diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 00000000..4a0e1c27
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,16 @@
+## Goal
+
+
+## Changes
+
+
+## Testing
+
+
+## Artifacts & Screenshots
+
+
+## Checklist
+- [ ] Clear title
+- [ ] Docs updated
+- [ ] No secrets in code
diff --git a/labs/lab10/imports/import-nuclei-results.json.json b/labs/lab10/imports/import-nuclei-results.json.json
new file mode 100644
index 00000000..7d717f6a
--- /dev/null
+++ b/labs/lab10/imports/import-nuclei-results.json.json
@@ -0,0 +1 @@
+{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":4,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":20,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":20},"low":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"medium":{"active":1,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":1},"high":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":21,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":21}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Nuclei Scan","close_old_findings":false,"close_old_findings_product_scope":false,"test":4}
\ No newline at end of file
diff --git a/labs/lab10/imports/import-semgrep-results.standard.json b/labs/lab10/imports/import-semgrep-results.standard.json
new file mode 100644
index 00000000..d604d599
--- /dev/null
+++ b/labs/lab10/imports/import-semgrep-results.standard.json
@@ -0,0 +1 @@
+{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":6,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"low":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"medium":{"active":4,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":4},"high":{"active":5,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":5},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":9,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":9}}},"pro":["Did you know, Pro has an automated no-code connector for Semgrep JSON Report? Try today for free or email us at hello@defectdojo.com"],"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Semgrep JSON Report","close_old_findings":false,"close_old_findings_product_scope":false,"test":6}
\ No newline at end of file
diff --git a/labs/lab10/imports/import-trivy-vuln-detailed.json.json b/labs/lab10/imports/import-trivy-vuln-detailed.json.json
new file mode 100644
index 00000000..695b4918
--- /dev/null
+++ b/labs/lab10/imports/import-trivy-vuln-detailed.json.json
@@ -0,0 +1 @@
+{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":3,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"low":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"medium":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"high":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"Trivy Operator Scan","close_old_findings":false,"close_old_findings_product_scope":false,"test":3}
\ No newline at end of file
diff --git a/labs/lab10/imports/import-zap-report-noauth.xml.json b/labs/lab10/imports/import-zap-report-noauth.xml.json
new file mode 100644
index 00000000..0e24adcb
--- /dev/null
+++ b/labs/lab10/imports/import-zap-report-noauth.xml.json
@@ -0,0 +1 @@
+{"minimum_severity":"Info","active":false,"verified":false,"endpoint_to_add":null,"product_type_name":"Engineering","product_name":"Juice Shop","engagement_name":"Labs Security Testing","auto_create_context":true,"deduplication_on_engagement":false,"lead":null,"push_to_jira":false,"api_scan_configuration":null,"create_finding_groups_for_all_findings":true,"test_id":5,"engagement_id":1,"product_id":1,"product_type_id":2,"statistics":{"after":{"info":{"active":3,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":3},"low":{"active":5,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":5},"medium":{"active":2,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":2},"high":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"critical":{"active":0,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":0},"total":{"active":10,"verified":0,"duplicate":0,"false_p":0,"out_of_scope":0,"is_mitigated":0,"risk_accepted":0,"total":10}}},"apply_tags_to_findings":false,"apply_tags_to_endpoints":false,"scan_type":"ZAP Scan","close_old_findings":false,"close_old_findings_product_scope":false,"test":5}
\ No newline at end of file
diff --git a/labs/lab10/imports/run-imports.sh b/labs/lab10/imports/run-imports.sh
index 0f0e33c9..dad08a2e 100644
--- a/labs/lab10/imports/run-imports.sh
+++ b/labs/lab10/imports/run-imports.sh
@@ -63,8 +63,8 @@ if $have_jq; then
if [[ -z "$val" ]]; then val="$fallback"; fi
echo "$val"
}
- SCAN_ZAP="${SCAN_ZAP:-$(choose_type '^ZAP' 'ZAP Scan')}"
- SCAN_SEMGREP="${SCAN_SEMGREP:-$(choose_type '^Semgrep' 'Semgrep JSON Report')}"
+ SCAN_ZAP="${SCAN_ZAP:-$(choose_type '^ZAP Scan$' 'ZAP Scan')}"
+ SCAN_SEMGREP="${SCAN_SEMGREP:-$(choose_type '^Semgrep JSON Report$' 'Semgrep JSON Report')}"
SCAN_TRIVY="${SCAN_TRIVY:-$(choose_type '^Trivy' 'Trivy Scan')}"
SCAN_NUCLEI="${SCAN_NUCLEI:-$(choose_type '^Nuclei' 'Nuclei Scan')}"
# Grype importer (commonly named "Anchore Grype")
@@ -115,7 +115,10 @@ import_scan() {
}
# Candidate paths per tool
-zap_file="labs/lab5/zap/zap-report-noauth.json"
+zap_file="labs/lab5/zap/zap-report-noauth.xml"
+if [[ ! -f "$zap_file" ]]; then
+ zap_file="labs/lab5/zap/zap-report-noauth.json"
+fi
semgrep_file="labs/lab5/semgrep/semgrep-results.json"
trivy_file="labs/lab4/trivy/trivy-vuln-detailed.json"
nuclei_file="labs/lab5/nuclei/nuclei-results.json"
diff --git a/labs/lab10/imports/semgrep-lab10-rules.yml b/labs/lab10/imports/semgrep-lab10-rules.yml
new file mode 100644
index 00000000..135059c7
--- /dev/null
+++ b/labs/lab10/imports/semgrep-lab10-rules.yml
@@ -0,0 +1,61 @@
+rules:
+ - id: lab10-express-open-redirect
+ languages:
+ - javascript
+ - typescript
+ severity: WARNING
+ message: Unvalidated redirect target can allow open redirect attacks.
+ patterns:
+ - pattern-either:
+ - pattern: $RES.redirect($REQ.query.$PARAM)
+ - pattern: $RES.redirect($REQ.body.$PARAM)
+ - pattern: $RES.redirect($PARAM)
+ metadata:
+ category: security
+ cwe:
+ - "CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"
+ owasp:
+ - A01:2021 - Broken Access Control
+
+ - id: lab10-hardcoded-jwt-secret
+ languages:
+ - javascript
+ - typescript
+ severity: ERROR
+ message: Hardcoded JWT secret or signing key detected.
+ patterns:
+ - pattern-either:
+ - pattern: jwt.sign($DATA, "...", ...)
+ - pattern: jwt.verify($TOKEN, "...", ...)
+ - pattern: $SECRET = "..."
+ - metavariable-regex:
+ metavariable: $SECRET
+ regex: (?i).*(jwt|secret|key).*
+ metadata:
+ category: security
+ cwe:
+ - "CWE-798: Use of Hard-coded Credentials"
+ owasp:
+ - A07:2021 - Identification and Authentication Failures
+
+ - id: lab10-child-process-command-injection
+ languages:
+ - javascript
+ - typescript
+ severity: ERROR
+ message: User-controlled data in child_process execution can lead to command injection.
+ patterns:
+ - pattern-either:
+ - pattern: child_process.exec($CMD, ...)
+ - pattern: exec($CMD, ...)
+ - pattern: shell.exec($CMD, ...)
+ - pattern-inside: |
+ function ... (..., $REQ, ...) {
+ ...
+ }
+ metadata:
+ category: security
+ cwe:
+ - "CWE-78: OS Command Injection"
+ owasp:
+ - A03:2021 - Injection
diff --git a/labs/lab10/report/docker-compose-ps.txt b/labs/lab10/report/docker-compose-ps.txt
new file mode 100644
index 00000000..78470bd3
--- /dev/null
+++ b/labs/lab10/report/docker-compose-ps.txt
@@ -0,0 +1,7 @@
+NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS
+django-defectdojo-celerybeat-1 defectdojo/defectdojo-django:latest "/wait-for-it.sh pos…" celerybeat 37 minutes ago Up 35 minutes
+django-defectdojo-celeryworker-1 defectdojo/defectdojo-django:latest "/wait-for-it.sh pos…" celeryworker 37 minutes ago Up 35 minutes
+django-defectdojo-nginx-1 defectdojo/defectdojo-nginx:latest "/entrypoint-nginx.sh" nginx 35 minutes ago Up 35 minutes 80/tcp, 0.0.0.0:8443->8443/tcp, [::]:8443->8443/tcp, 0.0.0.0:8081->8080/tcp, [::]:8081->8080/tcp
+django-defectdojo-postgres-1 postgres:18.3-alpine@sha256:4da1a4828be12604092fa55311276f08f9224a74a62dcb4708bd7439e2a03911 "docker-entrypoint.s…" postgres 37 minutes ago Up 37 minutes 5432/tcp
+django-defectdojo-uwsgi-1 defectdojo/defectdojo-django:latest "/wait-for-it.sh pos…" uwsgi 37 minutes ago Up 35 minutes
+django-defectdojo-valkey-1 valkey/valkey:9.0.3-alpine@sha256:84c96f47ebe197e635cd3ddbe3ab74e8bdf783cf3befbfb1c36387275c1cd5d5 "docker-entrypoint.s…" valkey 37 minutes ago Up 37 minutes 6379/tcp
diff --git a/labs/lab10/report/dojo-report.html b/labs/lab10/report/dojo-report.html
new file mode 100644
index 00000000..d3189846
--- /dev/null
+++ b/labs/lab10/report/dojo-report.html
@@ -0,0 +1,62 @@
+
+
+
+
+ DefectDojo Lab 10 Report - Juice Shop
+
+
+
+
DefectDojo Lab 10 Report - Juice Shop
+
Captured on 2026-04-27 from local DefectDojo at http://localhost:8081.
+
+
Executive Summary
+
The Labs Security Testing engagement contains 40 active findings after importing Nuclei, ZAP, Semgrep, and Trivy scan outputs. The current baseline has no mitigated or verified findings yet, so this report represents the starting point for vulnerability management and response.
+
+
Severity Mix
+
+
Severity
Active
Verified
Mitigated
+
Critical
0
0
0
+
High
5
0
0
+
Medium
7
0
0
+
Low
5
0
0
+
Informational
23
0
0
+
+
+
Findings by Tool
+
+
Tool
Imported Findings
Notes
+
Nuclei
21
Mostly informational detections plus one medium Prometheus metrics exposure.
+
ZAP
10
Passive baseline warnings from the unauthenticated Juice Shop crawl.
+
Semgrep
9
Local Lab 10 rules found hardcoded secret and open redirect patterns.
+
Trivy
0
Filesystem scan completed, but no vulnerability records were present in the generated JSON.
+
Grype
0
Optional report was not available locally.
+
+
+
Recurring Categories
+
+
CWE
Count
Primary Source
+
CWE-798
5
Semgrep hardcoded JWT/secret findings
+
CWE-601
4
Semgrep open redirect findings
+
CWE-693
3
ZAP security header findings
+
CWE-200
3
Nuclei/ZAP information disclosure findings
+
+
+
SLA Outlook
+
No findings are due within the next 14 days. High-severity Semgrep findings have a 2026-05-27 SLA expiration date; medium findings are due on 2026-07-26; low findings are due on 2026-08-25.
+
+
Artifacts
+
+
CSV findings export: findings.csv
+
Raw API export: findings-api.json
+
Metrics snapshot: metrics-snapshot.md
+
+
+
+
diff --git a/labs/lab10/report/engagement-api.json b/labs/lab10/report/engagement-api.json
new file mode 100644
index 00000000..5754394c
--- /dev/null
+++ b/labs/lab10/report/engagement-api.json
@@ -0,0 +1 @@
+{"id":1,"tags":[],"created":"2026-04-27T15:58:26.927187Z","updated":"2026-04-27T16:00:17.202444Z","name":"Labs Security Testing","description":null,"version":null,"first_contacted":null,"target_start":"2026-04-27","target_end":"2027-04-27","reason":null,"active":true,"tracker":null,"test_strategy":null,"threat_model":true,"api_test":true,"pen_test":true,"check_list":true,"status":"In Progress","progress":"threat_model","tmodel_path":"none","done_testing":false,"engagement_type":"CI/CD","build_id":null,"commit_hash":null,"branch_tag":null,"source_code_management_uri":null,"deduplication_on_engagement":false,"lead":1,"requester":null,"preset":null,"report_type":null,"product":1,"build_server":null,"source_code_management_server":null,"orchestration_engine":null,"notes":[],"files":[],"risk_acceptance":[]}
\ No newline at end of file
diff --git a/labs/lab10/report/findings-api.json b/labs/lab10/report/findings-api.json
new file mode 100644
index 00000000..fb2add00
--- /dev/null
+++ b/labs/lab10/report/findings-api.json
@@ -0,0 +1 @@
+{"count":40,"next":null,"previous":null,"results":[{"id":1,"mitigated":null,"mitigated_by":null,"tags":["api","discovery","exposure","swagger"],"request_response":{"req_resp":[{"request":"GET /api-docs/swagger.json HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 MarketGoo/2.1\r\nAccept: text/html, application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: text/html; charset=utf-8\r\nDate: Mon, 27 Apr 2026 15:33:48 GMT\r\nEtag: W/\"c22-H8FH9nKD8DeX/nvIRrte6ZjP2a4\"\r\nFeature-Policy: payment 'self'\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n Swagger UI\n \n \n \n\n\n\n\n\n\n\n\n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[1],"created":"2026-04-27T15:58:28.476263Z","updated":"2026-04-27T15:58:28.476274Z","title":"Public Swagger API - Detect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":200,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","cvssv3_score":0.0,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"Public Swagger API was detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: text/html, application/json' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 MarketGoo/2.1' 'http://127.0.0.1:3000/api-docs/swagger.json'`","severity_justification":null,"references":"https://swagger.io/","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.480747Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"b8e4d8e15d143957cd0728601127b7b9f305ecc1baafa23e365e104a233dfbf5","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"swagger-api","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":2,"mitigated":null,"mitigated_by":null,"tags":["dameng","detection","network","protocol"],"request_response":{"req_resp":[{"request":"let packet = bytes.NewBuffer();\nconst c = require(\"nuclei/net\");\nconst cmd = \"00000000c8005100000000000000000000000099000000000000000001020000000000000000000000000000000000000000000000000000000000000000000008000000382e312e312e34390040000000068149bbe004a62fb45552831704c802d4d802b4579cb045b3c6100880725ececf148a7c9205047caccadfef5ff264460d11092a3b483bf9d24382dea1dc43e7\"\npacket.WriteString(cmd)\nlet conn = c.Open('tcp', `${Host}:${Port}`);\nconn.SendHex(cmd);\nconst result = conn.RecvFullString()\nresult","response":"HTTP/1.1 400 Bad Request\r\nConnection: close\r\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[2],"created":"2026-04-27T15:58:28.532150Z","updated":"2026-04-27T15:58:28.532162Z","title":"Dameng Database - Detect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"The Dameng (DMDB) Protocol Enumerator is a lightweight network reconnaissance tool designed to identify and fingerprint Dameng Database (DM/DM7/DM8) servers using their native wire-protocol.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.532229Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"6a7c83dac487f1ad4cc4f0e5a096b7e52383a31a3dc4599ab096b1d9174d05f5","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"dameng-detect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":3,"mitigated":null,"mitigated_by":null,"tags":["js","network","snmp","udp"],"request_response":{"req_resp":[{"request":"const c = require(\"nuclei/net\");\nconst b = require('nuclei/bytes');\n\nconst conn = c.Open('udp', `${Host}:${Port}`, `${Timeout}`);\n// SNMPv3: F=r U=\"\" E= C=\"\" GetRequest(12)\nlet payload = \"303a020103300f02024a69020300ffe30401040201030410300e0400020100020100040004000400301204000400a00c020237f00201000201003000\";\nconn.SendHex(payload);\nlet resp = conn.RecvFull(128);\nconst hexBuffer = new b.Buffer();\nhexBuffer.Write(resp);\nconst respHex = hexBuffer.Hex()\n\n\nconst known_vendors = {\n \"80000009\": \"Cisco\",\n \"80003a8c\": \"MikroTik\",\n \"800007db\": \"Huawei\",\n \"8000040e\": \"SageCom SAS\",\n \"80001f88\": \"net-snmp\",\n \"80000B2f\": \"Thomson Inc\",\n \"8000113d\": \"Broadcom Corporation\",\n \"8000124c\": \"Ambit Microsystems Corporation\",\n \"800011ae\": \"Netgear\",\n \"800063a2\": \"H3C\",\n \"8000130a\": \"Juniper Networks, Inc.\",\n \"80003044\": \"Fortinet Inc\",\n}\n\nfunction getVendor(msgHex) {\n for (const [key, value] of Object.entries(known_vendors)) {\n if (msgHex.includes(key)) {\n msgHex = (typeof msgHex === \"string\") ? msgHex : (msgHex ? String(msgHex) : \"\");\n if (!msgHex) return \"Unknown\";\n\n if (msgHex.toLowerCase().includes(key.toLowerCase())) {\n const m = msgHex.match(/8000([0-9a-fA-F]*?)0201/i);\n const engineId = m && m[1] ? m[1] : null;\n return value + (engineId ? (\", Engine ID: \" + engineId) : \"\");\n }\n }\n }\n const m = msgHex.match(/8000[0-9a-fA-F]*?0201/);\n return \"Enterprise: \" + (m ? m[0] : \"unknown\");\n}\ngetVendor(respHex);","response":"Enterprise: unknown"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[2],"created":"2026-04-27T15:58:28.562003Z","updated":"2026-04-27T15:58:28.562021Z","title":"SNMPv3 Fingerprint - Detect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"SNMPv3 can leak information about the device even without proper authentication.Use `nmap -sU -p 161 --script snmp-info` to get more information.Engine IDs can help to determine one device with multiple interfaces.\n\n**Results:**\nEnterprise: unknown","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://support.huawei.com/enterprise/en/doc/EDOC1100174721/46bd64e2/snmpv3\nhttps://pure.tudelft.nl/ws/portalfiles/portal/103172599/3487552.3487848.pdf\nhttps://svn.nmap.org/nmap/nselib/data/enterprise_numbers.txt\nhttp://docs.logmatrix.com/nervecenter/guides/NC-SNMPv3-EngineIDs.pdf","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.562084Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"249376397a310474e4a75a925bb799fea94f2b2897d356522bbea971973e6813","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"snmpv3-detect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":4,"mitigated":null,"mitigated_by":null,"tags":["employment","generic","hiring","jobs","misc","miscellaneous","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:37 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.591022Z","updated":"2026-04-27T15:58:28.591040Z","title":"X-Recruiting Header","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"Websites that advertise jobs via HTTP headers\n**Results:**\n/#/jobs","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0' 'http://127.0.0.1:3000'`","severity_justification":null,"references":"https://webtechsurvey.com/response-header/x-recruiting","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.591147Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"668277743be6c89f40bb3e87eb4e328da6dff2687cc278151f5900fef0f4cfc3","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"x-recruiting-header","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":5,"mitigated":null,"mitigated_by":null,"tags":["discovery","tech"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:36 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.631899Z","updated":"2026-04-27T15:58:28.631909Z","title":"FingerprintHub Technology Fingerprint","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":200,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"FingerprintHub Technology Fingerprint tests run in nuclei.","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":"https://github.com/0x727/FingerprintHub","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.631968Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"5ae4713775dcd8558b9205088fca504ae79d83936557efbc4e60eaf47a55c3ea","line":null,"file_path":null,"component_name":"qm-system","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"fingerprinthub-web-fingerprints","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":6,"mitigated":null,"mitigated_by":null,"tags":["misc","miscellaneous","vuln","xss"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:45 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.648637Z","updated":"2026-04-27T15:58:28.648648Z","title":"Add DOM EventListener - Detection","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"Identifies the use of JavaScript addEventListener calls in the DOM.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":"https://portswigger.net/web-security/dom-based/controlling-the-web-message-source","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.648707Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"4688c804e8f4b72f942860c97aaeac131a6cd5f9bc89af9aedfd0194025a5a51","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"addeventlistener-detect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":7,"mitigated":null,"mitigated_by":null,"tags":["deprecated","feature-policy","headers","misc","permissions"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:45 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.675789Z","updated":"2026-04-27T15:58:28.675811Z","title":"Deprecated Feature-Policy Header - Detection","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"Detected the presence of the deprecated Feature-Policy HTTP response header. The Feature-Policy header has been deprecated and replaced by the Permissions-Policy header. While Feature-Policy is still supported in some browsers for backward compatibility, it is recommended to migrate to Permissions-Policy for future-proofing web applications.\n\n**Results:**\npayment 'self'","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy\nhttps://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy\nhttps://www.w3.org/TR/permissions-policy-1/\nhttps://github.com/w3c/webappsec-permissions-policy/blob/main/permissions-policy-explainer.md","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.675951Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"43e54c7f0d1cbf755f5bff574bb7628fe2308090f70f6d39bf75ce286a9dcfa3","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"deprecated-feature-policy","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":8,"mitigated":null,"mitigated_by":null,"tags":["discovery","owasp","tech"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:45 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.718590Z","updated":"2026-04-27T15:58:28.718601Z","title":"OWASP Juice Shop","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.718662Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"5a266202dd35ebf97867fab7d25b8826e72e8e70ffad05782318befae3f1616c","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"owasp-juice-shop-detect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":9,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.739770Z","updated":"2026-04-27T15:58:28.739780Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.739840Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"d23e58fba85cafa526be36ef8a68d9c2c67111d1cc3b5682c45b86a3b26cb997","line":null,"file_path":null,"component_name":"content-security-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":10,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.764878Z","updated":"2026-04-27T15:58:28.764900Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.765044Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"e0fca40e1d2d56ebce3c1a18f639bb41230bbbed39bb0ebae7df6fc396399965","line":null,"file_path":null,"component_name":"x-permitted-cross-domain-policies","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":11,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.797042Z","updated":"2026-04-27T15:58:28.797054Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.797115Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"6a072af655c638514d68e67e975a37e6300d8c1f54b524c0dc6efbca255f4792","line":null,"file_path":null,"component_name":"referrer-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":12,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.820408Z","updated":"2026-04-27T15:58:28.820435Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.820520Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"180b6748f1726599919696fa97078e7fb409660ca21e683741a72d4c0f56f2ca","line":null,"file_path":null,"component_name":"cross-origin-embedder-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":13,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.842323Z","updated":"2026-04-27T15:58:28.842341Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.842436Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"15f5b7a122fa5591a1cab1722150218c433ea485c0fef11e656ecbca670a186a","line":null,"file_path":null,"component_name":"cross-origin-opener-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":14,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.868296Z","updated":"2026-04-27T15:58:28.868312Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.868409Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"4f7b40dcb385e1ae5ff825c3f1b3498f744abefb347f5bca9afd6eccdada2176","line":null,"file_path":null,"component_name":"missing-content-type","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":15,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.896900Z","updated":"2026-04-27T15:58:28.896918Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.897012Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"70da8a0016e1fd3b9fbae81687d79ea827696744eaf26e2b5d49e0a8472a0d45","line":null,"file_path":null,"component_name":"strict-transport-security","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":16,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.924754Z","updated":"2026-04-27T15:58:28.924769Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.924842Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"feafcb7cdaa75c6ac605c399d08ef67cf405af71d0a9c49150dc9f8cafa6119c","line":null,"file_path":null,"component_name":"permissions-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":17,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.960204Z","updated":"2026-04-27T15:58:28.960224Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.960319Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"fbb319a4365bcc0bbe490b377cacbc38daad68f4aabf55aa6073f52056a63e2c","line":null,"file_path":null,"component_name":"clear-site-data","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":18,"mitigated":null,"mitigated_by":null,"tags":["generic","headers","misconfig","vuln"],"request_response":{"req_resp":[{"request":"GET / HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 27 Apr 2026 15:34:50 GMT\r\nEtag: W/\"124fa-19dcf8e0f19\"\r\nFeature-Policy: payment 'self'\r\nLast-Modified: Mon, 27 Apr 2026 15:28:06 GMT\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\n\n\n\n\n \n OWASP Juice Shop\n \n \n \n \n\n\n \n\n\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[3],"created":"2026-04-27T15:58:28.989673Z","updated":"2026-04-27T15:58:28.989687Z","title":"HTTP Missing Security Headers","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"This template searches for missing HTTP security headers. The impact of these missing headers can vary.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:28.989776Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"d716f60f9b9ca46ce8bac4fb3800cdadaac0451e962fb8bd1a5ade6de6288e34","line":null,"file_path":null,"component_name":"cross-origin-resource-policy","component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"http-missing-security-headers","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":19,"mitigated":null,"mitigated_by":null,"tags":["generic","misc","miscellaneous","vuln"],"request_response":{"req_resp":[{"request":"GET /robots.txt HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 28\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Mon, 27 Apr 2026 15:34:59 GMT\r\nEtag: W/\"1c-8HgF6mNyhsSFK0pascC9uB0wjX0\"\r\nFeature-Policy: payment 'self'\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\nUser-agent: *\nDisallow: /ftp"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[4],"created":"2026-04-27T15:58:29.021023Z","updated":"2026-04-27T15:58:29.021039Z","title":"robots.txt File","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36' 'http://127.0.0.1:3000/robots.txt'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:29.021132Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"6a2563bb85289e8fb4ceac4e92ff65018e170cc8359c228541548520fa63beb2","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"robots-txt","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":20,"mitigated":null,"mitigated_by":null,"tags":["discovery","generic","misc","miscellaneous"],"request_response":{"req_resp":[{"request":"GET /robots.txt HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 28\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Mon, 27 Apr 2026 15:35:01 GMT\r\nEtag: W/\"1c-8HgF6mNyhsSFK0pascC9uB0wjX0\"\r\nFeature-Policy: payment 'self'\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-Recruiting: /#/jobs\r\nUser-agent: *\nDisallow: /ftp"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[4],"created":"2026-04-27T15:58:29.041432Z","updated":"2026-04-27T15:58:29.041446Z","title":"robots.txt Endpoint Prober","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"\n**Results:**\n/ftp","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0' 'http://127.0.0.1:3000/robots.txt'`","severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:29.041517Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"82253ed7ea3ffd443b1feddd87494680ed21d950ac320e9e35447f0211c22d0b","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"robots-txt-endpoint","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":21,"mitigated":null,"mitigated_by":null,"tags":["config","exposure","hackerone","prometheus","vuln"],"request_response":{"req_resp":[{"request":"GET /metrics HTTP/1.1\r\nHost: 127.0.0.1:3000\r\nUser-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n","response":"HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 25589\r\nContent-Type: text/plain; version=0.0.4; charset=utf-8\r\nDate: Mon, 27 Apr 2026 15:35:02 GMT\r\n# HELP file_uploads_count Total number of successful file uploads grouped by file type.