challenges-www.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1?package-id=ce772b8ca749d475",
-      "type": "library",
-      "name": "stefanzweifel/git-auto-commit-action",
-      "version": "v5.0.1",
-      "cpe": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:github/stefanzweifel/git-auto-commit-action@v5.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git-auto-commit-action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git_auto_commit_action:v5.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/update-news-www.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0?package-id=8b3086ce89f08a5f",
-      "type": "library",
-      "name": "stop-iteration-iterator",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:stop-iteration-iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/stop-iteration-iterator@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop-iteration-iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop_iteration_iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop_iteration_iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop-iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop-iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop_iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop_iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stop:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/stream-buffers@2.2.0?package-id=8c417cd4c66232aa",
-      "type": "library",
-      "name": "stream-buffers",
-      "version": "2.2.0",
-      "cpe": "cpe:2.3:a:stream-buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/stream-buffers@2.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stream-buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stream_buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stream_buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stream:stream-buffers:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:stream:stream_buffers:2.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/streamsearch@0.1.2?package-id=52ffd5b8574f3437",
-      "type": "library",
-      "name": "streamsearch",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:streamsearch:streamsearch:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/streamsearch@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string-width@1.0.2?package-id=583f8aae9c69719b",
-      "type": "library",
-      "name": "string-width",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string-width@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string-width@1.0.2?package-id=cc90f1e3f20d57a6",
-      "type": "library",
-      "name": "string-width",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string-width@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string-width@2.1.1?package-id=aed6bae5db6355ed",
-      "type": "library",
-      "name": "string-width",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string-width@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-width:string_width:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string-width:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_width:string_width:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-width:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_width:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=265d37c13bcea4fd",
-      "type": "library",
-      "name": "string_decoder",
-      "version": "0.10.31",
-      "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string_decoder@0.10.31",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string-decoder:0.10.31:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-decoder:0.10.31:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_decoder:0.10.31:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string_decoder@1.0.3?package-id=f32d38caa8663799",
-      "type": "library",
-      "name": "string_decoder",
-      "version": "1.0.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string_decoder@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-decoder:string_decoder:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string-decoder:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string_decoder:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-decoder:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_decoder:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=e73bf197d57e1e5f",
-      "type": "library",
-      "name": "string_decoder",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/string_decoder@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/stringstream@0.0.5?package-id=0ab15158d5532c3a",
-      "type": "library",
-      "name": "stringstream",
-      "version": "0.0.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:stringstream:stringstream:0.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/stringstream@0.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=02c10a69ce70d324",
-      "type": "library",
-      "name": "strip-ansi",
-      "version": "3.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-ansi@3.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=0fc2b2120423c7ee",
-      "type": "library",
-      "name": "strip-ansi",
-      "version": "3.0.1",
-      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-ansi@3.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=d76aaecc61cb9830",
-      "type": "library",
-      "name": "strip-ansi",
-      "version": "4.0.0",
-      "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-ansi@4.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-ansi:4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_ansi:4.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-bom@2.0.0?package-id=90f5b05088bb68eb",
-      "type": "library",
-      "name": "strip-bom",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:strip-bom:strip-bom:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-bom@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-bom:strip_bom:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_bom:strip-bom:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_bom:strip_bom:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-bom:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_bom:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-indent@1.0.1?package-id=535ffac8d8086917",
-      "type": "library",
-      "name": "strip-indent",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:strip-indent:strip-indent:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-indent@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-indent:strip_indent:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_indent:strip-indent:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_indent:strip_indent:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-indent:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_indent:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=6d9099479d53e268",
-      "type": "library",
-      "name": "strip-json-comments",
-      "version": "2.0.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-json-comments@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=fd3eced8cba68ed5",
-      "type": "library",
-      "name": "strip-json-comments",
-      "version": "2.0.1",
-      "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/strip-json-comments@2.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/supports-color@2.0.0?package-id=2933746c354570a7",
-      "type": "library",
-      "name": "supports-color",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/supports-color@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-color:supports_color:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_color:supports-color:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_color:supports_color:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports-color:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports_color:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=e7a121cae5e7875c",
-      "type": "library",
-      "name": "supports-color",
-      "version": "5.5.0",
-      "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/supports-color@5.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=3b30ac4246b599b8",
-      "type": "library",
-      "name": "supports-preserve-symlinks-flag",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/swap-case@1.1.2?package-id=6336e99f1e7d86d3",
-      "type": "library",
-      "name": "swap-case",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:swap-case:swap-case:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/swap-case@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:swap-case:swap_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:swap_case:swap-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:swap_case:swap_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:swap:swap-case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:swap:swap_case:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar@2.2.1?package-id=5ea15db53bb22d1b",
-      "type": "library",
-      "name": "tar",
-      "version": "2.2.1",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:tar_project:tar:2.2.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/tar@2.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar@2.2.2?package-id=83fa7e77c2dc1d39",
-      "type": "library",
-      "name": "tar",
-      "version": "2.2.2",
-      "cpe": "cpe:2.3:a:tar_project:tar:2.2.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/tar@2.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar@4.4.19?package-id=0abb25b3e383dc16",
-      "type": "library",
-      "name": "tar",
-      "version": "4.4.19",
-      "cpe": "cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/tar@4.4.19",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar-fs@1.16.4?package-id=b9c02dbba03d7dbd",
-      "type": "library",
-      "name": "tar-fs",
-      "version": "1.16.4",
-      "cpe": "cpe:2.3:a:tar-fs:tar-fs:1.16.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tar-fs@1.16.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar-fs:tar_fs:1.16.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_fs:tar-fs:1.16.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_fs:tar_fs:1.16.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar-fs:1.16.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar_fs:1.16.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar-pack@3.4.0?package-id=6490c636ff10eb82",
-      "type": "library",
-      "name": "tar-pack",
-      "version": "3.4.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-2-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:tar-pack:tar-pack:3.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tar-pack@3.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar-pack:tar_pack:3.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_pack:tar-pack:3.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_pack:tar_pack:3.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar-pack:3.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar_pack:3.4.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tar-stream@1.6.2?package-id=7d4cba6d2e6737df",
-      "type": "library",
-      "name": "tar-stream",
-      "version": "1.6.2",
-      "cpe": "cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tar-stream@1.6.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar-stream:tar_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_stream:tar-stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar_stream:tar_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar-stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tar:tar_stream:1.6.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/terraformer@1.0.12?package-id=9b091d18b8be6b53",
-      "type": "library",
-      "name": "terraformer",
-      "version": "1.0.12",
-      "cpe": "cpe:2.3:a:terraformer:terraformer:1.0.12:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/terraformer@1.0.12",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/terraformer-wkt-parser@1.2.1?package-id=f4e3b4af3e81caa0",
-      "type": "library",
-      "name": "terraformer-wkt-parser",
-      "version": "1.2.1",
-      "cpe": "cpe:2.3:a:terraformer-wkt-parser:terraformer-wkt-parser:1.2.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/terraformer-wkt-parser@1.2.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer-wkt-parser:terraformer_wkt_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer_wkt_parser:terraformer-wkt-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer_wkt_parser:terraformer_wkt_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer-wkt:terraformer-wkt-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer-wkt:terraformer_wkt_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer_wkt:terraformer-wkt-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer_wkt:terraformer_wkt_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer:terraformer-wkt-parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:terraformer:terraformer_wkt_parser:1.2.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/through2@2.0.5?package-id=1111d97250c2befa",
-      "type": "library",
-      "name": "through2",
-      "version": "2.0.5",
-      "cpe": "cpe:2.3:a:through2:through2:2.0.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/through2@2.0.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tiny-inflate@1.0.3?package-id=f32b2b05223c2375",
-      "type": "library",
-      "name": "tiny-inflate",
-      "version": "1.0.3",
-      "cpe": "cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tiny-inflate@1.0.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/title-case@2.1.1?package-id=4903667650b31480",
-      "type": "library",
-      "name": "title-case",
-      "version": "2.1.1",
-      "cpe": "cpe:2.3:a:title-case:title-case:2.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/title-case@2.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:title-case:title_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:title_case:title-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:title_case:title_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:title:title-case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:title:title_case:2.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/to-array@0.1.4?package-id=b9d4609171d53ebd",
-      "type": "library",
-      "name": "to-array",
-      "version": "0.1.4",
-      "cpe": "cpe:2.3:a:to-array:to-array:0.1.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/to-array@0.1.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to-array:to_array:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to_array:to-array:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to_array:to_array:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to:to-array:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to:to_array:0.1.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/to-buffer@1.1.1?package-id=9c3fa98ae6c242db",
-      "type": "library",
-      "name": "to-buffer",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:to-buffer:to-buffer:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/to-buffer@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to-buffer:to_buffer:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to_buffer:to-buffer:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to_buffer:to_buffer:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to:to-buffer:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:to:to_buffer:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/toposort-class@1.0.1?package-id=8e09b18be1c4e432",
-      "type": "library",