\n# TYPE file_uploads_count counter\n# HELP file_upload_errors Total number of failed file uploads grouped by file type.\n# TYPE file_upload_errors counter\n# HELP juiceshop_startup_duration_seconds Duration juiceshop required to perform a certain task during startup\n# TYPE juiceshop_startup_duration_seconds gauge\njuiceshop_startup_duration_seconds{task=\"validateConfig\",app=\"juiceshop\"} 0.015901316\njuiceshop_startup_duration_seconds{task=\"cleanupFtpFolder\",app=\"juiceshop\"} 0.027073524\njuiceshop_startup_duration_seconds{task=\"validatePreconditions\",app=\"juiceshop\"} 0.068366914\njuiceshop_startup_duration_seconds{task=\"datacreator\",app=\"juiceshop\"} 2.726829541\njuiceshop_startup_duration_seconds{task=\"customizeApplication\",app=\"juiceshop\"} 0.007805259\njuiceshop_startup_duration_seconds{task=\"customizeEasterEgg\",app=\"juiceshop\"} 0.004248408\njuiceshop_startup_duration_seconds{task=\"ready\",app=\"juiceshop\"} 2.767\n# HELP process_cpu_user_seconds_total Total user CPU time spent in seconds.\n# TYPE process_cpu_user_seconds_total counter\nprocess_cpu_user_seconds_total{app=\"juiceshop\"} 152.40238\n# HELP process_cpu_system_seconds_total Total system CPU time spent in seconds.\n# TYPE process_cpu_system_seconds_total counter\nprocess_cpu_system_seconds_total{app=\"juiceshop\"} 59.666197\n# HELP process_cpu_seconds_total Total user and system CPU time spent in seconds.\n# TYPE process_cpu_seconds_total counter\nprocess_cpu_seconds_total{app=\"juiceshop\"} 212.068577\n# HELP process_start_time_seconds Start time of the process since unix epoch in seconds.\n# TYPE process_start_time_seconds gauge\nprocess_start_time_seconds{app=\"juiceshop\"} 1777303683\n# HELP process_resident_memory_bytes Resident memory size in bytes.\n# TYPE process_resident_memory_bytes gauge\nprocess_resident_memory_bytes{app=\"juiceshop\"} 3565051904\n# HELP process_virtual_memory_bytes Virtual memory size in bytes.\n# TYPE process_virtual_memory_bytes gauge\nprocess_virtual_memory_bytes{app=\"juiceshop\"} 5136990208\n# HELP process_heap_bytes Process heap size in bytes.\n# TYPE process_heap_bytes gauge\nprocess_heap_bytes{app=\"juiceshop\"} 4160851968\n# HELP process_open_fds Number of open file descriptors.\n# TYPE process_open_fds gauge\nprocess_open_fds{app=\"juiceshop\"} 37\n# HELP process_max_fds Maximum number of open file descriptors.\n# TYPE process_max_fds gauge\nprocess_max_fds{app=\"juiceshop\"} 524288\n# HELP nodejs_eventloop_lag_seconds Lag of event loop in seconds.\n# TYPE nodejs_eventloop_lag_seconds gauge\nnodejs_eventloop_lag_seconds{app=\"juiceshop\"} 0.002149822\n# HELP nodejs_eventloop_lag_min_seconds The minimum recorded event loop delay.\n# TYPE nodejs_eventloop_lag_min_seconds gauge\nnodejs_eventloop_lag_min_seconds{app=\"juiceshop\"} 0.009388032\n# HELP nodejs_eventloop_lag_max_seconds The maximum recorded event loop delay.\n# TYPE nodejs_eventloop_lag_max_seconds gauge\nnodejs_eventloop_lag_max_seconds{app=\"juiceshop\"} 0.070516735\n# HELP nodejs_eventloop_lag_mean_seconds The mean of the recorded event loop delays.\n# TYPE nodejs_eventloop_lag_mean_seconds gauge\nnodejs_eventloop_lag_mean_seconds{app=\"juiceshop\"} 0.013111867534883722\n# HELP nodejs_eventloop_lag_stddev_seconds The standard deviation of the recorded event loop delays.\n# TYPE nodejs_eventloop_lag_stddev_seconds gauge\nnodejs_eventloop_lag_stddev_seconds{app=\"juiceshop\"} 0.008080547734895789\n# HELP nodejs_eventloop_lag_p50_seconds The 50th percentile of the recorded event loop delays.\n# TYPE nodejs_eventloop_lag_p50_seconds gauge\nnodejs_eventloop_lag_p50_seconds{app=\"juiceshop\"} 0.010698751\n# HELP nodejs_eventloop_lag_p90_seconds The 90th percentile of the recorded event loop delays.\n# TYPE nodejs_eventloop_lag_p90_seconds gauge\nnodejs_eventloop_lag_p90_seconds{app=\"juiceshop\"} 0.015917055\n# HELP nodejs_eventloop_lag_p99_seconds The 99th percentile of the recorded event loop delays.\n# TYPE nodejs_eventloop_lag_p99_seconds gauge\nnodejs_eventloop_lag_p99_seconds{app=\"juiceshop\"} 0.051707903\n# HELP nodejs_active_resources Number of active resources that are currently keeping the event loop alive, grouped by async resource type.\n# TYPE nodejs_active_resources gauge\nnodejs_active_resources{type=\"FSReqCallback\",app=\"juiceshop\"} 6\nnodejs_active_resources{type=\"SimpleShutdownWrap\",app=\"juiceshop\"} 2\nnodejs_active_resources{type=\"PipeWrap\",app=\"juiceshop\"} 2\nnodejs_active_resources{type=\"FSEventWrap\",app=\"juiceshop\"} 1\nnodejs_active_resources{type=\"TCPServerWrap\",app=\"juiceshop\"} 1\nnodejs_active_resources{type=\"TCPSocketWrap\",app=\"juiceshop\"} 12\nnodejs_active_resources{type=\"Timeout\",app=\"juiceshop\"} 1\nnodejs_active_resources{type=\"Immediate\",app=\"juiceshop\"} 1\n# HELP nodejs_active_resources_total Total number of active resources.\n# TYPE nodejs_active_resources_total gauge\nnodejs_active_resources_total{app=\"juiceshop\"} 26\n# HELP nodejs_active_handles Number of active libuv handles grouped by handle type. Every handle type is C++ class name.\n# TYPE nodejs_active_handles gauge\nnodejs_active_handles{type=\"Socket\",app=\"juiceshop\"} 14\nnodejs_active_handles{type=\"FSWatcher\",app=\"juiceshop\"} 1\nnodejs_active_handles{type=\"Server\",app=\"juiceshop\"} 1\n# HELP nodejs_active_handles_total Total number of active handles.\n# TYPE nodejs_active_handles_total gauge\nnodejs_active_handles_total{app=\"juiceshop\"} 16\n# HELP nodejs_active_requests Number of active libuv requests grouped by request type. Every request type is C++ class name.\n# TYPE nodejs_active_requests gauge\nnodejs_active_requests{type=\"FSReqCallback\",app=\"juiceshop\"} 6\nnodejs_active_requests{type=\"ShutdownWrap\",app=\"juiceshop\"} 2\n# HELP nodejs_active_requests_total Total number of active requests.\n# TYPE nodejs_active_requests_total gauge\nnodejs_active_requests_total{app=\"juiceshop\"} 8\n# HELP nodejs_heap_size_total_bytes Process heap size from Node.js in bytes.\n# TYPE nodejs_heap_size_total_bytes gauge\nnodejs_heap_size_total_bytes{app=\"juiceshop\"} 2740858880\n# HELP nodejs_heap_size_used_bytes Process heap size used from Node.js in bytes.\n# TYPE nodejs_heap_size_used_bytes gauge\nnodejs_heap_size_used_bytes{app=\"juiceshop\"} 1927772328\n# HELP nodejs_external_memory_bytes Node.js external memory size in bytes.\n# TYPE nodejs_external_memory_bytes gauge\nnodejs_external_memory_bytes{app=\"juiceshop\"} 17988418\n# HELP nodejs_heap_space_size_total_bytes Process heap space size total from Node.js in bytes.\n# TYPE nodejs_heap_space_size_total_bytes gauge\nnodejs_heap_space_size_total_bytes{space=\"read_only\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"new\",app=\"juiceshop\"} 134217728\nnodejs_heap_space_size_total_bytes{space=\"old\",app=\"juiceshop\"} 2586353664\nnodejs_heap_space_size_total_bytes{space=\"code\",app=\"juiceshop\"} 6815744\nnodejs_heap_space_size_total_bytes{space=\"shared\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"trusted\",app=\"juiceshop\"} 5541888\nnodejs_heap_space_size_total_bytes{space=\"shared_trusted\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"new_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"large_object\",app=\"juiceshop\"} 7766016\nnodejs_heap_space_size_total_bytes{space=\"code_large_object\",app=\"juiceshop\"} 163840\nnodejs_heap_space_size_total_bytes{space=\"shared_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"shared_trusted_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_total_bytes{space=\"trusted_large_object\",app=\"juiceshop\"} 0\n# HELP nodejs_heap_space_size_used_bytes Process heap space size used from Node.js in bytes.\n# TYPE nodejs_heap_space_size_used_bytes gauge\nnodejs_heap_space_size_used_bytes{space=\"read_only\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"new\",app=\"juiceshop\"} 51123656\nnodejs_heap_space_size_used_bytes{space=\"old\",app=\"juiceshop\"} 1858393520\nnodejs_heap_space_size_used_bytes{space=\"code\",app=\"juiceshop\"} 5477952\nnodejs_heap_space_size_used_bytes{space=\"shared\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"trusted\",app=\"juiceshop\"} 4901920\nnodejs_heap_space_size_used_bytes{space=\"shared_trusted\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"new_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"large_object\",app=\"juiceshop\"} 7715488\nnodejs_heap_space_size_used_bytes{space=\"code_large_object\",app=\"juiceshop\"} 163584\nnodejs_heap_space_size_used_bytes{space=\"shared_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"shared_trusted_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_used_bytes{space=\"trusted_large_object\",app=\"juiceshop\"} 0\n# HELP nodejs_heap_space_size_available_bytes Process heap space size available from Node.js in bytes.\n# TYPE nodejs_heap_space_size_available_bytes gauge\nnodejs_heap_space_size_available_bytes{space=\"read_only\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"new\",app=\"juiceshop\"} 15981112\nnodejs_heap_space_size_available_bytes{space=\"old\",app=\"juiceshop\"} 723166248\nnodejs_heap_space_size_available_bytes{space=\"code\",app=\"juiceshop\"} 1336960\nnodejs_heap_space_size_available_bytes{space=\"shared\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"trusted\",app=\"juiceshop\"} 628064\nnodejs_heap_space_size_available_bytes{space=\"shared_trusted\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"new_large_object\",app=\"juiceshop\"} 67108864\nnodejs_heap_space_size_available_bytes{space=\"large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"code_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"shared_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"shared_trusted_large_object\",app=\"juiceshop\"} 0\nnodejs_heap_space_size_available_bytes{space=\"trusted_large_object\",app=\"juiceshop\"} 0\n# HELP nodejs_version_info Node.js version info.\n# TYPE nodejs_version_info gauge\nnodejs_version_info{version=\"v24.14.1\",major=\"24\",minor=\"14\",patch=\"1\",app=\"juiceshop\"} 1\n# HELP nodejs_gc_duration_seconds Garbage collection duration by kind, one of major, minor, incremental or weakcb.\n# TYPE nodejs_gc_duration_seconds histogram\nnodejs_gc_duration_seconds_bucket{le=\"0.001\",kind=\"incremental\",app=\"juiceshop\"} 4\nnodejs_gc_duration_seconds_bucket{le=\"0.01\",kind=\"incremental\",app=\"juiceshop\"} 8\nnodejs_gc_duration_seconds_bucket{le=\"0.1\",kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"1\",kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"2\",kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"5\",kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"+Inf\",kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_sum{kind=\"incremental\",app=\"juiceshop\"} 0.07376020799949765\nnodejs_gc_duration_seconds_count{kind=\"incremental\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"0.001\",kind=\"major\",app=\"juiceshop\"} 0\nnodejs_gc_duration_seconds_bucket{le=\"0.01\",kind=\"major\",app=\"juiceshop\"} 4\nnodejs_gc_duration_seconds_bucket{le=\"0.1\",kind=\"major\",app=\"juiceshop\"} 9\nnodejs_gc_duration_seconds_bucket{le=\"1\",kind=\"major\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"2\",kind=\"major\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"5\",kind=\"major\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"+Inf\",kind=\"major\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_sum{kind=\"major\",app=\"juiceshop\"} 1.0401892920006066\nnodejs_gc_duration_seconds_count{kind=\"major\",app=\"juiceshop\"} 12\nnodejs_gc_duration_seconds_bucket{le=\"0.001\",kind=\"minor\",app=\"juiceshop\"} 35\nnodejs_gc_duration_seconds_bucket{le=\"0.01\",kind=\"minor\",app=\"juiceshop\"} 634\nnodejs_gc_duration_seconds_bucket{le=\"0.1\",kind=\"minor\",app=\"juiceshop\"} 715\nnodejs_gc_duration_seconds_bucket{le=\"1\",kind=\"minor\",app=\"juiceshop\"} 715\nnodejs_gc_duration_seconds_bucket{le=\"2\",kind=\"minor\",app=\"juiceshop\"} 715\nnodejs_gc_duration_seconds_bucket{le=\"5\",kind=\"minor\",app=\"juiceshop\"} 715\nnodejs_gc_duration_seconds_bucket{le=\"+Inf\",kind=\"minor\",app=\"juiceshop\"} 715\nnodejs_gc_duration_seconds_sum{kind=\"minor\",app=\"juiceshop\"} 5.179404249999674\nnodejs_gc_duration_seconds_count{kind=\"minor\",app=\"juiceshop\"} 715\n# HELP juiceshop_version_info Release version of OWASP Juice Shop.\n# TYPE juiceshop_version_info gauge\njuiceshop_version_info{version=\"19.2.1\",major=\"19\",minor=\"2\",patch=\"1\",app=\"juiceshop\"} 1\n# HELP juiceshop_challenges_solved Number of solved challenges grouped by difficulty and category.\n# TYPE juiceshop_challenges_solved gauge\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"XSS\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Observability Failures\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Improper Input Validation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Broken Access Control\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Vulnerable Components\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Broken Authentication\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Security through Obscurity\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Miscellaneous\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Broken Access Control\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Insecure Deserialization\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Broken Authentication\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Injection\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"XSS\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 1\njuiceshop_challenges_solved{difficulty=\"1\",category=\"XSS\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Injection\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Broken Access Control\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Improper Input Validation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 1\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Improper Input Validation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Broken Access Control\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Vulnerable Components\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Observability Failures\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Vulnerable Components\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Injection\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Broken Authentication\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Injection\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Unvalidated Redirects\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Broken Authentication\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Miscellaneous\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Security through Obscurity\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"XSS\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Improper Input Validation\",app=\"juiceshop\"} 1\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Broken Access Control\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Injection\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Miscellaneous\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Security through Obscurity\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"Insecure Deserialization\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"6\",category=\"XSS\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"2\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"4\",category=\"Unvalidated Redirects\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"3\",category=\"XXE\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"XXE\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"5\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 0\njuiceshop_challenges_solved{difficulty=\"1\",category=\"Observability Failures\",app=\"juiceshop\"} 1\njuiceshop_challenges_solved{difficulty=\"3\",category=\"Miscellaneous\",app=\"juiceshop\"} 0\n# HELP juiceshop_challenges_total Total number of challenges grouped by difficulty and category.\n# TYPE juiceshop_challenges_total gauge\njuiceshop_challenges_total{difficulty=\"2\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 6\njuiceshop_challenges_total{difficulty=\"3\",category=\"XSS\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"4\",category=\"Observability Failures\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"3\",category=\"Improper Input Validation\",app=\"juiceshop\"} 6\njuiceshop_challenges_total{difficulty=\"2\",category=\"Broken Access Control\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"6\",category=\"Vulnerable Components\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"3\",category=\"Broken Authentication\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"5\",category=\"Security through Obscurity\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"6\",category=\"Miscellaneous\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Broken Access Control\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"Insecure Deserialization\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"3\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"Broken Authentication\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"4\",category=\"Injection\",app=\"juiceshop\"} 5\njuiceshop_challenges_total{difficulty=\"4\",category=\"XSS\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"1\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"XSS\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"3\",category=\"Injection\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"2\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Broken Access Control\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"2\",category=\"Improper Input Validation\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Improper Input Validation\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"5\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"6\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"3\",category=\"Broken Access Control\",app=\"juiceshop\"} 5\njuiceshop_challenges_total{difficulty=\"4\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 5\njuiceshop_challenges_total{difficulty=\"5\",category=\"Vulnerable Components\",app=\"juiceshop\"} 5\njuiceshop_challenges_total{difficulty=\"5\",category=\"Observability Failures\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Vulnerable Components\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"2\",category=\"Injection\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"3\",category=\"Sensitive Data Exposure\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Broken Authentication\",app=\"juiceshop\"} 2\njuiceshop_challenges_total{difficulty=\"6\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"6\",category=\"Broken Anti Automation\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"Injection\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Unvalidated Redirects\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"2\",category=\"Broken Authentication\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Miscellaneous\",app=\"juiceshop\"} 4\njuiceshop_challenges_total{difficulty=\"3\",category=\"Security through Obscurity\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"2\",category=\"XSS\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Improper Input Validation\",app=\"juiceshop\"} 3\njuiceshop_challenges_total{difficulty=\"6\",category=\"Broken Access Control\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"6\",category=\"Injection\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"2\",category=\"Miscellaneous\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Security through Obscurity\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"6\",category=\"Insecure Deserialization\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"6\",category=\"XSS\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"2\",category=\"Cryptographic Issues\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"4\",category=\"Unvalidated Redirects\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"3\",category=\"XXE\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"XXE\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"5\",category=\"Security Misconfiguration\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"1\",category=\"Observability Failures\",app=\"juiceshop\"} 1\njuiceshop_challenges_total{difficulty=\"3\",category=\"Miscellaneous\",app=\"juiceshop\"} 1\n# HELP juiceshop_coding_challenges_progress Number of coding challenges grouped by progression phase.\n# TYPE juiceshop_coding_challenges_progress gauge\njuiceshop_coding_challenges_progress{phase=\"find it\",app=\"juiceshop\"} 0\njuiceshop_coding_challenges_progress{phase=\"fix it\",app=\"juiceshop\"} 0\njuiceshop_coding_challenges_progress{phase=\"unsolved\",app=\"juiceshop\"} 31\n# HELP juiceshop_cheat_score Overall probability that any hacking or coding challenges were solved by cheating.\n# TYPE juiceshop_cheat_score gauge\njuiceshop_cheat_score{app=\"juiceshop\"} 0\n# HELP juiceshop_coding_challenges_accuracy Overall accuracy while solving coding challenges grouped by phase.\n# TYPE juiceshop_coding_challenges_accuracy gauge\njuiceshop_coding_challenges_accuracy{phase=\"find it\",app=\"juiceshop\"} Nan\njuiceshop_coding_challenges_accuracy{phase=\"fix it\",app=\"juiceshop\"} Nan\n# HELP juiceshop_orders_placed_total Number of orders placed in OWASP Juice Shop.\n# TYPE juiceshop_orders_placed_total gauge\njuiceshop_orders_placed_total{app=\"juiceshop\"} 3\n# HELP juiceshop_users_registered Number of registered users grouped by customer type.\n# TYPE juiceshop_users_registered gauge\njuiceshop_users_registered{type=\"standard\",app=\"juiceshop\"} 11\njuiceshop_users_registered{type=\"deluxe\",app=\"juiceshop\"} 4\n# HELP juiceshop_users_registered_total Total number of registered users.\n# TYPE juiceshop_users_registered_total gauge\njuiceshop_users_registered_total{app=\"juiceshop\"} 23\n# HELP juiceshop_wallet_balance_total Total balance of all users' digital wallets.\n# TYPE juiceshop_wallet_balance_total gauge\njuiceshop_wallet_balance_total{app=\"juiceshop\"} 13885\n# HELP juiceshop_user_social_interactions Number of social interactions with users grouped by type.\n# TYPE juiceshop_user_social_interactions gauge\njuiceshop_user_social_interactions{type=\"review\",app=\"juiceshop\"} 28\njuiceshop_user_social_interactions{type=\"feedback\",app=\"juiceshop\"} 8\njuiceshop_user_social_interactions{type=\"complaint\",app=\"juiceshop\"} 1\n# HELP http_requests_count Total HTTP request count grouped by status code.\n# TYPE http_requests_count counter\nhttp_requests_count{status_code=\"2XX\",app=\"juiceshop\"} 11885\nhttp_requests_count{status_code=\"5XX\",app=\"juiceshop\"} 607\nhttp_requests_count{status_code=\"4XX\",app=\"juiceshop\"} 10\nhttp_requests_count{status_code=\"3XX\",app=\"juiceshop\"} 11\n"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[80],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[5],"created":"2026-04-27T15:58:29.065583Z","updated":"2026-04-27T15:58:29.065599Z","title":"Prometheus Metrics - Detect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":200,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssv3_score":5.3,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"Prometheus metrics page was detected.","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":"curl command to reproduce the request:\n`curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36' 'http://127.0.0.1:3000/metrics'`","severity_justification":null,"references":"https://github.com/prometheus/prometheus\nhttps://hackerone.com/reports/1026196","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T15:58:29.065673Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T15:58:28.444024Z","param":null,"payload":null,"hash_code":"648b376edd74792245dc4e49d58da5eb168fee32ceadef4229c821ca60801d68","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"prometheus-metrics","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":4,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":22,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[6,7,8,9,3],"created":"2026-04-27T16:00:15.464826Z","updated":"2026-04-27T16:00:15.464849Z","title":"Content Security Policy (CSP) Header Not Set","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":693,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"Content Security Policy (CSP) is an added layer of security that helps to\ndetect and mitigate certain types of attacks, including Cross Site Scripting\n(XSS) and data injection attacks. These attacks are used for everything from\ndata theft to site defacement or distribution of malware. CSP provides a set\nof standard HTTP headers that allow website owners to declare approved sources\nof content that browsers should be allowed to load on that page — covered\ntypes are JavaScript, CSS, HTML frames, fonts, images and embeddable objects\nsuch as Java applets, ActiveX, audio and video files.\n\n","mitigation":"Ensure that your web server, application server, load balancer, etc. is\nconfigured to set the Content-Security-Policy header.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP\n\nhttps://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html\n\nhttps://www.w3.org/TR/CSP/\n\nhttps://w3c.github.io/webappsec-csp/\n\nhttps://web.dev/articles/csp\n\nhttps://caniuse.com/#feat=contentsecuritypolicy\n\nhttps://content-security-policy.com/\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.464941Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"0087498b25379ae98a9fc37da082d06254c90b1da34f12c5c34b493d781003b0","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":4,"unique_id_from_tool":null,"vuln_id_from_tool":"10038","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":23,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Access-Control-Allow-Origin: *"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Access-Control-Allow-Origin: *"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Access-Control-Allow-Origin: *"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Access-Control-Allow-Origin: *"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Access-Control-Allow-Origin: *"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[10,11,12,13,4],"created":"2026-04-27T16:00:15.486078Z","updated":"2026-04-27T16:00:15.486088Z","title":"Cross-Domain Misconfiguration","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":264,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"Web browser data loading may be possible, due to a Cross Origin Resource\nSharing (CORS) misconfiguration on the web server.\n\n","mitigation":"Ensure that sensitive data is not available in an unauthenticated manner\n(using IP address white-listing, for instance).\n\nConfigure the \"Access-Control-Allow-Origin\" HTTP header to a more restrictive\nset of domains, or remove all CORS headers entirely, to allow the web browser\nto enforce the Same Origin Policy (SOP) in a more restrictive manner.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://vulncat.fortify.com/en/detail?category=HTML5&subcategory;=Overly%20Permissive%20CORS%20Policy\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.486141Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"9647c25d6ad271cf4371aaa8472e36e3df37f3f183a3eb5e5c146dc891cfc792","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":4,"unique_id_from_tool":null,"vuln_id_from_tool":"10098","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":24,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: Cross-Origin-Embedder-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Embedder-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Embedder-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Embedder-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Embedder-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":120,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[14,15,9,3],"created":"2026-04-27T16:00:15.499131Z","updated":"2026-04-27T16:00:15.499149Z","title":"Cross-Origin-Embedder-Policy Header Missing or Invalid","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-08-25","cwe":693,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Low","description":"Cross-Origin-Embedder-Policy header is a response header that prevents a\ndocument from loading any cross-origin resources that don't explicitly grant\nthe document permission (using CORP or CORS).\n\n","mitigation":"Ensure that the application/web server sets the Cross-Origin-Embedder-Policy\nheader appropriately, and that it sets the Cross-Origin-Embedder-Policy header\nto 'require-corp' for documents.\n\nIf possible, ensure that the end user uses a standards-compliant and modern\nweb browser that supports the Cross-Origin-Embedder-Policy header\n(https://caniuse.com/mdn-http_headers_cross-origin-embedder-policy).