-      "name": "toposort-class",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:toposort-class:toposort-class:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/toposort-class@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:toposort-class:toposort_class:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:toposort_class:toposort-class:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:toposort_class:toposort_class:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:toposort:toposort-class:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:toposort:toposort_class:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tough-cookie@2.3.3?package-id=3d010ebc0dcf9790",
-      "type": "library",
-      "name": "tough-cookie",
-      "version": "2.3.3",
-      "licenses": [
-        {
-          "license": {
-            "id": "BSD-3-Clause"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:salesforce:tough-cookie:2.3.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/tough-cookie@2.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tough-cookie@2.5.0?package-id=f6e2598a9ce81e87",
-      "type": "library",
-      "name": "tough-cookie",
-      "version": "2.5.0",
-      "cpe": "cpe:2.3:a:salesforce:tough-cookie:2.5.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/tough-cookie@2.5.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/trim-newlines@1.0.0?package-id=26f18f722939fdad",
-      "type": "library",
-      "name": "trim-newlines",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:trim-newlines_project:trim-newlines:1.0.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/trim-newlines@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tslib@2.8.1?package-id=b623f79e7cdc8f53",
-      "type": "library",
-      "name": "tslib",
-      "version": "2.8.1",
-      "cpe": "cpe:2.3:a:tslib:tslib:2.8.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tslib@2.8.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=4f956e6b14aedc0e",
-      "type": "library",
-      "name": "tunnel-agent",
-      "version": "0.6.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "Apache-2.0"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tunnel-agent@0.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=aaf930e58a90a97c",
-      "type": "library",
-      "name": "tunnel-agent",
-      "version": "0.6.0",
-      "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tunnel-agent@0.6.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=e1220b62ee4fb404",
-      "type": "library",
-      "name": "tweetnacl",
-      "version": "0.14.5",
-      "licenses": [
-        {
-          "license": {
-            "id": "Unlicense"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tweetnacl@0.14.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/tweetnacl@0.14.5?package-id=a0e9c7ac1b9c3480",
-      "type": "library",
-      "name": "tweetnacl",
-      "version": "0.14.5",
-      "cpe": "cpe:2.3:a:tweetnacl:tweetnacl:0.14.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/tweetnacl@0.14.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/type-check@0.3.2?package-id=cad81cb956900ac1",
-      "type": "library",
-      "name": "type-check",
-      "version": "0.3.2",
-      "cpe": "cpe:2.3:a:type-check:type-check:0.3.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/type-check@0.3.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type-check:type_check:0.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type_check:type-check:0.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type_check:type_check:0.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type:type-check:0.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type:type_check:0.3.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/type-is@1.6.18?package-id=58e4ae5e5bff1f15",
-      "type": "library",
-      "name": "type-is",
-      "version": "1.6.18",
-      "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/type-is@1.6.18",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=f18cf9708ed26239",
-      "type": "library",
-      "name": "typedarray",
-      "version": "0.0.6",
-      "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/typedarray@0.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uglify-js@2.6.4?package-id=7a75e2b585191973",
-      "type": "library",
-      "name": "uglify-js",
-      "version": "2.6.4",
-      "cpe": "cpe:2.3:a:uglifyjs_project:uglifyjs:2.6.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/uglify-js@2.6.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uglify-js@3.2.2?package-id=1d109ba8317bf6e5",
-      "type": "library",
-      "name": "uglify-js",
-      "version": "3.2.2",
-      "cpe": "cpe:2.3:a:uglifyjs_project:uglifyjs:3.2.2:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/uglify-js@3.2.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2?package-id=ec50ac65644300df",
-      "type": "library",
-      "name": "uglify-to-browserify",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:uglify-to-browserify:uglify-to-browserify:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify-to-browserify:uglify_to_browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify_to_browserify:uglify-to-browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify_to_browserify:uglify_to_browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify-to:uglify-to-browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify-to:uglify_to_browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify_to:uglify-to-browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify_to:uglify_to_browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify:uglify-to-browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uglify:uglify_to_browserify:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uid-number@0.0.6?package-id=33936b88be744edc",
-      "type": "library",
-      "name": "uid-number",
-      "version": "0.0.6",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:uid-number:uid-number:0.0.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/uid-number@0.0.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uid-number:uid_number:0.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uid_number:uid-number:0.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uid_number:uid_number:0.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uid:uid-number:0.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uid:uid_number:0.0.6:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ultron@1.1.1?package-id=4535a9ec8df35163",
-      "type": "library",
-      "name": "ultron",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:ultron:ultron:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/ultron@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/underscore@1.4.4?package-id=e21af3fb88e38d25",
-      "type": "library",
-      "name": "underscore",
-      "version": "1.4.4",
-      "cpe": "cpe:2.3:a:underscorejs:underscore:1.4.4:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/underscore@1.4.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/underscore.string@3.3.6?package-id=920f98e6ef488bb5",
-      "type": "library",
-      "name": "underscore.string",
-      "version": "3.3.6",
-      "cpe": "cpe:2.3:a:underscore.string:underscore.string:3.3.6:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/underscore.string@3.3.6",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/undici-types@6.21.0?package-id=8097496ea1a442a8",
-      "type": "library",
-      "name": "undici-types",
-      "version": "6.21.0",
-      "cpe": "cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/undici-types@6.21.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/unicode-properties@1.4.1?package-id=76662fdef72f12be",
-      "type": "library",
-      "name": "unicode-properties",
-      "version": "1.4.1",