\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-\nOrigin-Embedder-Policy\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.499232Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S3","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"cb3e2ec8519465943d2393a5d8feb33e852f36da9acb3ada6df2af755cfa299d","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":7,"unique_id_from_tool":null,"vuln_id_from_tool":"90004","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":25,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: Cross-Origin-Opener-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Opener-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Opener-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Opener-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: Cross-Origin-Opener-Policy \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":120,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[14,15,9,3],"created":"2026-04-27T16:00:15.512141Z","updated":"2026-04-27T16:00:15.512154Z","title":"Cross-Origin-Opener-Policy Header Missing or Invalid","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-08-25","cwe":693,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Low","description":"Cross-Origin-Opener-Policy header is a response header that allows a site to\ncontrol if others included documents share the same browsing context. Sharing\nthe same browsing context with untrusted documents might lead to data leak.\n\n","mitigation":"Ensure that the application/web server sets the Cross-Origin-Opener-Policy\nheader appropriately, and that it sets the Cross-Origin-Opener-Policy header\nto 'same-origin' for documents.\n\n'same-origin-allow-popups' is considered as less secured and should be\navoided.\n\nIf possible, ensure that the end user uses a standards-compliant and modern\nweb browser that supports the Cross-Origin-Opener-Policy header\n(https://caniuse.com/mdn-http_headers_cross-origin-opener-policy).\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-\nOrigin-Opener-Policy\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.512232Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S3","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"5a5f4bb773b13e0d031f3aed95f719e55026024a3123ced92c4641734b64e06c","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":7,"unique_id_from_tool":null,"vuln_id_from_tool":"90004","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":26,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"bypassSecurityTrustHtml("},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"bypassSecurityTrustHtml("}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":120,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[16,17],"created":"2026-04-27T16:00:15.523127Z","updated":"2026-04-27T16:00:15.523144Z","title":"Dangerous JS Functions","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-08-25","cwe":749,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Low","description":"A dangerous JS function seems to be in use that would leave the site\nvulnerable.\n\n","mitigation":"See the references for security advice on the use of these functions.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://v17.angular.io/guide/security\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.523227Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S3","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"d6c38a27728c454726d0921862d17d5b7d2865216d408a4918d85c2917f7c739","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":7,"unique_id_from_tool":null,"vuln_id_from_tool":"10110","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":27,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Feature-Policy"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Feature-Policy"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Feature-Policy"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Feature-Policy"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"Feature-Policy"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":120,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[11,12,13,18,9],"created":"2026-04-27T16:00:15.532329Z","updated":"2026-04-27T16:00:15.532342Z","title":"Deprecated Feature Policy Header Set","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-08-25","cwe":16,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Low","description":"The header has now been renamed to Permissions-Policy.\n\n","mitigation":"Ensure that your web server, application server, load balancer, etc. is\nconfigured to set the Permissions-Policy header instead of the Feature-Policy\nheader.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://developer.mozilla.org/en-\nUS/docs/Web/HTTP/Reference/Headers/Permissions-Policy\n\nhttps://scotthelme.co.uk/goodbye-feature-policy-and-hello-permissions-policy/\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.532402Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S3","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"01c6bf4c23bf204455b9733e472f86e55f3e0f658b556130c3b13528bbc221ee","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":7,"unique_id_from_tool":null,"vuln_id_from_tool":"10063","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":28,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"1680327869"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"1701244813"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"1839622642"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"1863874346"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"2033195021"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":120,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[19],"created":"2026-04-27T16:00:15.544225Z","updated":"2026-04-27T16:00:15.544239Z","title":"Timestamp Disclosure - Unix","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-08-25","cwe":497,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Low","description":"A timestamp was disclosed by the application/web server. - Unix\n\n","mitigation":"Manually confirm that the timestamp data is not sensitive, and that the data\ncannot be aggregated to disclose exploitable patterns.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://cwe.mitre.org/data/definitions/200.html\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.544312Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S3","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"e9c58c2d667a3aa7b107c45a8ba26501c91c989f3717a6160988b517d98fee46","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":7,"unique_id_from_tool":null,"vuln_id_from_tool":"10096","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":29,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[15,20,9,3],"created":"2026-04-27T16:00:15.555083Z","updated":"2026-04-27T16:00:15.555098Z","title":"Modern Web Application","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":0,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"The application appears to be a modern web application. If you need to explore\nit automatically then the Ajax Spider may well be more effective than the\nstandard one.\n\n","mitigation":"This is an informational alert and so no changes are required.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.555175Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"d93db1564824f12568a75f12d10c1bca9e5be0c1df864a40f68baed79d5c6530","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"10109","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":30,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":""}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[4],"created":"2026-04-27T16:00:15.568052Z","updated":"2026-04-27T16:00:15.568065Z","title":"Storable and Cacheable Content","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":524,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"The response contents are storable by caching components such as proxy\nservers, and may be retrieved directly from the cache, rather than from the\norigin server by the caching servers, in response to similar requests from\nother users. If the response data is sensitive, personal or user-specific,\nthis may result in sensitive information being leaked. In some cases, this may\neven result in a user gaining complete control of the session of another user,\ndepending on the configuration of the caching components in use in their\nenvironment. This is primarily an issue where \"shared\" caching servers such as\n\"proxy\" caches are configured on the local network. This configuration is\ntypically found in corporate or educational environments, for instance.\n\n","mitigation":"Validate that the response does not contain sensitive, personal or user-\nspecific information. If it does, consider the use of the following HTTP\nresponse headers, to limit, or prevent the content being stored and retrieved\nfrom the cache by another user:\n\nCache-Control: no-cache, no-store, must-revalidate, private\n\nPragma: no-cache\n\nExpires: 0\n\nThis configuration directs both HTTP 1.0 and HTTP 1.1 compliant caching\nservers to not store the response, and to not retrieve the response (without\nvalidation) from the cache, in response to a similar request.\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://datatracker.ietf.org/doc/html/rfc7234\n\nhttps://datatracker.ietf.org/doc/html/rfc7231\n\nhttps://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.568118Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"e6e255eff3bfc1dd023252cf5429d1f4f28dac64c1e30e94292903d3951c459d","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"10049","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":31,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"max-age=0"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"max-age=0"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"max-age=0"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"max-age=0"},{"request":"Method: GET \nParam: \nAttack: \nEndpointQuery: \nEndpointFragment: ","response":"max-age=0"}]},"accepted_risks":[],"push_to_jira":false,"found_by":[97],"age":0,"sla_days_remaining":null,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[10,11,12,13,18],"created":"2026-04-27T16:00:15.574989Z","updated":"2026-04-27T16:00:15.575005Z","title":"Storable but Non-Cacheable Content","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":null,"cwe":524,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Info","description":"The response contents are storable by caching components such as proxy\nservers, but will not be retrieved directly from the cache, without validating\nthe request upstream, in response to similar requests from other users.\n\n","mitigation":"\n\n","fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":"https://datatracker.ietf.org/doc/html/rfc7234\n\nhttps://datatracker.ietf.org/doc/html/rfc7231\n\nhttps://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html\n\n","active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:15.575069Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S4","last_reviewed":"2026-04-27T16:00:15.417072Z","param":null,"payload":null,"hash_code":"324e2e56dcb9f0b7b88464bd10d2ff2bb0bfd61a507e9578ca6ca5221c27a2ca","line":null,"file_path":null,"component_name":null,"component_version":null,"static_finding":false,"dynamic_finding":true,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"10049","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":null,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":5,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":32,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":30,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.109231Z","updated":"2026-04-27T16:00:17.109250Z","title":"rules.lab10-hardcoded-jwt-secret","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-05-27","cwe":798,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"High","description":"**Result message:** Hardcoded JWT secret or signing key detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.109345Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S1","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"e5c47b24b5818ef4e79b4581f70ba81ffa547cab7f65ff49222c9dd42fd8ae69","line":96,"file_path":"/src/frontend/src/app/navbar/navbar.component.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-hardcoded-jwt-secret","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":33,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":30,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.119932Z","updated":"2026-04-27T16:00:17.119943Z","title":"rules.lab10-hardcoded-jwt-secret","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-05-27","cwe":798,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"High","description":"**Result message:** Hardcoded JWT secret or signing key detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.119998Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S1","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"5c1dba6e6eadc747be2ea2cc8f31eced830e656c553e7cc2e9e65d5b6a0f1de2","line":28,"file_path":"/src/frontend/src/app/welcome-banner/welcome-banner.component.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-hardcoded-jwt-secret","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":34,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":30,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.124623Z","updated":"2026-04-27T16:00:17.124634Z","title":"rules.lab10-hardcoded-jwt-secret","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-05-27","cwe":798,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"High","description":"**Result message:** Hardcoded JWT secret or signing key detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.124692Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S1","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"c297831cd14a5c6d79d080bf5b50ad633cd2f513b1a22b334e2466378177f847","line":20,"file_path":"/src/frontend/src/app/welcome/welcome.component.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-hardcoded-jwt-secret","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":35,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":30,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.131048Z","updated":"2026-04-27T16:00:17.131078Z","title":"rules.lab10-hardcoded-jwt-secret","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-05-27","cwe":798,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"High","description":"**Result message:** Hardcoded JWT secret or signing key detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.131154Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S1","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"dc0e1b2b2816fa95e3c9c0ed2082e062d7d12c45de9f1c066df9c7f33862fa3a","line":23,"file_path":"/src/lib/insecurity.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-hardcoded-jwt-secret","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":36,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":30,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.135985Z","updated":"2026-04-27T16:00:17.135993Z","title":"rules.lab10-hardcoded-jwt-secret","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-05-27","cwe":798,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"High","description":"**Result message:** Hardcoded JWT secret or signing key detected.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.136039Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S1","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"98c81866ff276002a457107d5eba6817438329bbd6414f664d13b57543783ef9","line":168,"file_path":"/src/routes/2fa.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-hardcoded-jwt-secret","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":37,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.140049Z","updated":"2026-04-27T16:00:17.140060Z","title":"rules.lab10-express-open-redirect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":601,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"**Result message:** Unvalidated redirect target can allow open redirect attacks.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.140115Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"a299c76b5e87f2699bdaed01321bdc22696327e6550d0ea45f38ce0efe99ee95","line":57,"file_path":"/src/routes/profileImageFileUpload.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-express-open-redirect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":38,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.144588Z","updated":"2026-04-27T16:00:17.144599Z","title":"rules.lab10-express-open-redirect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":601,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"**Result message:** Unvalidated redirect target can allow open redirect attacks.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.144648Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"c47c96064944c95311712012bdba3b6feb25bf53a4e99f12c822aec13cf953a8","line":48,"file_path":"/src/routes/profileImageUrlUpload.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-express-open-redirect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":39,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.149712Z","updated":"2026-04-27T16:00:17.149723Z","title":"rules.lab10-express-open-redirect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":601,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"**Result message:** Unvalidated redirect target can allow open redirect attacks.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.149780Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"da4ec6f9354ddc450fcc3491abaf8868d7e01a7cd54271efa6ed9a8023a3fc21","line":19,"file_path":"/src/routes/redirect.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-express-open-redirect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]},{"id":40,"mitigated":null,"mitigated_by":null,"tags":[],"request_response":{"req_resp":[]},"accepted_risks":[],"push_to_jira":false,"found_by":[197],"age":0,"sla_days_remaining":90,"finding_meta":[],"related_fields":null,"jira_creation":null,"jira_change":null,"display_status":"Active","finding_groups":[],"vulnerability_ids":[],"reporter":1,"endpoints":[],"created":"2026-04-27T16:00:17.153486Z","updated":"2026-04-27T16:00:17.153496Z","title":"rules.lab10-express-open-redirect","date":"2026-04-27","sla_start_date":null,"sla_expiration_date":"2026-07-26","cwe":601,"epss_score":null,"epss_percentile":null,"known_exploited":false,"ransomware_used":false,"kev_date":null,"cvssv3":null,"cvssv3_score":null,"cvssv4":null,"cvssv4_score":null,"url":null,"severity":"Medium","description":"**Result message:** Unvalidated redirect target can allow open redirect attacks.\n","mitigation":null,"fix_available":null,"fix_version":null,"impact":null,"steps_to_reproduce":null,"severity_justification":null,"references":null,"active":true,"verified":false,"false_p":false,"duplicate":false,"out_of_scope":false,"risk_accepted":false,"under_review":false,"last_status_update":"2026-04-27T16:00:17.153544Z","under_defect_review":false,"is_mitigated":false,"thread_id":0,"numerical_severity":"S2","last_reviewed":"2026-04-27T16:00:17.089225Z","param":null,"payload":null,"hash_code":"8fd170ea91f5fb46a98c69aa1ef6f1a9a63fccd6858c9ac1cf049ed13529fc0a","line":42,"file_path":"/src/routes/updateUserProfile.ts","component_name":null,"component_version":null,"static_finding":true,"dynamic_finding":false,"scanner_confidence":null,"unique_id_from_tool":null,"vuln_id_from_tool":"rules.lab10-express-open-redirect","sast_source_object":null,"sast_sink_object":null,"sast_source_line":null,"sast_source_file_path":null,"nb_occurences":1,"publish_date":null,"service":null,"planned_remediation_date":null,"planned_remediation_version":null,"effort_for_fixing":null,"test":6,"duplicate_finding":null,"review_requested_by":null,"defect_review_requested_by":null,"last_reviewed_by":1,"sonarqube_issue":null,"reviewers":[],"notes":[],"files":[]}],"prefetch":{}}
\ No newline at end of file
diff --git a/labs/lab10/report/findings.csv b/labs/lab10/report/findings.csv
new file mode 100644
index 00000000..13d30366
--- /dev/null
+++ b/labs/lab10/report/findings.csv
@@ -0,0 +1,41 @@
+"id","title","severity","active","verified","is_mitigated","cwe","test_id","date","sla_start_date"
+1,"Public Swagger API - Detect","Info",true,false,false,200,4,"2026-04-27",
+2,"Dameng Database - Detect","Info",true,false,false,0,4,"2026-04-27",
+3,"SNMPv3 Fingerprint - Detect","Info",true,false,false,0,4,"2026-04-27",
+4,"X-Recruiting Header","Info",true,false,false,0,4,"2026-04-27",
+5,"FingerprintHub Technology Fingerprint","Info",true,false,false,200,4,"2026-04-27",
+6,"Add DOM EventListener - Detection","Info",true,false,false,0,4,"2026-04-27",
+7,"Deprecated Feature-Policy Header - Detection","Info",true,false,false,0,4,"2026-04-27",
+8,"OWASP Juice Shop","Info",true,false,false,0,4,"2026-04-27",
+9,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+10,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+11,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+12,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+13,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+14,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+15,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+16,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+17,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+18,"HTTP Missing Security Headers","Info",true,false,false,0,4,"2026-04-27",
+19,"robots.txt File","Info",true,false,false,0,4,"2026-04-27",
+20,"robots.txt Endpoint Prober","Info",true,false,false,0,4,"2026-04-27",
+21,"Prometheus Metrics - Detect","Medium",true,false,false,200,4,"2026-04-27",
+22,"Content Security Policy (CSP) Header Not Set","Medium",true,false,false,693,5,"2026-04-27",
+23,"Cross-Domain Misconfiguration","Medium",true,false,false,264,5,"2026-04-27",
+24,"Cross-Origin-Embedder-Policy Header Missing or Invalid","Low",true,false,false,693,5,"2026-04-27",
+25,"Cross-Origin-Opener-Policy Header Missing or Invalid","Low",true,false,false,693,5,"2026-04-27",
+26,"Dangerous JS Functions","Low",true,false,false,749,5,"2026-04-27",
+27,"Deprecated Feature Policy Header Set","Low",true,false,false,16,5,"2026-04-27",
+28,"Timestamp Disclosure - Unix","Low",true,false,false,497,5,"2026-04-27",
+29,"Modern Web Application","Info",true,false,false,0,5,"2026-04-27",
+30,"Storable and Cacheable Content","Info",true,false,false,524,5,"2026-04-27",
+31,"Storable but Non-Cacheable Content","Info",true,false,false,524,5,"2026-04-27",
+32,"rules.lab10-hardcoded-jwt-secret","High",true,false,false,798,6,"2026-04-27",
+33,"rules.lab10-hardcoded-jwt-secret","High",true,false,false,798,6,"2026-04-27",
+34,"rules.lab10-hardcoded-jwt-secret","High",true,false,false,798,6,"2026-04-27",
+35,"rules.lab10-hardcoded-jwt-secret","High",true,false,false,798,6,"2026-04-27",
+36,"rules.lab10-hardcoded-jwt-secret","High",true,false,false,798,6,"2026-04-27",
+37,"rules.lab10-express-open-redirect","Medium",true,false,false,601,6,"2026-04-27",
+38,"rules.lab10-express-open-redirect","Medium",true,false,false,601,6,"2026-04-27",
+39,"rules.lab10-express-open-redirect","Medium",true,false,false,601,6,"2026-04-27",
+40,"rules.lab10-express-open-redirect","Medium",true,false,false,601,6,"2026-04-27",
diff --git a/labs/lab10/report/metrics-snapshot.md b/labs/lab10/report/metrics-snapshot.md
new file mode 100644
index 00000000..d2c9a16b
--- /dev/null
+++ b/labs/lab10/report/metrics-snapshot.md
@@ -0,0 +1,37 @@
+# Metrics Snapshot - Lab 10
+
+- Date captured: 2026-04-27
+- DefectDojo URL: http://localhost:8081
+- Product Type: Engineering
+- Product: Juice Shop
+- Engagement: Labs Security Testing
+- Active findings:
+ - Critical: 0
+ - High: 5
+ - Medium: 7
+ - Low: 5
+ - Informational: 23
+- Open vs. closed by severity:
+ - Critical: 0 open, 0 closed
+ - High: 5 open, 0 closed
+ - Medium: 7 open, 0 closed
+ - Low: 5 open, 0 closed
+ - Informational: 23 open, 0 closed
+- Verified vs. Mitigated notes: 40 findings are active, 0 are verified, and 0 are mitigated. This is a first-import baseline before triage and remediation workflow starts.
+- Tool import counts:
+ - Nuclei: 21 active findings
+ - ZAP: 10 active findings
+ - Semgrep: 9 active findings
+ - Trivy: 0 active vulnerability findings in the local filesystem scan
+ - Grype: not imported; the optional report was not present
+- Recurring categories:
+ - CWE-798: 5 hardcoded JWT/secret findings
+ - CWE-601: 4 open redirect findings
+ - CWE-693: 3 security header/protection mechanism findings
+ - CWE-200: 3 information exposure findings
+ - Missing security headers without a mapped CWE: 10 informational detections
+- SLA outlook:
+ - Due within 14 days: 0
+ - High-severity Semgrep findings are due on 2026-05-27
+ - Medium findings are due on 2026-07-26
+ - Low findings are due on 2026-08-25
diff --git a/labs/lab10/report/tests-api.json b/labs/lab10/report/tests-api.json
new file mode 100644
index 00000000..27fab28c
--- /dev/null
+++ b/labs/lab10/report/tests-api.json
@@ -0,0 +1 @@
+{"count":6,"next":null,"previous":null,"results":[{"id":1,"tags":[],"test_type_name":"ZAP Scan","finding_groups":[],"scan_type":"ZAP Scan","title":null,"description":null,"target_start":"2026-04-27T15:58:26.948498Z","target_end":"2026-04-27T15:58:26.948498Z","percent_complete":50,"updated":"2026-04-27T15:58:26.952913Z","created":"2026-04-27T15:58:26.952921Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":97,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]},{"id":2,"tags":[],"test_type_name":"Semgrep Pro JSON Report","finding_groups":[],"scan_type":"Semgrep Pro JSON Report","title":null,"description":null,"target_start":"2026-04-27T15:58:28.116073Z","target_end":"2026-04-27T15:58:28.116073Z","percent_complete":100,"updated":"2026-04-27T15:58:28.254844Z","created":"2026-04-27T15:58:28.121959Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":44,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]},{"id":3,"tags":[],"test_type_name":"Trivy Operator Scan","finding_groups":[],"scan_type":"Trivy Operator Scan","title":null,"description":null,"target_start":"2026-04-27T15:58:28.323591Z","target_end":"2026-04-27T15:58:28.323591Z","percent_complete":100,"updated":"2026-04-27T15:58:28.376831Z","created":"2026-04-27T15:58:28.328839Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":162,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]},{"id":4,"tags":[],"test_type_name":"Nuclei Scan","finding_groups":[],"scan_type":"Nuclei Scan","title":null,"description":null,"target_start":"2026-04-27T15:58:28.444024Z","target_end":"2026-04-27T15:58:28.444024Z","percent_complete":100,"updated":"2026-04-27T15:58:29.262954Z","created":"2026-04-27T15:58:28.447685Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":80,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]},{"id":5,"tags":[],"test_type_name":"ZAP Scan","finding_groups":[],"scan_type":"ZAP Scan","title":null,"description":null,"target_start":"2026-04-27T16:00:15.417072Z","target_end":"2026-04-27T16:00:15.417072Z","percent_complete":100,"updated":"2026-04-27T16:00:15.701132Z","created":"2026-04-27T16:00:15.421592Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":97,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]},{"id":6,"tags":[],"test_type_name":"Semgrep JSON Report","finding_groups":[],"scan_type":"Semgrep JSON Report","title":null,"description":null,"target_start":"2026-04-27T16:00:17.089225Z","target_end":"2026-04-27T16:00:17.089225Z","percent_complete":100,"updated":"2026-04-27T16:00:17.358641Z","created":"2026-04-27T16:00:17.097416Z","version":"","build_id":"","commit_hash":"","branch_tag":"","engagement":1,"lead":null,"test_type":197,"environment":1,"api_scan_configuration":null,"notes":[],"files":[]}],"prefetch":{}}
\ No newline at end of file
diff --git a/labs/lab10/report/tool-counts.csv b/labs/lab10/report/tool-counts.csv
new file mode 100644
index 00000000..b4b67138
--- /dev/null
+++ b/labs/lab10/report/tool-counts.csv
@@ -0,0 +1,5 @@
+test_id,tool,count
+4,Nuclei,21
+5,ZAP,10
+6,Semgrep,9
+3,Trivy,0
diff --git a/labs/lab10/setup/.gitignore b/labs/lab10/setup/.gitignore
new file mode 100644
index 00000000..c4af39a1
--- /dev/null
+++ b/labs/lab10/setup/.gitignore
@@ -0,0 +1,2 @@
+django-DefectDojo/
+
diff --git a/labs/lab10/setup/setup-evidence.md b/labs/lab10/setup/setup-evidence.md
new file mode 100644
index 00000000..5ad9a158
--- /dev/null
+++ b/labs/lab10/setup/setup-evidence.md
@@ -0,0 +1,17 @@
+# DefectDojo Setup Evidence - Lab 10
+
+- Date: 2026-04-27
+- Upstream cloned locally: `labs/lab10/setup/django-DefectDojo`
+- Upstream remote: `https://github.com/DefectDojo/django-DefectDojo.git`
+- Upstream commit used: `1a8b491`
+- Compose compatibility: `./docker/docker-compose-check.sh` reported a supported Docker Compose version.
+- Docker versions:
+ - Docker: `29.4.0`
+ - Docker Compose: `v5.1.1`
+- DefectDojo UI/API: `http://localhost:8081`
+- Port note: `localhost:8080` was already in use by a local `kubectl` port-forward, so `DD_PORT=8081` was used.
+- Initializer completed successfully and printed the generated admin password in local container logs.
+- Sensitive values such as the admin password and API token are intentionally not stored in this artifact.
+
+Container status was captured in `labs/lab10/report/docker-compose-ps.txt`.
+
diff --git a/labs/lab4/syft/juice-shop-syft-native.json b/labs/lab4/syft/juice-shop-syft-native.json
new file mode 100644
index 00000000..52daeb45
--- /dev/null
+++ b/labs/lab4/syft/juice-shop-syft-native.json
@@ -0,0 +1 @@
+{"artifacts":[{"id":"3cea2309a653e6ed","name":"1to2","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/nan/tools/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/nan/tools/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/nan/tools/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/nan/tools/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/1to2@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"1to2","version":"1.0.0","author":"Benjamin Byholm (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)","homepage":"","description":"NAN 1 -> 2 Migration Script","url":"git://github.com/nodejs/nan.git","private":false}},{"id":"08449108469244be","name":"@adraffy/ens-normalize","version":"1.10.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40adraffy/ens-normalize@1.10.1","metadataType":"javascript-npm-package","metadata":{"name":"@adraffy/ens-normalize","version":"1.10.1","author":"raffy.eth (http://raffy.antistupid.com)","homepage":"https://github.com/adraffy/ens-normalize.js#readme","description":"Ethereum Name Service (ENS) Name Normalizer","url":"git+https://github.com/adraffy/ens-normalize.js.git","private":false}},{"id":"27b0de0facbfc672","name":"@babel/helper-string-parser","version":"7.27.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40babel/helper-string-parser@7.27.1","metadataType":"javascript-npm-package","metadata":{"name":"@babel/helper-string-parser","version":"7.27.1","author":"The Babel Team (https://babel.dev/team)","homepage":"https://babel.dev/docs/en/next/babel-helper-string-parser","description":"A utility package to parse strings","url":"https://github.com/babel/babel.git","private":false}},{"id":"d07675d36f7c1136","name":"@babel/helper-validator-identifier","version":"7.27.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.27.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40babel/helper-validator-identifier@7.27.1","metadataType":"javascript-npm-package","metadata":{"name":"@babel/helper-validator-identifier","version":"7.27.1","author":"The Babel Team (https://babel.dev/team)","homepage":"","description":"Validate identifier/keywords name","url":"https://github.com/babel/babel.git","private":false}},{"id":"489d0f5c79137732","name":"@babel/parser","version":"7.28.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@babel/parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/parser/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@babel/parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/parser/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.28.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/parser:7.28.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40babel/parser@7.28.3","metadataType":"javascript-npm-package","metadata":{"name":"@babel/parser","version":"7.28.3","author":"The Babel Team (https://babel.dev/team)","homepage":"https://babel.dev/docs/en/next/babel-parser","description":"A JavaScript parser","url":"https://github.com/babel/babel.git","private":false}},{"id":"045074f58c58eebb","name":"@babel/types","version":"7.28.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@babel/types/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/types/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@babel/types/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@babel/types/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.28.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:\\@babel\\/types:7.28.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40babel/types@7.28.2","metadataType":"javascript-npm-package","metadata":{"name":"@babel/types","version":"7.28.2","author":"The Babel Team (https://babel.dev/team)","homepage":"https://babel.dev/docs/en/next/babel-types","description":"Babel Types is a Lodash-esque utility library for AST nodes","url":"https://github.com/babel/babel.git","private":false}},{"id":"2aaa7cc50004f91b","name":"@colors/colors","version":"1.6.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40colors/colors@1.6.0","metadataType":"javascript-npm-package","metadata":{"name":"@colors/colors","version":"1.6.0","author":"DABH, DABH (https://github.com/DABH)","homepage":"https://github.com/DABH/colors.js","description":"get colors in your node.js console","url":"http://github.com/DABH/colors.js.git","private":false}},{"id":"3b8ecc6044fe8e57","name":"@colors/colors","version":"1.6.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40colors/colors@1.6.0","metadataType":"javascript-npm-package","metadata":{"name":"@colors/colors","version":"1.6.0","author":"DABH, DABH (https://github.com/DABH)","homepage":"https://github.com/DABH/colors.js","description":"get colors in your node.js console","url":"http://github.com/DABH/colors.js.git","private":false}},{"id":"22bb15b4ca9d4d3f","name":"@dabh/diagnostics","version":"2.0.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@dabh/diagnostics/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@dabh/diagnostics/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@dabh/diagnostics/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@dabh/diagnostics/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@dabh\\/diagnostics:\\@dabh\\/diagnostics:2.0.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:3rd-Eden:\\@dabh\\/diagnostics:2.0.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40dabh/diagnostics@2.0.3","metadataType":"javascript-npm-package","metadata":{"name":"@dabh/diagnostics","version":"2.0.3","author":"Arnout Kazemier, Martijn Swaagman (https://github.com/swaagie), Jarrett Cruger (https://github.com/jcrugzz), Sevastos (https://github.com/sevastos)","homepage":"https://github.com/3rd-Eden/diagnostics","description":"Tools for debugging your node.js modules and event loop","url":"git://github.com/3rd-Eden/diagnostics.git","private":false}},{"id":"2b283938a1553b38","name":"@ethereumjs/rlp","version":"4.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@ethereumjs/rlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@ethereumjs/rlp/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MPL-2.0","spdxExpression":"MPL-2.0","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@ethereumjs/rlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@ethereumjs/rlp/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@ethereumjs\\/rlp:\\@ethereumjs\\/rlp:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ethereumjs:\\@ethereumjs\\/rlp:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40ethereumjs/rlp@4.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@ethereumjs/rlp","version":"4.0.1","author":"martin becze , Alex Beregszaszi , Holger Drewes , Paul Miller ","homepage":"https://github.com/ethereumjs/ethereumjs-monorepo/tree/master/packages/rlp#readme","description":"Recursive Length Prefix Encoding Module","url":"https://github.com/ethereumjs/ethereumjs-monorepo.git","private":false}},{"id":"e264462c29df43ed","name":"@ethereumjs/rlp","version":"5.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MPL-2.0","spdxExpression":"MPL-2.0","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/web3-eth-contract/node_modules/@ethereumjs/rlp/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@ethereumjs\\/rlp:\\@ethereumjs\\/rlp:5.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ethereumjs:\\@ethereumjs\\/rlp:5.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40ethereumjs/rlp@5.0.2","metadataType":"javascript-npm-package","metadata":{"name":"@ethereumjs/rlp","version":"5.0.2","author":"martin becze , Alex Beregszaszi , Holger Drewes , Paul Miller ","homepage":"https://github.com/ethereumjs/ethereumjs-monorepo/tree/master/packages/rlp#readme","description":"Recursive Length Prefix Encoding Module","url":"https://github.com/ethereumjs/ethereumjs-monorepo.git","private":false}},{"id":"8e41d6aa1fe261a3","name":"@gar/promisify","version":"1.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@gar/promisify/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@gar/promisify/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@gar/promisify/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@gar/promisify/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40gar/promisify@1.1.3","metadataType":"javascript-npm-package","metadata":{"name":"@gar/promisify","version":"1.1.3","author":"Gar ","homepage":"","description":"Promisify an entire class or object","url":"https://github.com/wraithgar/gar-promisify.git","private":false}},{"id":"1b734807f495fb6f","name":"@isaacs/cliui","version":"8.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@isaacs/cliui/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/cliui/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@isaacs/cliui/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/cliui/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40isaacs/cliui@8.0.2","metadataType":"javascript-npm-package","metadata":{"name":"@isaacs/cliui","version":"8.0.2","author":"Ben Coe ","homepage":"","description":"easily create complex multi-column command-line-interfaces","url":"yargs/cliui","private":false}},{"id":"0ab257647e45f4d4","name":"@isaacs/fs-minipass","version":"4.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40isaacs/fs-minipass@4.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@isaacs/fs-minipass","version":"4.0.1","author":"Isaac Z. Schlueter","homepage":"","description":"fs read and write streams based on minipass","url":"https://github.com/npm/fs-minipass.git","private":false}},{"id":"e38f30a540597121","name":"@my-scope/package-a","version":"0.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40my-scope/package-a@0.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@my-scope/package-a","version":"0.0.0","author":"","homepage":"","description":"","url":"","private":true}},{"id":"7c30bf5441790ef5","name":"@my-scope/package-b","version":"0.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@my:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40my-scope/package-b@0.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@my-scope/package-b","version":"0.0.0","author":"","homepage":"","description":"","url":"","private":true}},{"id":"49cbc756c02b244b","name":"@nlpjs/core","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/core/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/core/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/core/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/core/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/core@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/core","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Core","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"52af61e4284d993b","name":"@nlpjs/core-loader","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/core-loader/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/core-loader/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/core-loader/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/core-loader/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/core-loader:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/core-loader:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/core_loader:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/core_loader:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core-loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/core:\\@nlpjs\\/core_loader:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/core-loader@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/core-loader","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Core","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"19329a82b3c04a97","name":"@nlpjs/evaluator","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/evaluator/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/evaluator/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/evaluator/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/evaluator/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/evaluator:\\@nlpjs\\/evaluator:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/evaluator@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/evaluator","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Evaluator","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"3b35c82860541774","name":"@nlpjs/lang-en","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/lang-en/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/lang-en/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/lang-en/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/lang-en/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang-en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang_en:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/lang-en@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/lang-en","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Core","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"f478f743a248aca5","name":"@nlpjs/lang-en-min","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/lang-en-min/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en-min:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en-min:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en_min:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en_min:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang-en:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang_en:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang-en-min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/lang:\\@nlpjs\\/lang_en_min:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/lang-en-min@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/lang-en-min","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Core","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"ca1d4c9cc3d649fe","name":"@nlpjs/language","version":"4.25.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/language/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/language/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/language/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/language/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/language@4.25.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/language","version":"4.25.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Language guesser","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"49713e5e64515107","name":"@nlpjs/language-min","version":"4.25.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/language-min/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/language-min/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/language-min/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/language-min/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/language-min:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/language-min:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/language_min:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/language_min:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language-min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@nlpjs\\/language:\\@nlpjs\\/language_min:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/language-min@4.25.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/language-min","version":"4.25.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Language guesser","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"3bf94ec08da3b281","name":"@nlpjs/ner","version":"4.27.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/ner/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/ner/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/ner/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/ner/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/ner:\\@nlpjs\\/ner:4.27.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/ner@4.27.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/ner","version":"4.27.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Named Entity Recognition","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"d2908794d58fc9bc","name":"@nlpjs/neural","version":"4.25.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/neural/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/neural/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/neural/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/neural/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/neural:\\@nlpjs\\/neural:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/neural@4.25.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/neural","version":"4.25.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Neural Network","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"d41f6d4e68e9c43d","name":"@nlpjs/nlg","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlg/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlg/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlg/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlg/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/nlg:\\@nlpjs\\/nlg:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/nlg@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/nlg","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Natural Language Generation","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"f85c5456d515aafd","name":"@nlpjs/nlp","version":"4.27.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlp/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlp/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlp/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/nlp:\\@nlpjs\\/nlp:4.27.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/nlp@4.27.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/nlp","version":"4.27.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Natural Language Processing","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"c449b8b8cc6afd27","name":"@nlpjs/nlu","version":"4.27.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlu/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlu/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/nlu/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/nlu/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/nlu:\\@nlpjs\\/nlu:4.27.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/nlu@4.27.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/nlu","version":"4.27.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Natural Language Understanding","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"8d993f0ba3c63bb7","name":"@nlpjs/request","version":"4.25.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/request/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/request/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/request/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/request/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/request:\\@nlpjs\\/request:4.25.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/request@4.25.0","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/request","version":"4.25.0","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Request","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"1b3eb8c3cb77af23","name":"@nlpjs/sentiment","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/sentiment/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/sentiment/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/sentiment/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/sentiment/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/sentiment:\\@nlpjs\\/sentiment:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/sentiment@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/sentiment","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Sentiment Analysis","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"203a7b556fc354dd","name":"@nlpjs/similarity","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/similarity/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/similarity/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/similarity/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/similarity/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/similarity:\\@nlpjs\\/similarity:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/similarity@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/similarity","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Similarity","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"6b6febefa6106c5d","name":"@nlpjs/slot","version":"4.26.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@nlpjs/slot/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/slot/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@nlpjs/slot/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@nlpjs/slot/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@nlpjs\\/slot:\\@nlpjs\\/slot:4.26.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40nlpjs/slot@4.26.1","metadataType":"javascript-npm-package","metadata":{"name":"@nlpjs/slot","version":"4.26.1","author":"Jesus Seijas , Jesus Seijas ","homepage":"","description":"Slot filling manager","url":"git+https://github.com/axa-group/nlp.js.git","private":false}},{"id":"2a40db3b54912cbf","name":"@noble/curves","version":"1.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/curves@1.2.0","metadataType":"javascript-npm-package","metadata":{"name":"@noble/curves","version":"1.2.0","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal JS implementation of elliptic curve cryptography","url":"https://github.com/paulmillr/noble-curves.git","private":false}},{"id":"a86e0237429a5827","name":"@noble/curves","version":"1.4.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.4.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/curves@1.4.2","metadataType":"javascript-npm-package","metadata":{"name":"@noble/curves","version":"1.4.2","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal JS implementation of elliptic curve cryptography","url":"git+https://github.com/paulmillr/noble-curves.git","private":false}},{"id":"306de5e5675f2410","name":"@noble/curves","version":"1.4.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/curves/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.4.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/curves@1.4.2","metadataType":"javascript-npm-package","metadata":{"name":"@noble/curves","version":"1.4.2","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal JS implementation of elliptic curve cryptography","url":"git+https://github.com/paulmillr/noble-curves.git","private":false}},{"id":"46670510cb133f58","name":"@noble/hashes","version":"1.3.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/hashes@1.3.2","metadataType":"javascript-npm-package","metadata":{"name":"@noble/hashes","version":"1.3.2","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt","url":"https://github.com/paulmillr/noble-hashes.git","private":false}},{"id":"749573321ee941d7","name":"@noble/hashes","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/hashes@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"@noble/hashes","version":"1.4.0","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","url":"git+https://github.com/paulmillr/noble-hashes.git","private":false}},{"id":"a3139241ec1643e6","name":"@noble/hashes","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip39/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/hashes@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"@noble/hashes","version":"1.4.0","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","url":"git+https://github.com/paulmillr/noble-hashes.git","private":false}},{"id":"c2a39289ece0eefe","name":"@noble/hashes","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethereum-cryptography/node_modules/@noble/hashes/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40noble/hashes@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"@noble/hashes","version":"1.4.0","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","url":"git+https://github.com/paulmillr/noble-hashes.git","private":false}},{"id":"114921a3f2bc9d12","name":"@npmcli/agent","version":"3.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@npmcli/agent/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/agent/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@npmcli/agent/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/agent/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40npmcli/agent@3.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@npmcli/agent","version":"3.0.0","author":"GitHub Inc.","homepage":"https://github.com/npm/agent#readme","description":"the http/https agent used by the npm cli","url":"git+https://github.com/npm/agent.git","private":false}},{"id":"644572bbb1e01679","name":"@npmcli/fs","version":"1.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40npmcli/fs@1.1.1","metadataType":"javascript-npm-package","metadata":{"name":"@npmcli/fs","version":"1.1.1","author":"GitHub Inc.","homepage":"","description":"filesystem utilities for the npm cli","url":"","private":false}},{"id":"2f7974422b4dc793","name":"@npmcli/fs","version":"4.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@npmcli/fs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/fs/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@npmcli/fs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/fs/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40npmcli/fs@4.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@npmcli/fs","version":"4.0.0","author":"GitHub Inc.","homepage":"","description":"filesystem utilities for the npm cli","url":"git+https://github.com/npm/fs.git","private":false}},{"id":"a988a9e98434d4e0","name":"@npmcli/move-file","version":"1.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@npmcli/move-file/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/move-file/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@npmcli/move-file/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/move-file/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40npmcli/move-file@1.1.2","metadataType":"javascript-npm-package","metadata":{"name":"@npmcli/move-file","version":"1.1.2","author":"","homepage":"","description":"move a file (fork of move-file)","url":"git+https://github.com/npm/move-file","private":false}},{"id":"80ec3c5b78ad0cd1","name":"@otplib/core","version":"12.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@otplib/core/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/core/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@otplib/core/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/core/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@otplib\\/core:\\@otplib\\/core:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/core:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40otplib/core@12.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@otplib/core","version":"12.0.1","author":"Gerald Yeo ","homepage":"https://yeojz.otplib.dev","description":"core method for otplib","url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-core","private":false}},{"id":"a30b3113039a0207","name":"@otplib/plugin-crypto","version":"12.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/plugin-crypto/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/plugin-crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/plugin_crypto:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40otplib/plugin-crypto@12.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@otplib/plugin-crypto","version":"12.0.1","author":"Gerald Yeo ","homepage":"https://yeojz.otplib.dev","description":"node crypto plugin for otplib","url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-plugin-crypto","private":false}},{"id":"e9e61a8a5751393d","name":"@otplib/plugin-thirty-two","version":"12.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/plugin-thirty-two/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-thirty-two:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-thirty-two:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_thirty_two:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_thirty_two:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-thirty:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin-thirty:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_thirty:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin_thirty:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/plugin-thirty-two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/plugin_thirty_two:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40otplib/plugin-thirty-two@12.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@otplib/plugin-thirty-two","version":"12.0.1","author":"Gerald Yeo ","homepage":"https://yeojz.otplib.dev","description":"thirty-two plugin for otplib","url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-plugin-thirty-two","private":false}},{"id":"8171b09a48e9d93f","name":"@otplib/preset-default","version":"12.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@otplib/preset-default/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/preset-default/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@otplib/preset-default/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/preset-default/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@otplib\\/preset-default:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset-default:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset_default:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset_default:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/preset-default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/preset_default:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40otplib/preset-default@12.