-      "cpe": "cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/unicode-properties@1.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/unicode-trie@0.3.1?package-id=533bfaddc80b9703",
-      "type": "library",
-      "name": "unicode-trie",
-      "version": "0.3.1",
-      "cpe": "cpe:2.3:a:unicode-trie:unicode-trie:0.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/unicode-trie@0.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode-trie:unicode_trie:0.3.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_trie:unicode-trie:0.3.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_trie:unicode_trie:0.3.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode-trie:0.3.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode_trie:0.3.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/unicode-trie@2.0.0?package-id=8933b9fffc1257e4",
-      "type": "library",
-      "name": "unicode-trie",
-      "version": "2.0.0",
-      "cpe": "cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/unicode-trie@2.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/universalify@0.1.2?package-id=db973062fe16355b",
-      "type": "library",
-      "name": "universalify",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:universalify:universalify:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/universalify@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=4bb96cb56ddb856c",
-      "type": "library",
-      "name": "unpipe",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/unpipe@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/upper-case@1.1.3?package-id=848d2faf118de18c",
-      "type": "library",
-      "name": "upper-case",
-      "version": "1.1.3",
-      "cpe": "cpe:2.3:a:upper-case:upper-case:1.1.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/upper-case@1.1.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper-case:upper_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case:upper-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case:upper_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper:upper-case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper:upper_case:1.1.3:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/upper-case-first@1.1.2?package-id=8f51eae2820e5258",
-      "type": "library",
-      "name": "upper-case-first",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:upper-case-first:upper-case-first:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/upper-case-first@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper-case-first:upper_case_first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case_first:upper-case-first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case_first:upper_case_first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper-case:upper-case-first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper-case:upper_case_first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case:upper-case-first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper_case:upper_case_first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper:upper-case-first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:upper:upper_case_first:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uri-js@4.4.1?package-id=0c05bb1053097321",
-      "type": "library",
-      "name": "uri-js",
-      "version": "4.4.1",
-      "cpe": "cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/uri-js@4.4.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uri-path@1.0.0?package-id=5c503f9399465928",
-      "type": "library",
-      "name": "uri-path",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:uri-path:uri-path:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/uri-path@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uri-path:uri_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uri_path:uri-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uri_path:uri_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uri:uri-path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:uri:uri_path:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=905cf430e988e0f0",
-      "type": "library",
-      "name": "util-deprecate",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/util-deprecate@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=67f882fc30262618",
-      "type": "library",
-      "name": "util-deprecate",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/util-deprecate@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=6ee437096ab03722",
-      "type": "library",
-      "name": "utils-merge",
-      "version": "1.0.1",
-      "cpe": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/utils-merge@1.0.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uuid@3.1.0?package-id=3d1b67143e1bbf8f",
-      "type": "library",
-      "name": "uuid",
-      "version": "3.1.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:uuid:uuid:3.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/uuid@3.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uuid@3.4.0?package-id=b6b8801854fb3266",
-      "type": "library",
-      "name": "uuid",
-      "version": "3.4.0",
-      "cpe": "cpe:2.3:a:uuid:uuid:3.4.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/uuid@3.4.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/uws@9.14.0?package-id=e3d813d16941a1f3",
-      "type": "library",
-      "name": "uws",
-      "version": "9.14.0",
-      "cpe": "cpe:2.3:a:uws_project:uws:9.14.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/uws@9.14.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4?package-id=9da79ac067ceb67c",
-      "type": "library",
-      "name": "validate-npm-package-license",
-      "version": "3.0.4",
-      "cpe": "cpe:2.3:a:validate-npm-package-license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate-npm-package-license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm_package_license:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm_package_license:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate-npm-package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate-npm-package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm_package:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm_package:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate-npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate-npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate_npm:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate:validate-npm-package-license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:validate:validate_npm_package_license:3.0.4:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/validator@10.11.0?package-id=0e2f1caa780b5c4c",
-      "type": "library",
-      "name": "validator",
-      "version": "10.11.0",
-      "cpe": "cpe:2.3:a:validator_project:validator:10.11.0:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/validator@10.11.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/vary@1.1.2?package-id=418faca4c8ff787e",
-      "type": "library",
-      "name": "vary",
-      "version": "1.1.2",
-      "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/vary@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/verror@1.10.0?package-id=247542036c018edc",
-      "type": "library",
-      "name": "verror",
-      "version": "1.10.0",
-      "licenses": [
-        {
-          "license": {
-            "id": "MIT"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:verror:verror:1.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/verror@1.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/verror@1.10.0?package-id=c32d09d0f79240d2",
-      "type": "library",
-      "name": "verror",
-      "version": "1.10.0",
-      "cpe": "cpe:2.3:a:verror:verror:1.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/verror@1.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/vlq@0.2.3?package-id=2d0134c87fe002a9",