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@otplib/preset-default","version":"12.0.1","author":"Gerald Yeo ","homepage":"https://yeojz.otplib.dev","description":"basic preset for otplib","url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-preset-default","private":false}},{"id":"1aa44437b113ebed","name":"@otplib/preset-v11","version":"12.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@otplib/preset-v11/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/preset-v11/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@otplib/preset-v11/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@otplib/preset-v11/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@otplib\\/preset-v11:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset-v11:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset_v11:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset_v11:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@otplib\\/preset:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/preset-v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yeojz:\\@otplib\\/preset_v11:12.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40otplib/preset-v11@12.0.1","metadataType":"javascript-npm-package","metadata":{"name":"@otplib/preset-v11","version":"12.0.1","author":"Gerald Yeo ","homepage":"https://yeojz.otplib.dev","description":"v11.x compatible interface preset for otplib","url":"https://github.com/yeojz/otplib/tree/master/packages/otplib-preset-v11","private":false}},{"id":"80ef1a2248d5a920","name":"@pkgjs/parseargs","version":"0.11.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40pkgjs/parseargs@0.11.0","metadataType":"javascript-npm-package","metadata":{"name":"@pkgjs/parseargs","version":"0.11.0","author":"","homepage":"https://github.com/pkgjs/parseargs#readme","description":"Polyfill of future proposal for `util.parseArgs()`","url":"git@github.com:pkgjs/parseargs.git","private":false}},{"id":"19e6077d1014f2df","name":"@scarf/scarf","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scarf/scarf/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scarf/scarf/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"Apache-2.0","spdxExpression":"Apache-2.0","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scarf/scarf/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scarf/scarf/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:scarf-sh:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40scarf/scarf@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"@scarf/scarf","version":"1.4.0","author":"Scarf Systems","homepage":"https://github.com/scarf-sh/scarf-js","description":"Scarf is like Google Analytics for your npm packages. Gain insights into how your packages are installed and used, and by which companies.","url":"git+https://github.com/scarf-sh/scarf-js.git","private":false}},{"id":"8a8c401a9f2b2c51","name":"@scure/base","version":"1.1.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@scure\\/base:\\@scure\\/base:1.1.9:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40scure/base@1.1.9","metadataType":"javascript-npm-package","metadata":{"name":"@scure/base","version":"1.1.9","author":"Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/#scure","description":"Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16","url":"git+https://github.com/paulmillr/scure-base.git","private":false}},{"id":"5f4817f39b8e1c4d","name":"@scure/bip32","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/bip32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/bip32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip32/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@scure\\/bip32:\\@scure\\/bip32:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40scure/bip32@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"@scure/bip32","version":"1.4.0","author":"Paul Miller (https://paulmillr.com), Patricio Palladino , Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/noble/#scure","description":"Secure, audited & minimal implementation of BIP32 hierarchical deterministic (HD) wallets over secp256k1","url":"git+https://github.com/paulmillr/scure-bip32.git","private":false}},{"id":"0f92a1c1ac31f6b0","name":"@scure/bip39","version":"1.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@scure/bip39/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip39/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@scure/bip39/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@scure/bip39/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@scure\\/bip39:\\@scure\\/bip39:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40scure/bip39@1.3.0","metadataType":"javascript-npm-package","metadata":{"name":"@scure/bip39","version":"1.3.0","author":"Paul Miller (https://paulmillr.com), Patricio Palladino , Paul Miller (https://paulmillr.com)","homepage":"https://paulmillr.com/","description":"Secure, audited & minimal implementation of BIP39 mnemonic phrases","url":"git+https://github.com/paulmillr/scure-bip39.git","private":false}},{"id":"a29ebe9c01a24b05","name":"@sindresorhus/is","version":"0.7.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@sindresorhus/is/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@sindresorhus/is/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@sindresorhus/is/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@sindresorhus/is/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40sindresorhus/is@0.7.0","metadataType":"javascript-npm-package","metadata":{"name":"@sindresorhus/is","version":"0.7.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Type check values: `is.string('🦄') //=> true`","url":"sindresorhus/is","private":false}},{"id":"079d0d4fdf762801","name":"@swc/helpers","version":"0.3.17","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@swc/helpers/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@swc/helpers/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@swc/helpers/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@swc/helpers/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40swc/helpers@0.3.17","metadataType":"javascript-npm-package","metadata":{"name":"@swc/helpers","version":"0.3.17","author":"강동윤 ","homepage":"https://swc.rs","description":"External helpers for the swc project.","url":"git+https://github.com/swc-project/swc.git","private":false}},{"id":"43352d2f6855caf1","name":"@tokenizer/token","version":"0.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@tokenizer/token/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@tokenizer/token/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@tokenizer/token/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@tokenizer/token/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@tokenizer\\/token:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:Borewit:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40tokenizer/token@0.3.0","metadataType":"javascript-npm-package","metadata":{"name":"@tokenizer/token","version":"0.3.0","author":"Borewit (https://github.com/Borewit)","homepage":"","description":"TypeScript definition for strtok3 token","url":"https://github.com/Borewit/tokenizer-token.git","private":false}},{"id":"c5d7a329145ffcc6","name":"@tootallnate/once","version":"1.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/@tootallnate/once/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40tootallnate/once@1.1.2","metadataType":"javascript-npm-package","metadata":{"name":"@tootallnate/once","version":"1.1.2","author":"Nathan Rajlich (http://n8.io/)","homepage":"","description":"Creates a Promise that waits for a single event","url":"git://github.com/TooTallNate/once.git","private":false}},{"id":"f544b09023665970","name":"@tootallnate/once","version":"2.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@tootallnate/once/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@tootallnate/once/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@tootallnate/once/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@tootallnate/once/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40tootallnate/once@2.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@tootallnate/once","version":"2.0.0","author":"Nathan Rajlich (http://n8.io/)","homepage":"","description":"Creates a Promise that waits for a single event","url":"git://github.com/TooTallNate/once.git","private":false}},{"id":"ae93160dfc27d07c","name":"@types/component-emitter","version":"1.2.14","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/component-emitter/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/component-emitter/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/component-emitter/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/component-emitter/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/component:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/component:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/component-emitter@1.2.14","metadataType":"javascript-npm-package","metadata":{"name":"@types/component-emitter","version":"1.2.14","author":"Peter Snider (https://github.com/psnider)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/component-emitter","description":"TypeScript definitions for component-emitter","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"1339467e13b5c752","name":"@types/cookie","version":"0.4.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/cookie/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/cookie/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/cookie:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/cookie@0.4.1","metadataType":"javascript-npm-package","metadata":{"name":"@types/cookie","version":"0.4.1","author":"Pine Mizune (https://github.com/pine), Piotr Błażejewicz (https://github.com/peterblazejewicz)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cookie","description":"TypeScript definitions for cookie","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"bc4bb778990d4ea4","name":"@types/cors","version":"2.8.19","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/cors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/cors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/cors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/cors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/cors@2.8.19","metadataType":"javascript-npm-package","metadata":{"name":"@types/cors","version":"2.8.19","author":"Alan Plum (https://github.com/pluma), Gaurav Sharma (https://github.com/gtpan77), Sebastian Beltran (https://github.com/bjohansebas)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors","description":"TypeScript definitions for cors","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"6c978939ffb311b0","name":"@types/debug","version":"4.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/debug@4.1.12","metadataType":"javascript-npm-package","metadata":{"name":"@types/debug","version":"4.1.12","author":"Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug","description":"TypeScript definitions for debug","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"495a18008d72fd0f","name":"@types/ms","version":"2.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/ms/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/ms/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/ms/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/ms/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/ms@2.1.0","metadataType":"javascript-npm-package","metadata":{"name":"@types/ms","version":"2.1.0","author":"Zhiyuan Wang (https://github.com/danny8002)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms","description":"TypeScript definitions for ms","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"1a396f39fa44decd","name":"@types/node","version":"20.19.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/node/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/node/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:20.19.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/node@20.19.12","metadataType":"javascript-npm-package","metadata":{"name":"@types/node","version":"20.19.12","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","description":"TypeScript definitions for node","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"6fe716e8b0927a9d","name":"@types/node","version":"22.7.5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/node@22.7.5","metadataType":"javascript-npm-package","metadata":{"name":"@types/node","version":"22.7.5","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","description":"TypeScript definitions for node","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"d3c68c4be4da21f8","name":"@types/strip-bom","version":"3.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/strip-bom/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/strip-bom/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/strip-bom/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/strip-bom/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@types\\/strip-bom:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip-bom:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_bom:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_bom:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip-bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip_bom:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/strip-bom@3.0.0","metadataType":"javascript-npm-package","metadata":{"name":"@types/strip-bom","version":"3.0.0","author":"Mohamed Hegazy ","homepage":"","description":"TypeScript definitions for strip-bom","url":"https://www.github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"a1b120935894d604","name":"@types/strip-json-comments","version":"0.0.30","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/strip-json-comments/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/strip-json-comments/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/strip-json-comments/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/strip-json-comments/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@types\\/strip-json-comments:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip-json-comments:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_json_comments:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_json_comments:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip-json:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip-json:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_json:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip_json:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip-json-comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/strip:\\@types\\/strip_json_comments:0.0.30:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/strip-json-comments@0.0.30","metadataType":"javascript-npm-package","metadata":{"name":"@types/strip-json-comments","version":"0.0.30","author":"Dylan R. E. Moonfire (https://github.com/dmoonfire)","homepage":"","description":"TypeScript definitions for strip-json-comments","url":"https://www.github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"3e3be5c397de8382","name":"@types/triple-beam","version":"1.3.5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/triple-beam/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/triple-beam/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/triple-beam/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/triple-beam/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/triple-beam@1.3.5","metadataType":"javascript-npm-package","metadata":{"name":"@types/triple-beam","version":"1.3.5","author":"Daniel Byrne (https://github.com/danwbyrne)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam","description":"TypeScript definitions for triple-beam","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"28a4e010c7ae7198","name":"@types/validator","version":"13.15.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/validator/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/validator/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/validator/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/validator/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.15.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/validator:13.15.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/validator@13.15.3","metadataType":"javascript-npm-package","metadata":{"name":"@types/validator","version":"13.15.3","author":"tgfjt (https://github.com/tgfjt), Ilya Mochalov (https://github.com/chrootsu), Ayman Nedjmeddine (https://github.com/IOAyman), Louay Alakkad (https://github.com/louy), Bonggyun Lee (https://github.com/deptno), Naoto Yokoyama (https://github.com/builtinnya), Philipp Katz (https://github.com/qqilihq), Jace Warren (https://github.com/keatz55), Munif Tanjim (https://github.com/MunifTanjim), Vlad Poluch (https://github.com/vlapo), Piotr Błażejewicz (https://github.com/peterblazejewicz), Matteo Nista (https://github.com/Mattewn99), Daniel Freire (https://github.com/dcfreire), Rik Smale (https://github.com/WikiRik)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/validator","description":"TypeScript definitions for validator","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"bc7a53b52d363adb","name":"@types/ws","version":"8.5.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@types/ws/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/ws/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@types/ws/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@types/ws/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/ws:8.5.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:\\@types\\/ws:\\@types\\/ws:8.5.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/%40types/ws@8.5.3","metadataType":"javascript-npm-package","metadata":{"name":"@types/ws","version":"8.5.3","author":"Paul Loyd (https://github.com/loyd), Margus Lamp (https://github.com/mlamp), Philippe D'Alva (https://github.com/TitaneBoy), reduckted (https://github.com/reduckted), teidesu (https://github.com/teidesu), Bartosz Wojtkowiak (https://github.com/wojtkowiak), Kyle Hensel (https://github.com/k-yle), Samuel Skeen (https://github.com/cwadrupldijjit)","homepage":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws","description":"TypeScript definitions for ws","url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","private":false}},{"id":"7797aed52ef29847","name":"abbrev","version":"1.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/abbrev/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abbrev/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/abbrev/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abbrev/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/abbrev@1.1.1","metadataType":"javascript-npm-package","metadata":{"name":"abbrev","version":"1.1.1","author":"Isaac Z. Schlueter ","homepage":"","description":"Like ruby's abbrev module, but in js","url":"http://github.com/isaacs/abbrev-js","private":false}},{"id":"bfcf5eaa5daa3133","name":"abbrev","version":"3.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/abbrev@3.0.1","metadataType":"javascript-npm-package","metadata":{"name":"abbrev","version":"3.0.1","author":"GitHub Inc.","homepage":"","description":"Like ruby's abbrev module, but in js","url":"git+https://github.com/npm/abbrev-js.git","private":false}},{"id":"663ac1c9b870ce8a","name":"abitype","version":"0.7.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/abitype/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abitype/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/abitype/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abitype/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:wagmi-dev:abitype:0.7.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abitype:abitype:0.7.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/abitype@0.7.1","metadataType":"javascript-npm-package","metadata":{"name":"abitype","version":"0.7.1","author":"","homepage":"","description":"Strict TypeScript types for Ethereum ABIs","url":"https://github.com/wagmi-dev/abitype.git","private":false}},{"id":"7832aa1cacf310b2","name":"abort-controller","version":"3.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/abort-controller/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abort-controller/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/abort-controller/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/abort-controller/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:mysticatea:abort-controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:mysticatea:abort_controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/abort-controller@3.0.0","metadataType":"javascript-npm-package","metadata":{"name":"abort-controller","version":"3.0.0","author":"Toru Nagashima (https://github.com/mysticatea)","homepage":"https://github.com/mysticatea/abort-controller#readme","description":"An implementation of WHATWG AbortController interface.","url":"git+https://github.com/mysticatea/abort-controller.git","private":false}},{"id":"fe1f2ff03fb9475c","name":"accepts","version":"1.3.8","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/accepts/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/accepts/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/accepts/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/accepts/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/accepts@1.3.8","metadataType":"javascript-npm-package","metadata":{"name":"accepts","version":"1.3.8","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","homepage":"","description":"Higher-level content negotiation","url":"jshttp/accepts","private":false}},{"id":"c0f7127acbceb420","name":"acorn","version":"7.4.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:acornjs:acorn:7.4.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/acorn@7.4.1","metadataType":"javascript-npm-package","metadata":{"name":"acorn","version":"7.4.1","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","homepage":"https://github.com/acornjs/acorn","description":"ECMAScript parser","url":"https://github.com/acornjs/acorn.git","private":false}},{"id":"facfba058a0afa86","name":"acorn","version":"8.15.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/acorn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/acorn/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/acorn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/acorn/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:acornjs:acorn:8.15.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn:acorn:8.15.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/acorn@8.15.0","metadataType":"javascript-npm-package","metadata":{"name":"acorn","version":"8.15.0","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","homepage":"https://github.com/acornjs/acorn","description":"ECMAScript parser","url":"git+https://github.com/acornjs/acorn.git","private":false}},{"id":"dbdb98fb9b57cb53","name":"acorn-walk","version":"8.3.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/acorn-walk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/acorn-walk/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/acorn-walk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/acorn-walk/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:acorn-walk:acorn-walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn-walk:acorn_walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn_walk:acorn-walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn_walk:acorn_walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acornjs:acorn-walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acornjs:acorn_walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn:acorn-walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:acorn:acorn_walk:8.3.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/acorn-walk@8.3.4","metadataType":"javascript-npm-package","metadata":{"name":"acorn-walk","version":"8.3.4","author":"Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine","homepage":"https://github.com/acornjs/acorn","description":"ECMAScript (ESTree) AST walker","url":"https://github.com/acornjs/acorn.git","private":false}},{"id":"6ad4b0036eebc3a0","name":"aes-js","version":"4.0.0-beta.5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/aes-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aes-js/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/aes-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aes-js/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/aes-js@4.0.0-beta.5","metadataType":"javascript-npm-package","metadata":{"name":"aes-js","version":"4.0.0-beta.5","author":"Richard Moore ","homepage":"","description":"A pure JavaScript implementation of the AES block cipher and all common modes of operation.","url":"git://github.com/ricmoo/aes-js.git","private":false}},{"id":"aeef16c972765f3c","name":"agent-base","version":"6.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/agent-base@6.0.2","metadataType":"javascript-npm-package","metadata":{"name":"agent-base","version":"6.0.2","author":"Nathan Rajlich (http://n8.io/)","homepage":"","description":"Turn a function into an `http.Agent` instance","url":"git://github.com/TooTallNate/node-agent-base.git","private":false}},{"id":"96ecb0353e427e76","name":"agent-base","version":"7.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@npmcli/agent/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/agent-base@7.1.4","metadataType":"javascript-npm-package","metadata":{"name":"agent-base","version":"7.1.4","author":"Nathan Rajlich (http://n8.io/)","homepage":"","description":"Turn a function into an `http.Agent` instance","url":"https://github.com/TooTallNate/proxy-agents.git","private":false}},{"id":"89a76184ab2e6db2","name":"agent-base","version":"7.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/socks-proxy-agent/node_modules/agent-base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/agent-base@7.1.4","metadataType":"javascript-npm-package","metadata":{"name":"agent-base","version":"7.1.4","author":"Nathan Rajlich (http://n8.io/)","homepage":"","description":"Turn a function into an `http.Agent` instance","url":"https://github.com/TooTallNate/proxy-agents.git","private":false}},{"id":"c6a7724321f5beae","name":"agentkeepalive","version":"4.6.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/agentkeepalive/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/agentkeepalive/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/agentkeepalive/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/agentkeepalive/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/agentkeepalive@4.6.0","metadataType":"javascript-npm-package","metadata":{"name":"agentkeepalive","version":"4.6.0","author":"fengmk2 (https://github.com/fengmk2)","homepage":"","description":"Missing keepalive http.Agent","url":"git://github.com/node-modules/agentkeepalive.git","private":false}},{"id":"7cedce27af4fa8d6","name":"aggregate-error","version":"3.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/aggregate-error/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aggregate-error/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/aggregate-error/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aggregate-error/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/aggregate-error@3.1.0","metadataType":"javascript-npm-package","metadata":{"name":"aggregate-error","version":"3.1.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Create an error from multiple errors","url":"sindresorhus/aggregate-error","private":false}},{"id":"ba5607392e56dee9","name":"ansi-regex","version":"2.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@2.1.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"2.1.1","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"2b280fc78a93d0b1","name":"ansi-regex","version":"2.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@2.1.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"2.1.1","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"b93db3f55b850b14","name":"ansi-regex","version":"2.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@2.1.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"2.1.1","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"dddd120589f7009b","name":"ansi-regex","version":"3.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@3.0.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"3.0.1","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"215b7da2acde9858","name":"ansi-regex","version":"5.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@5.0.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"5.0.1","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"3f33beb59e12eb10","name":"ansi-regex","version":"6.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.0:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@6.2.0","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"6.2.0","author":"Sindre Sorhus (https://sindresorhus.com)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"c7daa267534d8282","name":"ansi-regex","version":"6.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.0:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/ansi-regex@6.2.0","metadataType":"javascript-npm-package","metadata":{"name":"ansi-regex","version":"6.2.0","author":"Sindre Sorhus (https://sindresorhus.com)","homepage":"","description":"Regular expression for matching ANSI escape codes","url":"chalk/ansi-regex","private":false}},{"id":"65b4c3eb14b71ee6","name":"ansi-styles","version":"2.2.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@2.2.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"2.2.1","author":"Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"f879ff424c2ec284","name":"ansi-styles","version":"3.2.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@3.2.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"3.2.1","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"c3f3679aac65318b","name":"ansi-styles","version":"4.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@4.3.0","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"4.3.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"c365b03d53f8ca80","name":"ansi-styles","version":"4.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@4.3.0","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"4.3.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"f3dee5a49bb85e72","name":"ansi-styles","version":"4.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@4.3.0","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"4.3.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"8270a49368d729a2","name":"ansi-styles","version":"6.2.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi-styles:ansi_styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi-styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi_styles:ansi_styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi-styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ansi:ansi_styles:6.2.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/ansi-styles@6.2.1","metadataType":"javascript-npm-package","metadata":{"name":"ansi-styles","version":"6.2.1","author":"Sindre Sorhus (https://sindresorhus.com)","homepage":"","description":"ANSI escape codes for styling strings in the terminal","url":"chalk/ansi-styles","private":false}},{"id":"1fdc06fdab01441e","name":"anymatch","version":"3.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/anymatch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/anymatch/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/anymatch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/anymatch/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:anymatch:3.1.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/anymatch@3.1.3","metadataType":"javascript-npm-package","metadata":{"name":"anymatch","version":"3.1.3","author":"Elan Shanker (https://github.com/es128)","homepage":"https://github.com/micromatch/anymatch","description":"Matches strings against configurable strings, globs, regular expressions, and/or functions","url":"https://github.com/micromatch/anymatch","private":false}},{"id":"40d1f9967f309c48","name":"append-field","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/append-field/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/append-field/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/append-field/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/append-field/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:LinusU:append-field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:LinusU:append_field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/append-field@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"append-field","version":"1.0.0","author":"Linus Unnebäck ","homepage":"","description":"","url":"http://github.com/LinusU/node-append-field.git","private":false}},{"id":"81de4b22dbb401d0","name":"aproba","version":"1.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/aproba/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aproba/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/aproba/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/aproba/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:iarna:aproba:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/aproba@1.2.0","metadataType":"javascript-npm-package","metadata":{"name":"aproba","version":"1.2.0","author":"Rebecca Turner ","homepage":"https://github.com/iarna/aproba","description":"A ridiculously light-weight argument validator (now browser friendly)","url":"https://github.com/iarna/aproba","private":false}},{"id":"3fb8ce78823b4311","name":"archive-type","version":"4.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archive-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archive-type/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archive-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archive-type/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archive-type:archive_type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archive_type:archive-type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archive_type:archive_type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archive:archive-type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archive:archive_type:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/archive-type@4.0.0","metadataType":"javascript-npm-package","metadata":{"name":"archive-type","version":"4.0.0","author":"Kevin Mårtensson (https://github.com/kevva)","homepage":"","description":"Detect the archive type of a Buffer/Uint8Array","url":"kevva/archive-type","private":false}},{"id":"dec4b5088a113d49","name":"archiver","version":"1.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archiver/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archiver/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:archiverjs:archiver:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/archiver@1.3.0","metadataType":"javascript-npm-package","metadata":{"name":"archiver","version":"1.3.0","author":"Chris Talkington (http://christalkington.com/)","homepage":"https://github.com/archiverjs/node-archiver","description":"a streaming interface for archive generation","url":"https://github.com/archiverjs/node-archiver.git","private":false}},{"id":"35ab1a4a9ad1f907","name":"archiver-utils","version":"1.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archiver-utils/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver-utils/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archiver-utils/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver-utils/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:archiver-utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:archiver_utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/archiver-utils@1.3.0","metadataType":"javascript-npm-package","metadata":{"name":"archiver-utils","version":"1.3.0","author":"Chris Talkington (http://christalkington.com/)","homepage":"https://github.com/archiverjs/archiver-utils#readme","description":"utility functions for archiver","url":"https://github.com/archiverjs/archiver-utils.git","private":false}},{"id":"38e39a5c3788e5c4","name":"are-we-there-yet","version":"1.1.7","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/are-we-there-yet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/are-we-there-yet/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/are-we-there-yet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/are-we-there-yet/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:iarna:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:iarna:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/are-we-there-yet@1.1.7","metadataType":"javascript-npm-package","metadata":{"name":"are-we-there-yet","version":"1.1.7","author":"Rebecca Turner (http://re-becca.org)","homepage":"https://github.com/iarna/are-we-there-yet","description":"Keep track of the overall completion of many disparate processes","url":"https://github.com/iarna/are-we-there-yet.git","private":false}},{"id":"a1e5dbdcb445cc0b","name":"are-we-there-yet","version":"3.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/are-we-there-yet@3.0.1","metadataType":"javascript-npm-package","metadata":{"name":"are-we-there-yet","version":"3.0.1","author":"GitHub Inc.","homepage":"https://github.com/npm/are-we-there-yet","description":"Keep track of the overall completion of many disparate processes","url":"https://github.com/npm/are-we-there-yet.git","private":false}},{"id":"1d7fb08b7a508a14","name":"arg","version":"4.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/arg/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arg/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/arg/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arg/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:arg:arg:4.1.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/arg@4.1.3","metadataType":"javascript-npm-package","metadata":{"name":"arg","version":"4.1.3","author":"Josh Junon ","homepage":"","description":"Another simple argument parser","url":"zeit/arg","private":false}},{"id":"d60313d70eaae47d","name":"argparse","version":"1.0.10","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/argparse/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/argparse/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/argparse/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/argparse/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/argparse@1.0.10","metadataType":"javascript-npm-package","metadata":{"name":"argparse","version":"1.0.10","author":"Eugene Shkuropat, Paul Jacobson","homepage":"","description":"Very powerful CLI arguments parser. Native port of argparse - python's options parsing library","url":"nodeca/argparse","private":false}},{"id":"79c9f00f6f2bc886","name":"arr-diff","version":"4.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/arr-diff/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-diff/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/arr-diff/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-diff/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:arr-diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:arr_diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-diff:arr-diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-diff:arr_diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_diff:arr-diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_diff:arr_diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr-diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr_diff:4.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/arr-diff@4.0.0","metadataType":"javascript-npm-package","metadata":{"name":"arr-diff","version":"4.0.0","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com)","homepage":"https://github.com/jonschlinkert/arr-diff","description":"Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.","url":"jonschlinkert/arr-diff","private":false}},{"id":"af48b36479290ede","name":"arr-flatten","version":"1.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/arr-flatten/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-flatten/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/arr-flatten/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-flatten/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:arr-flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:arr_flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-flatten:arr-flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-flatten:arr_flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_flatten:arr-flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_flatten:arr_flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr-flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr_flatten:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/arr-flatten@1.1.0","metadataType":"javascript-npm-package","metadata":{"name":"arr-flatten","version":"1.1.0","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Luke Edwards (https://lukeed.com)","homepage":"https://github.com/jonschlinkert/arr-flatten","description":"Recursively flatten an array or arrays.","url":"jonschlinkert/arr-flatten","private":false}},{"id":"93ff899831bd49b7","name":"arr-union","version":"3.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/arr-union/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-union/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/arr-union/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/arr-union/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:arr-union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:arr_union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-union:arr-union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr-union:arr_union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_union:arr-union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr_union:arr_union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr-union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:arr:arr_union:3.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/arr-union@3.1.0","metadataType":"javascript-npm-package","metadata":{"name":"arr-union","version":"3.1.0","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/arr-union","description":"Combines a list of arrays, returning a single array with unique values, using strict equality for comparisons.","url":"jonschlinkert/arr-union","private":false}},{"id":"f2867470e7b27597","name":"array-buffer-byte-length","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/array-buffer-byte-length/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-buffer-byte-length/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/array-buffer-byte-length/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-buffer-byte-length/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:inspect-js:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:inspect-js:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/array-buffer-byte-length@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"array-buffer-byte-length","version":"1.0.2","author":"Jordan Harband ","homepage":"https://github.com/inspect-js/array-buffer-byte-length#readme","description":"Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.","url":"git+https://github.com/inspect-js/array-buffer-byte-length.git","private":false}},{"id":"7aadb2fc6095104c","name":"array-each","version":"1.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/array-each/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-each/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/array-each/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-each/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:array-each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:array_each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-each:array-each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-each:array_each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_each:array-each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_each:array_each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array-each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array_each:1.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/array-each@1.0.1","metadataType":"javascript-npm-package","metadata":{"name":"array-each","version":"1.0.1","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/array-each","description":"Loop over each item in an array and call the given function on every element.","url":"jonschlinkert/array-each","private":false}},{"id":"5041c141565d0833","name":"array-flatten","version":"1.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/array-flatten/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-flatten/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/array-flatten/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-flatten/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/array-flatten@1.1.1","metadataType":"javascript-npm-package","metadata":{"name":"array-flatten","version":"1.1.1","author":"Blake Embrey (http://blakeembrey.me)","homepage":"https://github.com/blakeembrey/array-flatten","description":"Flatten an array of nested arrays into a single flat array","url":"git://github.com/blakeembrey/array-flatten.git","private":false}},{"id":"a261f10f751ab469","name":"array-slice","version":"1.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/array-slice/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-slice/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/array-slice/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-slice/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:array-slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:array_slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-slice:array-slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-slice:array_slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_slice:array-slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_slice:array_slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array-slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array_slice:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/array-slice@1.1.0","metadataType":"javascript-npm-package","metadata":{"name":"array-slice","version":"1.1.0","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/array-slice","description":"Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.","url":"jonschlinkert/array-slice","private":false}},{"id":"9bb35b54a028e73b","name":"array-unique","version":"0.3.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/array-unique/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-unique/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/array-unique/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/array-unique/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:array-unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:array_unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-unique:array-unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array-unique:array_unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_unique:array-unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array_unique:array_unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array-unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:array:array_unique:0.3.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/array-unique@0.3.2","metadataType":"javascript-npm-package","metadata":{"name":"array-unique","version":"0.3.2","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/array-unique","description":"Remove duplicate values from an array. Fastest ES5 implementation.","url":"jonschlinkert/array-unique","private":false}},{"id":"1c54e38011c51e5b","name":"asap","version":"2.0.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/asap/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/asap/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/asap/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/asap/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/asap@2.0.6","metadataType":"javascript-npm-package","metadata":{"name":"asap","version":"2.0.6","author":"","homepage":"","description":"High-priority task queue for Node.js and browsers","url":"https://github.com/kriskowal/asap.git","private":false}},{"id":"e57cc97cb7061a4e","name":"assert-never","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/assert-never/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/assert-never/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/assert-never/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/assert-never/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:assert-never:assert-never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assert-never:assert_never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assert_never:assert-never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assert_never:assert_never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assert:assert-never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assert:assert_never:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/assert-never@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"assert-never","version":"1.4.0","author":"Daniel Lytkin ","homepage":"","description":"Helper function for exhaustive checks of discriminated unions in TypeScript","url":"aikoven/assert-never","private":false}},{"id":"e6db49d199a690ef","name":"assign-symbols","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/assign-symbols/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/assign-symbols/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/assign-symbols/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/assign-symbols/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:assign-symbols:assign-symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assign-symbols:assign_symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assign_symbols:assign-symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assign_symbols:assign_symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:assign-symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:assign_symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assign:assign-symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:assign:assign_symbols:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/assign-symbols@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"assign-symbols","version":"1.0.0","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/assign-symbols","description":"Assign the enumerable es6 Symbol properties from an object (or objects) to the first object passed on the arguments. Can be used as a supplement to other extend, assign or merge methods as a polyfill for the Symbols part of the es6 Object.assign method.","url":"jonschlinkert/assign-symbols","private":false}},{"id":"50f2f4c26ff2ccab","name":"async","version":"2.6.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archiver/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/node_modules/async/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archiver/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/node_modules/async/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/async@2.6.4","metadataType":"javascript-npm-package","metadata":{"name":"async","version":"2.6.4","author":"Caolan McMahon","homepage":"https://caolan.github.io/async/","description":"Higher-order functions and common patterns for asynchronous code","url":"https://github.com/caolan/async.git","private":false}},{"id":"5aa21ddd678e2c5a","name":"async","version":"2.6.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/async@2.6.4","metadataType":"javascript-npm-package","metadata":{"name":"async","version":"2.6.4","author":"Caolan McMahon","homepage":"https://caolan.github.io/async/","description":"Higher-order functions and common patterns for asynchronous code","url":"https://github.com/caolan/async.git","private":false}},{"id":"6753e2a5837ba461","name":"async","version":"3.2.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/async/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/async/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/async/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/async@3.2.6","metadataType":"javascript-npm-package","metadata":{"name":"async","version":"3.2.6","author":"Caolan McMahon","homepage":"https://caolan.github.io/async/","description":"Higher-order functions and common patterns for asynchronous code","url":"https://github.com/caolan/async.git","private":false}},{"id":"dd9e19320bbf0929","name":"at-least-node","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/at-least-node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/at-least-node/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/at-least-node/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/at-least-node/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at-least-node:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at_least_node:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at_least_node:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at-least:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at-least:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at_least:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at_least:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:RyanZim:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:RyanZim:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at:at-least-node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:at:at_least_node:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/at-least-node@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"at-least-node","version":"1.0.0","author":"Ryan Zimmerman ","homepage":"https://github.com/RyanZim/at-least-node#readme","description":"Lightweight Node.js version sniffing/comparison","url":"git+https://github.com/RyanZim/at-least-node.git","private":false}},{"id":"27aacb47fbbddd97","name":"atob","version":"2.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/atob/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/atob/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"(MIT OR Apache-2.0)","spdxExpression":"(MIT OR Apache-2.0)","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/atob/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/atob/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:atob_project:atob:2.1.2:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/atob@2.1.2","metadataType":"javascript-npm-package","metadata":{"name":"atob","version":"2.1.2","author":"AJ ONeal (https://coolaj86.com)","homepage":"https://git.coolaj86.com/coolaj86/atob.js.git","description":"atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)","url":"git://git.coolaj86.com/coolaj86/atob.js.git","private":false}},{"id":"91c13e4c18804052","name":"available-typed-arrays","version":"1.0.7","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/available-typed-arrays/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/available-typed-arrays/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/available-typed-arrays/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/available-typed-arrays/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:inspect-js:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:inspect-js:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/available-typed-arrays@1.0.7","metadataType":"javascript-npm-package","metadata":{"name":"available-typed-arrays","version":"1.0.7","author":"Jordan Harband ","homepage":"https://github.com/inspect-js/available-typed-arrays#readme","description":"Returns an array of Typed Array names that are available in the current environment","url":"git+https://github.com/inspect-js/available-typed-arrays.git","private":false}},{"id":"716281520579424d","name":"babel-walk","version":"3.0.0-canary-5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/babel-walk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/babel-walk/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/babel-walk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/babel-walk/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:babel-walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel-walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel_walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel_walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:babel:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:pugjs:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:pugjs:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/babel-walk@3.0.0-canary-5","metadataType":"javascript-npm-package","metadata":{"name":"babel-walk","version":"3.0.0-canary-5","author":"Timothy Gu ","homepage":"","description":"Lightweight Babel AST traversal","url":"https://github.com/pugjs/babel-walk.git","private":false}},{"id":"956658d078dc7d57","name":"balanced-match","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/balanced-match/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/balanced-match/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/balanced-match/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/balanced-match/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/balanced-match@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"balanced-match","version":"1.0.2","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/balanced-match","description":"Match balanced character pairs, like \"{\" and \"}\"","url":"git://github.com/juliangruber/balanced-match.git","private":false}},{"id":"1921674c9fb6eba8","name":"base","version":"0.11.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:node-base:base:0.11.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base:base:0.11.