-      "type": "library",
-      "name": "vlq",
-      "version": "0.2.3",
-      "cpe": "cpe:2.3:a:vlq:vlq:0.2.3:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/vlq@0.2.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/walkdir@0.0.11?package-id=bd60ac8b8af8716d",
-      "type": "library",
-      "name": "walkdir",
-      "version": "0.0.11",
-      "cpe": "cpe:2.3:a:walkdir:walkdir:0.0.11:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/walkdir@0.0.11",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/which@1.3.1?package-id=a4053de88646c1de",
-      "type": "library",
-      "name": "which",
-      "version": "1.3.1",
-      "cpe": "cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/which@1.3.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1?package-id=d10e71915dd13c48",
-      "type": "library",
-      "name": "which-boxed-primitive",
-      "version": "1.1.1",
-      "cpe": "cpe:2.3:a:which-boxed-primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/which-boxed-primitive@1.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-boxed-primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_boxed_primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_boxed_primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/which-collection@1.0.2?package-id=6d7f3d8298e6dac0",
-      "type": "library",
-      "name": "which-collection",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:which-collection:which-collection:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/which-collection@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-collection:which_collection:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_collection:which-collection:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_collection:which_collection:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which-collection:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which_collection:1.0.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/which-pm-runs@1.1.0?package-id=f77c6e11272a00a1",
-      "type": "library",
-      "name": "which-pm-runs",
-      "version": "1.1.0",
-      "cpe": "cpe:2.3:a:which-pm-runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/which-pm-runs@1.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-pm-runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_pm_runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_pm_runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/which-typed-array@1.1.19?package-id=c162f4f2991a10d3",
-      "type": "library",
-      "name": "which-typed-array",
-      "version": "1.1.19",
-      "cpe": "cpe:2.3:a:which-typed-array:which-typed-array:1.1.19:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/which-typed-array@1.1.19",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-typed-array:which_typed_array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_typed_array:which-typed-array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_typed_array:which_typed_array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-typed:which-typed-array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which-typed:which_typed_array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_typed:which-typed-array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which_typed:which_typed_array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which-typed-array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:which:which_typed_array:1.1.19:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wide-align@1.1.2?package-id=19cd6f714f9fbade",
-      "type": "library",
-      "name": "wide-align",
-      "version": "1.1.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wide-align@1.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide-align:wide_align:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide_align:wide-align:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide_align:wide_align:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide:wide-align:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide:wide_align:1.1.2:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=a095a97d08f7175c",
-      "type": "library",
-      "name": "wide-align",
-      "version": "1.1.5",
-      "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wide-align@1.1.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/window-size@0.1.0?package-id=0e22562ff6c17e1b",
-      "type": "library",
-      "name": "window-size",
-      "version": "0.1.0",
-      "cpe": "cpe:2.3:a:window-size:window-size:0.1.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/window-size@0.1.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:window-size:window_size:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:window_size:window-size:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:window_size:window_size:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:window:window-size:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:window:window_size:0.1.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wkx@0.4.8?package-id=65b137643d800c66",
-      "type": "library",
-      "name": "wkx",
-      "version": "0.4.8",
-      "cpe": "cpe:2.3:a:wkx:wkx:0.4.8:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wkx@0.4.8",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/word-wrap@1.2.5?package-id=7f26e72d3399166e",
-      "type": "library",
-      "name": "word-wrap",
-      "version": "1.2.5",
-      "cpe": "cpe:2.3:a:word-wrap_project:word-wrap:1.2.5:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/word-wrap@1.2.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wordwrap@0.0.2?package-id=178ba3bca34565a7",
-      "type": "library",
-      "name": "wordwrap",
-      "version": "0.0.2",
-      "cpe": "cpe:2.3:a:wordwrap:wordwrap:0.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wordwrap@0.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=d48cbe0a860551d1",
-      "type": "library",
-      "name": "wrappy",
-      "version": "1.0.2",
-      "licenses": [
-        {
-          "license": {
-            "id": "ISC"
-          }
-        }
-      ],
-      "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wrappy@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=4ce3ac123dc1edc5",
-      "type": "library",
-      "name": "wrappy",
-      "version": "1.0.2",
-      "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/wrappy@1.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/ws@3.3.3?package-id=6767d4279e3ab816",
-      "type": "library",
-      "name": "ws",
-      "version": "3.3.3",
-      "cpe": "cpe:2.3:a:ws_project:ws:3.3.3:*:*:*:*:node.js:*:*",
-      "purl": "pkg:npm/ws@3.3.3",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/x-xss-protection@1.0.0?package-id=030d78ecf0eec81d",
-      "type": "library",
-      "name": "x-xss-protection",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:x-xss-protection:x-xss-protection:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/x-xss-protection@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x-xss-protection:x_xss_protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x_xss_protection:x-xss-protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x_xss_protection:x_xss_protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x-xss:x-xss-protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x-xss:x_xss_protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x_xss:x-xss-protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x_xss:x_xss_protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x:x-xss-protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:x:x_xss_protection:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/xml-char-classes@1.0.0?package-id=354e9ebb87c279fc",
-      "type": "library",
-      "name": "xml-char-classes",