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base@0.11.2","metadataType":"javascript-npm-package","metadata":{"name":"base","version":"0.11.2","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), John O'Donnell (https://github.com/criticalmash), Jon Schlinkert (http://twitter.com/jonschlinkert), tunnckoCore (https://i.am.charlike.online), , Brian Woodward (https://github.com/doowb), Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/node-base/base","description":"base is the foundation for creating modular, unit testable and highly pluggable node.js applications, starting with a handful of common methods, like `set`, `get`, `del` and `use`.","url":"node-base/base","private":false}},{"id":"c91bc2e84142f428","name":"base-files","version":"12.4+deb12u11","type":"deb","foundBy":"dpkg-db-cataloger","locations":[{"path":"/var/lib/dpkg/status.d/base-files","layerID":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35","accessPath":"/var/lib/dpkg/status.d/base-files","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/base-files/copyright","layerID":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35","accessPath":"/usr/share/doc/base-files/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/status.d/base-files.md5sums","layerID":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35","accessPath":"/var/lib/dpkg/status.d/base-files.md5sums","annotations":{"evidence":"supporting"}}],"licenses":[{"value":"GPL","spdxExpression":"","type":"declared","urls":[],"locations":[{"path":"/usr/share/doc/base-files/copyright","layerID":"sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35","accessPath":"/usr/share/doc/base-files/copyright"}]}],"language":"","cpes":[{"cpe":"cpe:2.3:a:base-files:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base-files:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base_files:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base_files:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base:base-files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base:base_files:12.4\\+deb12u11:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:deb/debian/base-files@12.4%2Bdeb12u11?arch=amd64&distro=debian-12","metadataType":"dpkg-db-entry","metadata":{"package":"base-files","source":"","version":"12.4+deb12u11","sourceVersion":"","architecture":"amd64","maintainer":"Santiago Vila ","installedSize":341,"provides":["base"],"preDepends":["awk"],"files":[{"path":"/usr/lib/os-release","digest":{"algorithm":"md5","value":"07d31e7e63800ab1b7966980709c51eb"},"isConfigFile":false},{"path":"/usr/share/base-files/dot.bashrc","digest":{"algorithm":"md5","value":"0a540d50c157ed0070459b82c358a05a"},"isConfigFile":false},{"path":"/usr/share/base-files/dot.profile","digest":{"algorithm":"md5","value":"d68ce7c7d7d2bb7d48aeb2f137b828e4"},"isConfigFile":false},{"path":"/usr/share/base-files/dot.profile.md5sums","digest":{"algorithm":"md5","value":"6db82730e03aaeeecb8fee76b73d96d4"},"isConfigFile":false},{"path":"/usr/share/base-files/info.dir","digest":{"algorithm":"md5","value":"f9128f409878ce10d54d06488e3ce136"},"isConfigFile":false},{"path":"/usr/share/base-files/motd","digest":{"algorithm":"md5","value":"9830e3dbb6a828f2cc824db8db0ceaf7"},"isConfigFile":false},{"path":"/usr/share/base-files/profile","digest":{"algorithm":"md5","value":"48a30a427d1794feb49f102b87ddce2b"},"isConfigFile":false},{"path":"/usr/share/base-files/profile.md5sums","digest":{"algorithm":"md5","value":"9be77181dd5dcc2b87956e3d45ed191d"},"isConfigFile":false},{"path":"/usr/share/base-files/staff-group-for-usr-local","digest":{"algorithm":"md5","value":"f3b332b9a376a0567236f54d7d87f85e"},"isConfigFile":false},{"path":"/usr/share/common-licenses/Apache-2.0","digest":{"algorithm":"md5","value":"3b83ef96387f14655fc854ddc3c6bd57"},"isConfigFile":false},{"path":"/usr/share/common-licenses/Artistic","digest":{"algorithm":"md5","value":"f921793d03cc6d63ec4b15e9be8fd3f8"},"isConfigFile":false},{"path":"/usr/share/common-licenses/BSD","digest":{"algorithm":"md5","value":"3775480a712fc46a69647678acb234cb"},"isConfigFile":false},{"path":"/usr/share/common-licenses/CC0-1.0","digest":{"algorithm":"md5","value":"65d3616852dbf7b1a6d4b53b00626032"},"isConfigFile":false},{"path":"/usr/share/common-licenses/GFDL-1.2","digest":{"algorithm":"md5","value":"cfe2a5472d5eaa226eae091d4114ce29"},"isConfigFile":false},{"path":"/usr/share/common-licenses/GFDL-1.3","digest":{"algorithm":"md5","value":"a22d0be1ce2284b67950a4d1673dd1b0"},"isConfigFile":false},{"path":"/usr/share/common-licenses/GPL-1","digest":{"algorithm":"md5","value":"5b122a36d0f6dc55279a0ebc69f3c60b"},"isConfigFile":false},{"path":"/usr/share/common-licenses/GPL-2","digest":{"algorithm":"md5","value":"b234ee4d69f5fce4486a80fdaf4a4263"},"isConfigFile":false},{"path":"/usr/share/common-licenses/GPL-3","digest":{"algorithm":"md5","value":"1ebbd3e34237af26da5dc08a4e440464"},"isConfigFile":false},{"path":"/usr/share/common-licenses/LGPL-2","digest":{"algorithm":"md5","value":"4cf66a4984120007c9881cc871cf49db"},"isConfigFile":false},{"path":"/usr/share/common-licenses/LGPL-2.1","digest":{"algorithm":"md5","value":"4fbd65380cdd255951079008b364516c"},"isConfigFile":false},{"path":"/usr/share/common-licenses/LGPL-3","digest":{"algorithm":"md5","value":"3000208d539ec061b899bce1d9ce9404"},"isConfigFile":false},{"path":"/usr/share/common-licenses/MPL-1.1","digest":{"algorithm":"md5","value":"0c5913925d40b124fb52ce84c5deb3f3"},"isConfigFile":false},{"path":"/usr/share/common-licenses/MPL-2.0","digest":{"algorithm":"md5","value":"815ca599c9df247a0c7f619bab123dad"},"isConfigFile":false},{"path":"/usr/share/doc/base-files/README","digest":{"algorithm":"md5","value":"af032ddc1821dfc3eb1dbb5883910119"},"isConfigFile":false},{"path":"/usr/share/doc/base-files/README.FHS","digest":{"algorithm":"md5","value":"fbd937e067f0a83fb9422713a6b84a8a"},"isConfigFile":false},{"path":"/usr/share/doc/base-files/changelog.gz","digest":{"algorithm":"md5","value":"3fa5ee8dc0d994cdc2c4f7022606f81e"},"isConfigFile":false},{"path":"/usr/share/doc/base-files/copyright","digest":{"algorithm":"md5","value":"1b8bb96d42614948cb7de2882e191734"},"isConfigFile":false},{"path":"/usr/share/lintian/overrides/base-files","digest":{"algorithm":"md5","value":"9dbaaf7a8333c30200f3d11e831acb82"},"isConfigFile":false}]}},{"id":"7b4063d10599bfae","name":"base64-arraybuffer","version":"0.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/base64-arraybuffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64-arraybuffer/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/base64-arraybuffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64-arraybuffer/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:niklasvh:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:niklasvh:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base64-arraybuffer@0.1.4","metadataType":"javascript-npm-package","metadata":{"name":"base64-arraybuffer","version":"0.1.4","author":"Niklas von Hertzen (http://hertzen.com)","homepage":"https://github.com/niklasvh/base64-arraybuffer","description":"Encode/decode base64 data into ArrayBuffers","url":"https://github.com/niklasvh/base64-arraybuffer","private":false}},{"id":"6f1f1a7796cb63d0","name":"base64-js","version":"0.0.8","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:beatgammit:base64-js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beatgammit:base64_js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base64-js@0.0.8","metadataType":"javascript-npm-package","metadata":{"name":"base64-js","version":"0.0.8","author":"T. Jameson Little ","homepage":"","description":"Base64 encoding/decoding in pure JS","url":"git://github.com/beatgammit/base64-js.git","private":false}},{"id":"c493a9a41b36da0b","name":"base64-js","version":"1.5.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/base64-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64-js/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/base64-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64-js/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base64-js@1.5.1","metadataType":"javascript-npm-package","metadata":{"name":"base64-js","version":"1.5.1","author":"T. Jameson Little ","homepage":"https://github.com/beatgammit/base64-js","description":"Base64 encoding/decoding in pure JS","url":"git://github.com/beatgammit/base64-js.git","private":false}},{"id":"d1750eb90689f1a4","name":"base64id","version":"2.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/base64id/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64id/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/base64id/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64id/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:faeldt:base64id:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base64id@2.0.0","metadataType":"javascript-npm-package","metadata":{"name":"base64id","version":"2.0.0","author":"Kristian Faeldt ","homepage":"","description":"Generates a base64 id","url":"https://github.com/faeldt/base64id.git","private":false}},{"id":"2f8a9d6c7656ba10","name":"base64url","version":"0.0.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/base64url/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64url/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/base64url/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/base64url/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brianloveswords:base64url:0.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/base64url@0.0.6","metadataType":"javascript-npm-package","metadata":{"name":"base64url","version":"0.0.6","author":"Brian J Brennan","homepage":"","description":"For encoding to/from base64urls","url":"git://github.com/brianloveswords/base64url.git","private":false}},{"id":"580ca5f2beaae938","name":"basic-auth","version":"2.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/morgan/node_modules/basic-auth/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/basic-auth@2.0.1","metadataType":"javascript-npm-package","metadata":{"name":"basic-auth","version":"2.0.1","author":"","homepage":"","description":"node.js basic auth parser","url":"jshttp/basic-auth","private":false}},{"id":"344c43aaf43bb8dc","name":"batch","version":"0.6.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/batch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/batch/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/batch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/batch/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:visionmedia:batch:0.6.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/batch@0.6.1","metadataType":"javascript-npm-package","metadata":{"name":"batch","version":"0.6.1","author":"TJ Holowaychuk ","homepage":"","description":"Simple async batch with concurrency control and progress reporting.","url":"https://github.com/visionmedia/batch.git","private":false}},{"id":"99a08ef6ddd74ba7","name":"baz","version":"UNKNOWN","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json","annotations":{"evidence":"primary"}}],"licenses":[],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:baz:baz:*:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/baz","metadataType":"javascript-npm-package","metadata":{"name":"baz","version":"","author":"","homepage":"","description":"","url":"","private":false}},{"id":"ac8f35c9bc6d4edc","name":"beep-boop","version":"1.2.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/github-from-package/example/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/github-from-package/example/package.json","annotations":{"evidence":"primary"}}],"licenses":[],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/beep-boop@1.2.3","metadataType":"javascript-npm-package","metadata":{"name":"beep-boop","version":"1.2.3","author":"","homepage":"","description":"","url":"git@github.com:substack/beep-boop.git","private":false}},{"id":"6efaee3d2e9117ff","name":"big-integer","version":"1.6.52","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/big-integer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/big-integer/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"Unlicense","spdxExpression":"Unlicense","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/big-integer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/big-integer/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/big-integer@1.6.52","metadataType":"javascript-npm-package","metadata":{"name":"big-integer","version":"1.6.52","author":"Peter Olson ","homepage":"","description":"An arbitrary length integer library for Javascript","url":"git@github.com:peterolson/BigInteger.js.git","private":false}},{"id":"aac28aacec14e6f2","name":"binary","version":"0.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/binary/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/binary/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/binary/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/binary/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/binary@0.3.0","metadataType":"javascript-npm-package","metadata":{"name":"binary","version":"0.3.0","author":"James Halliday (http://substack.net)","homepage":"","description":"Unpack multibyte binary values from buffers","url":"http://github.com/substack/node-binary.git","private":false}},{"id":"cdea7c486a93d741","name":"binary-extensions","version":"2.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/binary-extensions/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/binary-extensions/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/binary-extensions/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/binary-extensions/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:binary-extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary-extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary_extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary_extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary:binary-extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:binary:binary_extensions:2.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/binary-extensions@2.3.0","metadataType":"javascript-npm-package","metadata":{"name":"binary-extensions","version":"2.3.0","author":"Sindre Sorhus (https://sindresorhus.com)","homepage":"","description":"List of binary file extensions","url":"sindresorhus/binary-extensions","private":false}},{"id":"848e919a5348c76e","name":"bindings","version":"1.5.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bindings/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bindings/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bindings/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bindings/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bindings@1.5.0","metadataType":"javascript-npm-package","metadata":{"name":"bindings","version":"1.5.0","author":"Nathan Rajlich (http://tootallnate.net)","homepage":"https://github.com/TooTallNate/node-bindings","description":"Helper module for loading your native module's .node file","url":"git://github.com/TooTallNate/node-bindings.git","private":false}},{"id":"db53f4ebaee4e2cf","name":"bintrees","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bintrees/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bintrees/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bintrees/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bintrees/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:bintrees:bintrees:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:vadimg:bintrees:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bintrees@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"bintrees","version":"1.0.2","author":"Vadim Graboys ","homepage":"","description":"Binary Search Trees","url":"git://github.com/vadimg/js_bintrees.git","private":false}},{"id":"1d71c68896a44c86","name":"bl","version":"1.2.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bl/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bl/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bl/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bl/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bl@1.2.3","metadataType":"javascript-npm-package","metadata":{"name":"bl","version":"1.2.3","author":"Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)","homepage":"https://github.com/rvagg/bl","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","url":"https://github.com/rvagg/bl.git","private":false}},{"id":"846a0edd607229fd","name":"bl","version":"4.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bl@4.1.0","metadataType":"javascript-npm-package","metadata":{"name":"bl","version":"4.1.0","author":"Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)","homepage":"https://github.com/rvagg/bl","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","url":"https://github.com/rvagg/bl.git","private":false}},{"id":"441b568aa058ddd4","name":"bluebird","version":"3.4.7","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:petkaantonov:bluebird:3.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bluebird:bluebird:3.4.7:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bluebird@3.4.7","metadataType":"javascript-npm-package","metadata":{"name":"bluebird","version":"3.4.7","author":"Petka Antonov (http://github.com/petkaantonov/)","homepage":"https://github.com/petkaantonov/bluebird","description":"Full featured Promises/A+ implementation with exceptionally good performance","url":"git://github.com/petkaantonov/bluebird.git","private":false}},{"id":"45ec017cc93f373c","name":"bluebird","version":"3.7.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bluebird/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bluebird/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bluebird/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bluebird/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:petkaantonov:bluebird:3.7.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bluebird@3.7.2","metadataType":"javascript-npm-package","metadata":{"name":"bluebird","version":"3.7.2","author":"Petka Antonov (http://github.com/petkaantonov/)","homepage":"https://github.com/petkaantonov/bluebird","description":"Full featured Promises/A+ implementation with exceptionally good performance","url":"git://github.com/petkaantonov/bluebird.git","private":false}},{"id":"d8348f0566c46229","name":"body-parser","version":"1.20.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/body-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/body-parser/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/body-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/body-parser/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:openjsf:body-parser:1.20.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/body-parser@1.20.3","metadataType":"javascript-npm-package","metadata":{"name":"body-parser","version":"1.20.3","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","homepage":"","description":"Node.js body parsing middleware","url":"expressjs/body-parser","private":false}},{"id":"2c560d35b75226b0","name":"bower-config","version":"1.4.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bower-config/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bower-config/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bower-config/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bower-config/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:bower-config:bower-config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bower-config:bower_config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bower_config:bower-config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bower_config:bower_config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bower:bower-config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:bower:bower_config:1.4.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bower-config@1.4.3","metadataType":"javascript-npm-package","metadata":{"name":"bower-config","version":"1.4.3","author":"Twitter","homepage":"http://bower.io","description":"The Bower config reader and writer.","url":"https://github.com/bower/bower/tree/master/packages/bower-config","private":false}},{"id":"79ca6b57cb6da8f4","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver-utils/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"edfc435f78ffbb1c","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/archiver/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"38ff028c7c458475","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/file-js/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"c861e69821b6b8fe","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/fstream/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"70266c742ac992ba","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"e9b43263265b984a","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ignore-walk/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"28fb5bb71047516a","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-pre-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"098d823421bc1197","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"17d5b1f1f2c265c0","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"ec01b45e50a80fc7","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"204df6e1c0323307","name":"brace-expansion","version":"1.1.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/ts-node-dev/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:1.1.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@1.1.12","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"1.1.12","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"1fcda56aa7b9b39c","name":"brace-expansion","version":"2.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/brace-expansion/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brace-expansion:brace-expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace-expansion:brace_expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace-expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace_expansion:brace_expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace-expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:juliangruber:brace_expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace-expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brace:brace_expansion:2.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brace-expansion@2.0.2","metadataType":"javascript-npm-package","metadata":{"name":"brace-expansion","version":"2.0.2","author":"Julian Gruber (http://juliangruber.com)","homepage":"https://github.com/juliangruber/brace-expansion","description":"Brace expansion as known from sh/bash","url":"git://github.com/juliangruber/brace-expansion.git","private":false}},{"id":"e18c817c2057c675","name":"braces","version":"2.3.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/braces/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/braces/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:braces_project:braces:2.3.2:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"},{"cpe":"cpe:2.3:a:jonschlinkert:braces:2.3.2:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/braces@2.3.2","metadataType":"javascript-npm-package","metadata":{"name":"braces","version":"2.3.2","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","homepage":"https://github.com/micromatch/braces","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","url":"micromatch/braces","private":false}},{"id":"1fea4d70444c02f0","name":"braces","version":"3.0.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chokidar/node_modules/braces/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"},{"cpe":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/braces@3.0.3","metadataType":"javascript-npm-package","metadata":{"name":"braces","version":"3.0.3","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","homepage":"https://github.com/micromatch/braces","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","url":"micromatch/braces","private":false}},{"id":"05e4a42f1d20184c","name":"braces","version":"3.0.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt/node_modules/braces/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt/node_modules/braces/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"},{"cpe":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/braces@3.0.3","metadataType":"javascript-npm-package","metadata":{"name":"braces","version":"3.0.3","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","homepage":"https://github.com/micromatch/braces","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","url":"micromatch/braces","private":false}},{"id":"7300fec6ea68a472","name":"braces","version":"3.0.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/liftup/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/liftup/node_modules/braces/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/liftup/node_modules/braces/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/liftup/node_modules/braces/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"},{"cpe":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/braces@3.0.3","metadataType":"javascript-npm-package","metadata":{"name":"braces","version":"3.0.3","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","homepage":"https://github.com/micromatch/braces","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","url":"micromatch/braces","private":false}},{"id":"470bc485996d4bbe","name":"brotli","version":"1.3.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/brotli/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/brotli/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/brotli/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/brotli/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:devongovett:brotli:1.3.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/brotli@1.3.3","metadataType":"javascript-npm-package","metadata":{"name":"brotli","version":"1.3.3","author":"Devon Govett ","homepage":"https://github.com/devongovett/brotli.js","description":"A port of the Brotli compression algorithm as used in WOFF2","url":"https://github.com/devongovett/brotli.js.git","private":false}},{"id":"0ec800aec91252a5","name":"browser_field","version":"UNKNOWN","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json","annotations":{"evidence":"primary"}}],"licenses":[],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:browser-field:browser-field:*:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:browser-field:browser_field:*:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:browser_field:browser-field:*:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:browser_field:browser_field:*:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:browser:browser-field:*:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:browser:browser_field:*:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/browser_field","metadataType":"javascript-npm-package","metadata":{"name":"browser_field","version":"","author":"","homepage":"","description":"","url":"","private":false}},{"id":"8160d61272f16fc2","name":"buffer","version":"5.7.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer@5.7.1","metadataType":"javascript-npm-package","metadata":{"name":"buffer","version":"5.7.1","author":"Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ","homepage":"https://github.com/feross/buffer","description":"Node.js Buffer API, for the browser","url":"git://github.com/feross/buffer.git","private":false}},{"id":"b34920cb2184e6ad","name":"buffer","version":"6.0.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer@6.0.3","metadataType":"javascript-npm-package","metadata":{"name":"buffer","version":"6.0.3","author":"Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ","homepage":"https://github.com/feross/buffer","description":"Node.js Buffer API, for the browser","url":"git://github.com/feross/buffer.git","private":false}},{"id":"0215db4a4aa6cd05","name":"buffer-alloc","version":"1.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-alloc/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-alloc/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-alloc/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-alloc/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-alloc@1.2.0","metadataType":"javascript-npm-package","metadata":{"name":"buffer-alloc","version":"1.2.0","author":"","homepage":"","description":"","url":"LinusU/buffer-alloc","private":false}},{"id":"72525885a05217f9","name":"buffer-alloc-unsafe","version":"1.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-alloc-unsafe@1.1.0","metadataType":"javascript-npm-package","metadata":{"name":"buffer-alloc-unsafe","version":"1.1.0","author":"","homepage":"","description":"","url":"LinusU/buffer-alloc-unsafe","private":false}},{"id":"018e707480d9a394","name":"buffer-crc32","version":"0.2.13","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-crc32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-crc32/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-crc32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-crc32/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-crc32@0.2.13","metadataType":"javascript-npm-package","metadata":{"name":"buffer-crc32","version":"0.2.13","author":"Brian J. Brennan , Vladimir Kuznetsov","homepage":"https://github.com/brianloveswords/buffer-crc32","description":"A pure javascript CRC32 algorithm that plays nice with binary data","url":"git://github.com/brianloveswords/buffer-crc32.git","private":false}},{"id":"b5b4b05d23ef0590","name":"buffer-fill","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-fill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-fill/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-fill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-fill/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-fill@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"buffer-fill","version":"1.0.0","author":"","homepage":"","description":"","url":"LinusU/buffer-fill","private":false}},{"id":"d2869a97005ddd30","name":"buffer-from","version":"1.