-      "version": "1.0.0",
-      "cpe": "cpe:2.3:a:xml-char-classes:xml-char-classes:1.0.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/xml-char-classes@1.0.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml-char-classes:xml_char_classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml_char_classes:xml-char-classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml_char_classes:xml_char_classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml-char:xml-char-classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml-char:xml_char_classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml_char:xml-char-classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml_char:xml_char_classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml:xml-char-classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xml:xml_char_classes:1.0.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/xmlhttprequest-ssl@1.5.5?package-id=b3625fae8eea604f",
-      "type": "library",
-      "name": "xmlhttprequest-ssl",
-      "version": "1.5.5",
-      "cpe": "cpe:2.3:a:xmlhttprequest-ssl:xmlhttprequest-ssl:1.5.5:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/xmlhttprequest-ssl@1.5.5",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xmlhttprequest-ssl:xmlhttprequest_ssl:1.5.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xmlhttprequest_ssl:xmlhttprequest-ssl:1.5.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xmlhttprequest_ssl:xmlhttprequest_ssl:1.5.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xmlhttprequest:xmlhttprequest-ssl:1.5.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:xmlhttprequest:xmlhttprequest_ssl:1.5.5:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/xtend@4.0.2?package-id=cdd6310dbf6673e2",
-      "type": "library",
-      "name": "xtend",
-      "version": "4.0.2",
-      "cpe": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/xtend@4.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/yallist@3.1.1?package-id=602f9d018a3d7b61",
-      "type": "library",
-      "name": "yallist",
-      "version": "3.1.1",
-      "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/yallist@3.1.1",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/yargs@3.10.0?package-id=adcd66bc59dd3341",
-      "type": "library",
-      "name": "yargs",
-      "version": "3.10.0",
-      "cpe": "cpe:2.3:a:yargs:yargs:3.10.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/yargs@3.10.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/yeast@0.1.2?package-id=04a2bfeca5869adf",
-      "type": "library",
-      "name": "yeast",
-      "version": "0.1.2",
-      "cpe": "cpe:2.3:a:yeast:yeast:0.1.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/yeast@0.1.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/z85@0.0.2?package-id=4a4bfa27f8b05d58",
-      "type": "library",
-      "name": "z85",
-      "version": "0.0.2",
-      "cpe": "cpe:2.3:a:z85:z85:0.0.2:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/z85@0.0.2",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:github/zaproxy/action-baseline@v0.14.0?package-id=0292de07b10dc904",
-      "type": "library",
-      "name": "zaproxy/action-baseline",
-      "version": "v0.14.0",
-      "cpe": "cpe:2.3:a:zaproxy\\/action-baseline:zaproxy\\/action-baseline:v0.14.0:*:*:*:*:*:*:*",
-      "purl": "pkg:github/zaproxy/action-baseline@v0.14.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "github-actions-usage-cataloger"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "github-action"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "github-actions-use-statement"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zaproxy\\/action-baseline:zaproxy\\/action_baseline:v0.14.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zaproxy\\/action_baseline:zaproxy\\/action-baseline:v0.14.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zaproxy\\/action_baseline:zaproxy\\/action_baseline:v0.14.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zaproxy\\/action:zaproxy\\/action-baseline:v0.14.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zaproxy\\/action:zaproxy\\/action_baseline:v0.14.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/.github/workflows/zap_scan.yml"
-        }
-      ]
-    },
-    {
-      "bom-ref": "pkg:npm/zip-stream@1.2.0?package-id=71375c93fd34f885",
-      "type": "library",
-      "name": "zip-stream",
-      "version": "1.2.0",
-      "cpe": "cpe:2.3:a:zip-stream:zip-stream:1.2.0:*:*:*:*:*:*:*",
-      "purl": "pkg:npm/zip-stream@1.2.0",
-      "properties": [
-        {
-          "name": "syft:package:foundBy",
-          "value": "javascript-lock-cataloger"
-        },
-        {
-          "name": "syft:package:language",
-          "value": "javascript"
-        },
-        {
-          "name": "syft:package:type",
-          "value": "npm"
-        },
-        {
-          "name": "syft:package:metadataType",
-          "value": "javascript-npm-package-lock-entry"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zip-stream:zip_stream:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zip_stream:zip-stream:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zip_stream:zip_stream:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zip:zip-stream:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:cpe23",
-          "value": "cpe:2.3:a:zip:zip_stream:1.2.0:*:*:*:*:*:*:*"
-        },
-        {
-          "name": "syft:location:0:path",
-          "value": "/ftp/package-lock.json"
-        }
-      ]
-    },
-    {
-      "bom-ref": "7561d461b00ff11d",
-      "type": "file",
-      "name": "/src/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "21fcd8e13a6544d20e4c9d3fdee4139fa7769be6"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "9f24fcc9e4d1c024178d9c993f7c2bdabe5d2ff74983f50297732b5af126460e"
-        }
-      ]
-    },
-    {
-      "bom-ref": "5e19ea2e1f9dfee4",
-      "type": "file",
-      "name": "/src/.github/workflows/codeql-analysis.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "0edc956c8395c5ae9201ef4a18a86cfe7d5a38d5"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "7a33e20d31a182bbc159bf63f9ef3d541d278410cae53f520aec03caf9205a31"
-        }
-      ]
-    },
-    {
-      "bom-ref": "b8b771187bb7fcf9",
-      "type": "file",
-      "name": "/src/.github/workflows/lint-fixer.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "61c91d5a72ab905d9bc7828404734d0c3aee5fba"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "8a40a60ce36d2a633854ac3367004145ecca307ee90c0d4139a46fb2fad5906c"
-        }
-      ]
-    },
-    {
-      "bom-ref": "fe8047766b0ba755",
-      "type": "file",
-      "name": "/src/.github/workflows/lock.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "5ec6c3c38cfda2be8bbe795db7fe0ddebf09c611"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "47a6c0efa1ab00e18802604d2af7bb68ff580673de24b392d36eafd3b1025e48"
-        }
-      ]
-    },
-    {
-      "bom-ref": "516772aaccf2f4ac",
-      "type": "file",
-      "name": "/src/.github/workflows/rebase.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "5a66f6becc3e2e14635e5370b17537cb4bf558b5"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "c3947358711935936ab6e33c9171c0aedb448183ddc35e7806dadac6f8401c36"
-        }
-      ]
-    },
-    {
-      "bom-ref": "cc210d8a1a5f5704",
-      "type": "file",
-      "name": "/src/.github/workflows/release.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "8f9c171ad9cc3f4776ae3611bde1d377af17f30f"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "6bf837b9ed0d22112685fd81ac5c6ec3f90711ab55b01fba28bc7d1a00a3a2c3"
-        }
-      ]
-    },
-    {
-      "bom-ref": "ffd6ebf112245b93",
-      "type": "file",
-      "name": "/src/.github/workflows/stale.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "d44fb1af120edf15516491bbad1d7b4fab7b0969"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "3c8bac797678b96f089394e5ed1ecc77804e89cbf79aac564aa798edda129e2d"
-        }
-      ]
-    },
-    {
-      "bom-ref": "a4c40b9465d32f4a",
-      "type": "file",
-      "name": "/src/.github/workflows/update-challenges-www.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "56b6ce12314446141e476e24a0cc981d9fcd2957"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "a46cbca3b98c16f56094eead5307f27795433112b338ebad68567ceae0869000"
-        }
-      ]
-    },
-    {
-      "bom-ref": "4c1498a12cbb5cdf",
-      "type": "file",
-      "name": "/src/.github/workflows/update-news-www.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "7169bd286cd700e2998a5a98b2ae6c91a2e185d6"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "9558b46771e698db80627cda94c188bed9c394bc7e493fcdece0aef4e710adb7"
-        }
-      ]
-    },
-    {
-      "bom-ref": "ec7b5413bd4b3a74",
-      "type": "file",
-      "name": "/src/.github/workflows/zap_scan.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "2da12f6b5252df45f2310d4fd89b06db9f29322d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "c7a0860105fc7fe365b7710fb1059cadbe7300f6047ce4f503d2f81aa545a818"
-        }
-      ]
-    },
-    {
-      "bom-ref": "f754f4eeb36e6809",
-      "type": "file",
-      "name": "/src/ftp/package-lock.json",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "63385b937118a66dba665f44777003c0340bb7a5"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "019cea767d30fd12ef0d898272eb80c4f95f30b241063bdf1a3ad84ae6695178"
-        }
-      ]
-    },
-    {
-      "bom-ref": "5ff376b3db947511",
-      "type": "file",
-      "name": "/src/node_modules/@mapbox/node-pre-gyp/.github/workflows/codeql.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "0baf7c9a48691d49ffc13257d0f762201883b7a0"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "1794b06ba57858d4af8b1ab36aa15a3c1db9cfa5e37df1bc89e2472038c9ee07"
-        }
-      ]
-    },
-    {
-      "bom-ref": "a59c06faa8b1f418",
-      "type": "file",
-      "name": "/src/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "d8b9d52a449215289e7f86f6d1b6cf34cf7b3bff"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "d1e61aa7fafbbcc49d7fb88a78c59ce2c10277e7eb4a3a38d8d26e355b9c0bea"
-        }
-      ]
-    },
-    {
-      "bom-ref": "1411d3295eed7c2e",
-      "type": "file",
-      "name": "/src/node_modules/ajv-formats-draft2019/.github/workflows/node.js.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "4e72aeacfd6f6dab6dcc150c785242ccdf3bc5aa"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "6a14e2fece4ea66adf104149b38b392f8bf127591f747b6683c7bfe8ec903964"
-        }
-      ]
-    },
-    {
-      "bom-ref": "70e7071acbb8d0c2",
-      "type": "file",
-      "name": "/src/node_modules/babel-preset-current-node-syntax/.github/workflows/nodejs.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "e1c21cf5efac7f291ab0e88ffc62040351773b5c"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "a9a27c7bff7686df17b07c0fd92b568f63317d02a938e71958f2720f06e5bf61"
-        }
-      ]
-    },
-    {
-      "bom-ref": "5ba40cf7d5aca19e",
-      "type": "file",
-      "name": "/src/node_modules/busboy/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "ed17e749dd7bbfaad813a7c8c26bc326526c2e9e"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "5c9c3871cbded8303801b572ec8c873e61c4286e15470d57b758522a2a6083f0"
-        }
-      ]
-    },
-    {
-      "bom-ref": "8d6c8207e0a0d1a8",
-      "type": "file",
-      "name": "/src/node_modules/busboy/.github/workflows/lint.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "954cdc06cee4b5c6235cf29df588ad9937f40341"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "3dbdd9b8482cf250da0d4160e61f968918bf119a5808e553270733fc11fcfc21"
-        }
-      ]
-    },
-    {
-      "bom-ref": "0670d30020186cf1",
-      "type": "file",
-      "name": "/src/node_modules/fast-uri/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "328db8f9be51c463bc51ee1736d2d32412f19b4e"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "ff5994b9a05dc417bdbc9c773c68ce461a6b546de1059bce1fd59861cd11bce6"
-        }
-      ]
-    },
-    {
-      "bom-ref": "ee79b4b9796161ad",
-      "type": "file",
-      "name": "/src/node_modules/fast-uri/.github/workflows/package-manager-ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "562ababad023d34ccd7366cd110d2b9abd298e61"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "85d285b8223c40e10a223d3086749c4c0fe351f6d63aa18f1b6ec6bb0f68d248"
-        }
-      ]
-    },
-    {
-      "bom-ref": "28c718f924e0e3af",
-      "type": "file",
-      "name": "/src/node_modules/fastq/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "6d2fb0eb7e693f9697f4945e992728a74710378d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "c8c1b113b0e393b0f55e01edd953a2fdda6744de835752043e3051299878c705"
-        }
-      ]
-    },
-    {
-      "bom-ref": "156a487e155889b2",
-      "type": "file",
-      "name": "/src/node_modules/grunt-legacy-log/.github/workflows/test.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "0883ccd7b6691e179f064a399a9e25cf398e0d92"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "3bc4db6bb60abcf9e42270d54817ced500e573c3193f27f28751911c859a6ecd"
-        }
-      ]
-    },
-    {
-      "bom-ref": "ec4e0c3d973d0fc4",
-      "type": "file",
-      "name": "/src/node_modules/grunt-legacy-util/.github/workflows/test.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a07bc8ef317b1e08fb6660ab448d95df2226df4b"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "d5aefeb76b41821885d02bc564a12d13709d9c01e5e291bc08b7ae1a180da92b"
-        }
-      ]
-    },
-    {
-      "bom-ref": "0b400a375a44dd73",
-      "type": "file",
-      "name": "/src/node_modules/json-schema-traverse/.github/workflows/build.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "1911fc3862128b3f9af3efef35dab9cb2c91d6e6"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "f0f23bb3b380800e214b19abfd69c1b093131bb030c056fabdd9cddec7e785c5"
-        }
-      ]
-    },
-    {
-      "bom-ref": "b8d9241ecd7ffc6a",
-      "type": "file",
-      "name": "/src/node_modules/json-schema-traverse/.github/workflows/publish.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "5a7453a7516dc2852a8e00de2e8be308c7169501"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "56cbec53748d486f04b5c37bec8ea5e5588e02fb2882db8ce36c6e9689bfd2fc"
-        }
-      ]
-    },
-    {
-      "bom-ref": "ed67e80ba7dc60c2",
-      "type": "file",
-      "name": "/src/node_modules/juicy-chat-bot/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a5ff22c5f4b31c55ef9585b52fba146f53969360"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "6ee99a8bc43f668c93370a4cd418f95161c742feec25c4564666b036583f710a"
-        }
-      ]
-    },
-    {
-      "bom-ref": "c541a8eeed4d02a4",
-      "type": "file",
-      "name": "/src/node_modules/juicy-chat-bot/.github/workflows/lint-fixer.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "22705e5cdb354e6558656657692689a42c29d971"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "b495ea5e1707e218e11c4bb0024ebb8163791d4a671f48ef92e35bc9beaf3701"
-        }
-      ]
-    },
-    {
-      "bom-ref": "35fec5effd4698de",
-      "type": "file",
-      "name": "/src/node_modules/juicy-chat-bot/.github/workflows/release.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "b114e19e239340dc78f43d3134cb6f1650819207"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "1ec1519694682e4678a2added3e7e0ea036b643c9db5d4849a7a688f61ed0205"
-        }
-      ]
-    },
-    {
-      "bom-ref": "8a05f5a6056b6215",
-      "type": "file",
-      "name": "/src/node_modules/libxmljs2/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a57a0ddc19cc77e94e2dd1074521978d2694144f"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "c98eb730518078c38edc410a3f1a24916e67786f9adf42c3683a1da2b386c094"
-        }
-      ]
-    },
-    {
-      "bom-ref": "93d49b4668e85e0b",
-      "type": "file",
-      "name": "/src/node_modules/libxmljs2/node_modules/simple-get/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "13958d9361649b2bff526339ce28b2999f156864"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "81797e1b59d82968b131bf5d086fb900a6a0e9b7e733048cec1d630d358156ec"
-        }
-      ]
-    },
-    {
-      "bom-ref": "1a2667970065c78f",
-      "type": "file",
-      "name": "/src/node_modules/nan/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a21beb03751d5c22e59ee20a7a540cd813c28a22"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "8aec9c18a51c840039b2b610aeb69b9799843fb74bf617d3203d0b35f0bb372f"
-        }
-      ]
-    },
-    {
-      "bom-ref": "c8a8328e6adb76fb",
-      "type": "file",
-      "name": "/src/node_modules/needle/.github/workflows/nodejs.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "6fea1066769485d03260a9c11a8eeeca8841fcbd"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "b655034de09624581a1d93322a7d254222d506645a7eddc1798d9fe410960f65"
-        }
-      ]
-    },
-    {
-      "bom-ref": "9cda101080fa530c",
-      "type": "file",
-      "name": "/src/node_modules/node-abi/.github/workflows/update-abi.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "aea4313333be55a253d2dc948da526640581f25d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "4a2bca71b02526d6a87ff1100f5f0387bd98ea2eea682502cfdab54319f1b67d"
-        }
-      ]
-    },
-    {
-      "bom-ref": "3fc07b6df2dd90e2",
-      "type": "file",
-      "name": "/src/node_modules/replace/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "598cc911a62f991542f670e565774ba735989cb0"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "dcc43a4761ffe6e81f04e5dfd876f2f7aa2fc677b41f3cadb057121018ce9883"
-        }
-      ]
-    },
-    {
-      "bom-ref": "7eee1dce79d34bd0",
-      "type": "file",
-      "name": "/src/node_modules/reusify/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "46a64a3a41de42fb7efbab61e8c8662f8181e602"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "2518554c9d38a88c89d09c005367745909dc55db127560856cb044abbe698117"
-        }
-      ]
-    },
-    {
-      "bom-ref": "fcd332d18dc8b20c",
-      "type": "file",
-      "name": "/src/node_modules/rfdc/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "509a832b7ba9226d4225e2e2f102569c80f7a7f6"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "940555a1f0a9b3a203a9aec908e110493254c778beb9228f643248fce8c11c5f"
-        }
-      ]
-    },
-    {
-      "bom-ref": "2f870e7d88ad2538",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/napi-build-utils/.github/workflows/run-npm-tests.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a57a0ddc19cc77e94e2dd1074521978d2694144f"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "c98eb730518078c38edc410a3f1a24916e67786f9adf42c3683a1da2b386c094"
-        }
-      ]
-    },
-    {
-      "bom-ref": "440717e5dfddbc68",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/release-please.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a1461aecd66d147d566e274fc8340f3de668ef7e"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "7d2f9d75c673152b79e94cf57c0ccb4002a99cfb430e9cb7a1630016a40d8f26"
-        }
-      ]
-    },
-    {
-      "bom-ref": "de634bf20c9ed293",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/tests.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "c7caeb8fc0e2ca9c1ea0126f600b5be6d9b08daf"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "461b0e12318f7fa99e8670ba52ffa42804e620bc5e0e0844195dee1b2cf455d5"
-        }
-      ]
-    },
-    {
-      "bom-ref": "98b1d9332c255837",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/.github/workflows/visual-studio.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "d0dacd97a8df3636c2e4c41066a8782348d12e3e"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "445d19d056a7087a62d1dc877f5566705bbc2f91d184a8df936caeee2d6d685b"
-        }
-      ]
-    },
-    {
-      "bom-ref": "27ac0b88970b47eb",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/Python_tests.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "9fbfc2e2188f2c767fbbbb5010c4121f9f3698be"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "1d65a3e0e14c9c67700b3a80a34371dc9934a98d11b41e506abc498a8901396b"
-        }
-      ]
-    },
-    {
-      "bom-ref": "e263a74c250a3bcb",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/node-gyp.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "606e3ea9c680c3ce1bc8de58c23e299f2d2cd873"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "a0ae4c07190e1369d7c7ed11efce2a743d0c2bd986e2f86fd43f596454e3a545"
-        }
-      ]
-    },
-    {
-      "bom-ref": "8bc736724c0ddfd0",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/nodejs-windows.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a348988efe437365c2e1f8c3c0c53ab4266d16e8"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "5e20addc8586796f772a0aa34eacc58d157c2b49c2c867976b718db3501da741"
-        }
-      ]
-    },
-    {
-      "bom-ref": "aff4c17b72feebe7",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/node-gyp/gyp/.github/workflows/release-please.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "a0a145c69d8f8d32f56e030d38bfa2822417862c"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "913161bdef29587d2f0b6bbfc0e4c884d011e16aed4692dd054f5ff5388133b5"
-        }
-      ]
-    },
-    {
-      "bom-ref": "dc5f718d05d11449",
-      "type": "file",
-      "name": "/src/node_modules/sqlite3/node_modules/simple-get/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "13958d9361649b2bff526339ce28b2999f156864"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "81797e1b59d82968b131bf5d086fb900a6a0e9b7e733048cec1d630d358156ec"
-        }
-      ]
-    },
-    {
-      "bom-ref": "9ab14596fb383648",
-      "type": "file",
-      "name": "/src/node_modules/streamsearch/.github/workflows/ci.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "d7f4dc6a11b7b9fb0da1c509aa1d63b920e2650d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "ae83a8862cc650e1b6ee1214ec6668d53f0a9600db4e7fdab286d18355405652"
-        }
-      ]
-    },
-    {
-      "bom-ref": "96fa00e77b6e4b30",
-      "type": "file",
-      "name": "/src/node_modules/streamsearch/.github/workflows/lint.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "954cdc06cee4b5c6235cf29df588ad9937f40341"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "3dbdd9b8482cf250da0d4160e61f968918bf119a5808e553270733fc11fcfc21"
-        }
-      ]
-    },
-    {
-      "bom-ref": "a18c37edb20bd531",
-      "type": "file",
-      "name": "/src/node_modules/with/.github/workflows/rollingversions-canary.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "8927dd71b2dad6dd508e13d79cfe60a63a87399d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "15de1d3050506b6fb6bea6ee805446d013c2874ed36ab6c3f8af8c7e972ca18a"
-        }
-      ]
-    },
-    {
-      "bom-ref": "740ce6b6a3f5a21f",
-      "type": "file",
-      "name": "/src/node_modules/with/.github/workflows/rollingversions.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "ae7ae17f4b553643f745660b943a68aab63bc37d"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "6369a907da7a643ea38d94727e3847e698d080f601230a38deafdebfa3966d05"
-        }
-      ]
-    },
-    {
-      "bom-ref": "5f2a5171aec5e409",
-      "type": "file",
-      "name": "/src/node_modules/with/.github/workflows/test.yml",
-      "hashes": [
-        {
-          "alg": "SHA-1",
-          "content": "2208d163f5bbf8aaca00ec2fc63ff3d5420b8346"
-        },
-        {
-          "alg": "SHA-256",
-          "content": "174b85d8ca6e256de11b2fa943bbc9ccd5b8f199b2efc49206e03f24574faf6d"
-        }
-      ]
-    }
-  ]
-}