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-from/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-from/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-from/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-from/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-from@1.1.2","metadataType":"javascript-npm-package","metadata":{"name":"buffer-from","version":"1.1.2","author":"","homepage":"","description":"","url":"LinusU/buffer-from","private":false}},{"id":"08bc6bd9a895200f","name":"buffer-indexof-polyfill","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffer-indexof-polyfill@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"buffer-indexof-polyfill","version":"1.0.2","author":"https://github.com/sarosia","homepage":"https://github.com/sarosia/buffer-indexof-polyfill#readme","description":"This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.","url":"git+https://github.com/sarosia/buffer-indexof-polyfill.git","private":false}},{"id":"fd60bbd17e6803d8","name":"buffers","version":"0.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/buffers/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/buffers/package.json","annotations":{"evidence":"primary"}}],"licenses":[],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/buffers@0.1.1","metadataType":"javascript-npm-package","metadata":{"name":"buffers","version":"0.1.1","author":"James Halliday (http://substack.net)","homepage":"","description":"Treat a collection of Buffers as a single contiguous partially mutable Buffer.","url":"http://github.com/substack/node-buffers.git","private":false}},{"id":"72b84630ff8aade7","name":"busboy","version":"1.6.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/busboy/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/busboy/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/busboy/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/busboy/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:mscdex:busboy:1.6.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/busboy@1.6.0","metadataType":"javascript-npm-package","metadata":{"name":"busboy","version":"1.6.0","author":"Brian White ","homepage":"","description":"A streaming parser for HTML form data for node.js","url":"http://github.com/mscdex/busboy.git","private":false}},{"id":"1db66371bc7880de","name":"byline","version":"4.2.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/byline/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/byline/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/byline/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/byline/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jahewson:byline:4.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:byline:byline:4.2.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/byline@4.2.2","metadataType":"javascript-npm-package","metadata":{"name":"byline","version":"4.2.2","author":"John Hewson","homepage":"https://github.com/jahewson/node-byline","description":"simple line-by-line stream reader","url":"https://github.com/jahewson/node-byline","private":false}},{"id":"1d0cce2090c4dc09","name":"bytes","version":"3.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/bytes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bytes/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/bytes/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/bytes/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/bytes@3.1.2","metadataType":"javascript-npm-package","metadata":{"name":"bytes","version":"3.1.2","author":"TJ Holowaychuk (http://tjholowaychuk.com), Jed Watson , Théo FIDRY ","homepage":"","description":"Utility to parse a string bytes to bytes and vice-versa","url":"visionmedia/bytes.js","private":false}},{"id":"f5c0681a2e946e2d","name":"cacache","version":"15.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cacache:cacache:15.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:npm:cacache:15.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cacache@15.3.0","metadataType":"javascript-npm-package","metadata":{"name":"cacache","version":"15.3.0","author":"","homepage":"","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","url":"https://github.com/npm/cacache","private":false}},{"id":"ace0af3ce948f36b","name":"cacache","version":"19.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cacache/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cacache/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cacache/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cacache/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cacache@19.0.1","metadataType":"javascript-npm-package","metadata":{"name":"cacache","version":"19.0.1","author":"GitHub Inc.","homepage":"","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","url":"git+https://github.com/npm/cacache.git","private":false}},{"id":"baaa5d54fe4a3c13","name":"cache-base","version":"1.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cache-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cache-base/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cache-base/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cache-base/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cache-base_project:cache-base:1.0.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/cache-base@1.0.1","metadataType":"javascript-npm-package","metadata":{"name":"cache-base","version":"1.0.1","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), ","homepage":"https://github.com/jonschlinkert/cache-base","description":"Basic object cache with `get`, `set`, `del`, and `has` methods for node.js/javascript projects.","url":"jonschlinkert/cache-base","private":false}},{"id":"346e1627c1f72870","name":"cacheable-request","version":"2.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cacheable-request/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cacheable-request/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cacheable-request/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cacheable-request/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cacheable-request:cacheable_request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cacheable_request:cacheable-request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cacheable_request:cacheable_request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:lukechilds:cacheable-request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:lukechilds:cacheable_request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cacheable:cacheable-request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cacheable:cacheable_request:2.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cacheable-request@2.1.4","metadataType":"javascript-npm-package","metadata":{"name":"cacheable-request","version":"2.1.4","author":"Luke Childs (http://lukechilds.co.uk)","homepage":"https://github.com/lukechilds/cacheable-request","description":"Wrap native HTTP requests with RFC compliant cache support","url":"git+https://github.com/lukechilds/cacheable-request.git","private":false}},{"id":"b538562043029461","name":"call-bind","version":"1.0.8","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/call-bind/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bind/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/call-bind/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bind/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:call-bind:call-bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind:call_bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind:call-bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind:call_bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call-bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call_bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call-bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call_bind:1.0.8:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/call-bind@1.0.8","metadataType":"javascript-npm-package","metadata":{"name":"call-bind","version":"1.0.8","author":"Jordan Harband ","homepage":"https://github.com/ljharb/call-bind#readme","description":"Robustly `.call.bind()` a function","url":"git+https://github.com/ljharb/call-bind.git","private":false}},{"id":"0d18b02f5378691f","name":"call-bind-apply-helpers","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/call-bind-apply-helpers@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"call-bind-apply-helpers","version":"1.0.2","author":"Jordan Harband ","homepage":"https://github.com/ljharb/call-bind-apply-helpers#readme","description":"Helper functions around Function call/apply/bind, for use in `call-bind`","url":"git+https://github.com/ljharb/call-bind-apply-helpers.git","private":false}},{"id":"44af6e189fe32d87","name":"call-bound","version":"1.0.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/call-bound/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bound/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/call-bound/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/call-bound/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/call-bound@1.0.4","metadataType":"javascript-npm-package","metadata":{"name":"call-bound","version":"1.0.4","author":"Jordan Harband ","homepage":"https://github.com/ljharb/call-bound#readme","description":"Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.","url":"git+https://github.com/ljharb/call-bound.git","private":false}},{"id":"92e4f8e8e365d6ef","name":"camelcase","version":"5.3.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/camelcase/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/camelcase/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/camelcase/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/camelcase/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/camelcase@5.3.1","metadataType":"javascript-npm-package","metadata":{"name":"camelcase","version":"5.3.1","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`","url":"sindresorhus/camelcase","private":false}},{"id":"6e4c3d3622249d54","name":"chainsaw","version":"0.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/chainsaw/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chainsaw/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT/X11","spdxExpression":"","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/chainsaw/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chainsaw/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chainsaw@0.1.0","metadataType":"javascript-npm-package","metadata":{"name":"chainsaw","version":"0.1.0","author":"James Halliday (http://substack.net)","homepage":"","description":"Build chainable fluent interfaces the easy way... with a freakin' chainsaw!","url":"http://github.com/substack/node-chainsaw.git","private":false}},{"id":"af9826c69b6847f8","name":"chalk","version":"1.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chalk@1.1.3","metadataType":"javascript-npm-package","metadata":{"name":"chalk","version":"1.1.3","author":"Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)","homepage":"","description":"Terminal string styling done right. Much color.","url":"chalk/chalk","private":false}},{"id":"015bdd0e54562d25","name":"chalk","version":"2.4.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chalk@2.4.2","metadataType":"javascript-npm-package","metadata":{"name":"chalk","version":"2.4.2","author":"","homepage":"","description":"Terminal string styling done right","url":"chalk/chalk","private":false}},{"id":"7fe24d7225fc8b9a","name":"chalk","version":"4.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chalk@4.1.2","metadataType":"javascript-npm-package","metadata":{"name":"chalk","version":"4.1.2","author":"","homepage":"","description":"Terminal string styling done right","url":"chalk/chalk","private":false}},{"id":"34bd9ccc72e70b6f","name":"character-parser","version":"2.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/character-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/character-parser/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/character-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/character-parser/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:character-parser:character-parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:character-parser:character_parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:character_parser:character-parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:character_parser:character_parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ForbesLindesay:character-parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ForbesLindesay:character_parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:character:character-parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:character:character_parser:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/character-parser@2.2.0","metadataType":"javascript-npm-package","metadata":{"name":"character-parser","version":"2.2.0","author":"ForbesLindesay","homepage":"","description":"Parse JavaScript one character at a time to look for snippets in Templates. This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.","url":"https://github.com/ForbesLindesay/character-parser.git","private":false}},{"id":"0eb2e961c16ff8ae","name":"check-dependencies","version":"1.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/check-dependencies/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-dependencies/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/check-dependencies/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-dependencies/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:check-dependencies:check-dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check-dependencies:check_dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_dependencies:check-dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_dependencies:check_dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check-dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check_dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:mgol:check-dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:mgol:check_dependencies:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/check-dependencies@1.1.1","metadataType":"javascript-npm-package","metadata":{"name":"check-dependencies","version":"1.1.1","author":"Michał Gołębiowski-Owczarek ","homepage":"https://github.com/mgol/check-dependencies","description":"Checks if currently installed npm/bower dependencies are installed in the exact same versions that are specified in package.json/bower.json","url":"https://github.com/mgol/check-dependencies.git","private":false}},{"id":"c843870ea5cc0a9b","name":"check-internet-connected","version":"2.0.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/check-internet-connected/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-internet-connected/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/check-internet-connected/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-internet-connected/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:check-internet-connected:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check-internet-connected:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_internet_connected:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_internet_connected:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check-internet:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check-internet:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_internet:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_internet:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aankur:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aankur:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check-internet-connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check_internet_connected:2.0.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/check-internet-connected@2.0.6","metadataType":"javascript-npm-package","metadata":{"name":"check-internet-connected","version":"2.0.6","author":"Ankur Deep Jaiswal ","homepage":"https://github.com/aankur/check-internet-connected","description":"Utility to check if internet is connected or not","url":"aankur/check-internet-connected","private":false}},{"id":"85b9eff83ffcd831","name":"check-types","version":"6.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/check-types/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-types/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/check-types/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/check-types/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:philbooth:check-types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:philbooth:check_types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/check-types@6.0.0","metadataType":"javascript-npm-package","metadata":{"name":"check-types","version":"6.0.0","author":"Phil Booth (https://github.com/philbooth)","homepage":"https://github.com/philbooth/check-types.js","description":"A little library for asserting types and values.","url":"https://github.com/philbooth/check-types.js.git","private":false}},{"id":"4d185a05cefa7d0a","name":"chokidar","version":"3.5.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/chokidar/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chokidar/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/chokidar/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chokidar/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:paulmillr:chokidar:3.5.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:chokidar:chokidar:3.5.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chokidar@3.5.1","metadataType":"javascript-npm-package","metadata":{"name":"chokidar","version":"3.5.1","author":"Paul Miller (https://paulmillr.com), Paul Miller (https://paulmillr.com), Elan Shanker","homepage":"https://github.com/paulmillr/chokidar","description":"Minimal and efficient cross-platform file watching library","url":"git+https://github.com/paulmillr/chokidar.git","private":false}},{"id":"7ebcfb2902378122","name":"chownr","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chownr@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"chownr","version":"1.1.4","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"like `chown -R`","url":"git://github.com/isaacs/chownr.git","private":false}},{"id":"671f64716b19d5fb","name":"chownr","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chownr@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"chownr","version":"1.1.4","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"like `chown -R`","url":"git://github.com/isaacs/chownr.git","private":false}},{"id":"3189617deb2bc884","name":"chownr","version":"2.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chownr@2.0.0","metadataType":"javascript-npm-package","metadata":{"name":"chownr","version":"2.0.0","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"like `chown -R`","url":"git://github.com/isaacs/chownr.git","private":false}},{"id":"fffff6468e7930c0","name":"chownr","version":"3.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"BlueOak-1.0.0","spdxExpression":"BlueOak-1.0.0","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/chownr/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/chownr/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/chownr@3.0.0","metadataType":"javascript-npm-package","metadata":{"name":"chownr","version":"3.0.0","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"like `chown -R`","url":"git://github.com/isaacs/chownr.git","private":false}},{"id":"6cef1d3c36e6024e","name":"clarinet","version":"0.12.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/clarinet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clarinet/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"BSD-2-Clause","spdxExpression":"BSD-2-Clause","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/clarinet/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clarinet/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:clarinet:clarinet:0.12.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:dscape:clarinet:0.12.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/clarinet@0.12.6","metadataType":"javascript-npm-package","metadata":{"name":"clarinet","version":"0.12.6","author":"Nuno Job (http://nunojob.com/), Jann Horn (https://github.com/thejh), Justin Makeig (http://www.audiblepop.com), Roly Fentanes (http://about.me/roly), John Lancaster (http://jlank.com)","homepage":"https://github.com/dscape/clarinet","description":"SAX based evented streaming JSON parser in JavaScript (browser and node)","url":"http://github.com/dscape/clarinet.git","private":false}},{"id":"a7e36e39ff61aea5","name":"class-utils","version":"0.3.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/class-utils/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/class-utils/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/class-utils/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/class-utils/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:jonschlinkert:class-utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:class_utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class-utils:class-utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class-utils:class_utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class_utils:class-utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class_utils:class_utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class:class-utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:class:class_utils:0.3.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/class-utils@0.3.6","metadataType":"javascript-npm-package","metadata":{"name":"class-utils","version":"0.3.6","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), ","homepage":"https://github.com/jonschlinkert/class-utils","description":"Utils for working with JavaScript classes and prototype methods.","url":"jonschlinkert/class-utils","private":false}},{"id":"08eaf1d1a1378cc5","name":"clean-stack","version":"2.2.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/clean-stack/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clean-stack/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/clean-stack/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clean-stack/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/clean-stack@2.2.0","metadataType":"javascript-npm-package","metadata":{"name":"clean-stack","version":"2.2.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"Clean up error stack traces","url":"sindresorhus/clean-stack","private":false}},{"id":"6fb115e3b5d5d3f2","name":"cliui","version":"6.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:yargs:cliui:6.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cliui@6.0.0","metadataType":"javascript-npm-package","metadata":{"name":"cliui","version":"6.0.0","author":"Ben Coe ","homepage":"","description":"easily create complex multi-column command-line-interfaces","url":"http://github.com/yargs/cliui.git","private":false}},{"id":"080e255664d33bc7","name":"clone","version":"2.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/clone/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clone/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/clone/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clone/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:pvorb:clone:2.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/clone@2.1.2","metadataType":"javascript-npm-package","metadata":{"name":"clone","version":"2.1.2","author":"Paul Vorbach (http://paul.vorba.ch/), Blake Miner (http://www.blakeminer.com/), Tian You (http://blog.axqd.net/), George Stagas (http://stagas.com/), Tobiasz Cudnik (https://github.com/TobiaszCudnik), Pavel Lang (https://github.com/langpavel), Dan MacTough (http://yabfog.com/), w1nk (https://github.com/w1nk), Hugh Kennedy (http://twitter.com/hughskennedy), Dustin Diaz (http://dustindiaz.com), Ilya Shaisultanov (https://github.com/diversario), Nathan MacInnes (http://macinn.es/), Benjamin E. Coe (https://twitter.com/benjamincoe), Nathan Zadoks (https://github.com/nathan7), Róbert Oroszi (https://github.com/oroce), Aurélio A. Heckert (http://softwarelivre.org/aurium), Guy Ellis (http://www.guyellisrocks.com/), fscherwi (https://fscherwi.github.io), rictic (https://github.com/rictic), Martin Jurča (https://github.com/jurca), Misery Lee (https://github.com/miserylee), Clemens Wolff (https://github.com/c-w)","homepage":"","description":"deep cloning of objects and arrays","url":"git://github.com/pvorb/node-clone.git","private":false}},{"id":"1ca687973f79cd5a","name":"clone-response","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/clone-response/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clone-response/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/clone-response/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/clone-response/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clone-response:clone_response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clone_response:clone-response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clone_response:clone_response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:lukechilds:clone-response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:lukechilds:clone_response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clone:clone-response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:clone:clone_response:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/clone-response@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"clone-response","version":"1.0.2","author":"Luke Childs (http://lukechilds.co.uk)","homepage":"https://github.com/lukechilds/clone-response","description":"Clone a Node.js HTTP response stream","url":"git+https://github.com/lukechilds/clone-response.git","private":false}},{"id":"15db8f5283662b54","name":"code-point-at","version":"1.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/code-point-at/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/code-point-at/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/code-point-at/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/code-point-at/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/code-point-at@1.1.0","metadataType":"javascript-npm-package","metadata":{"name":"code-point-at","version":"1.1.0","author":"Sindre Sorhus (sindresorhus.com)","homepage":"","description":"ES2015 `String#codePointAt()` ponyfill","url":"sindresorhus/code-point-at","private":false}},{"id":"d87950bd24d66a30","name":"collection-visit","version":"1.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/collection-visit/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/collection-visit/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/collection-visit/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/collection-visit/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:collection-visit:collection-visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:collection-visit:collection_visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:collection_visit:collection-visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:collection_visit:collection_visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:collection-visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:collection_visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:collection:collection-visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:collection:collection_visit:1.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/collection-visit@1.0.0","metadataType":"javascript-npm-package","metadata":{"name":"collection-visit","version":"1.0.0","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/collection-visit","description":"Visit a method over the items in an object, or map visit over the objects in an array.","url":"jonschlinkert/collection-visit","private":false}},{"id":"2774fa6f21932145","name":"color","version":"3.2.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/color/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/color/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color:color:3.2.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color@3.2.1","metadataType":"javascript-npm-package","metadata":{"name":"color","version":"3.2.1","author":"Josh Junon , Heather Arthur , Maxime Thirouin","homepage":"","description":"Color conversion and manipulation with CSS string support","url":"Qix-/color","private":false}},{"id":"832fbb197a382df6","name":"color-convert","version":"1.9.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-convert@1.9.3","metadataType":"javascript-npm-package","metadata":{"name":"color-convert","version":"1.9.3","author":"Heather Arthur ","homepage":"","description":"Plain color conversion functions","url":"Qix-/color-convert","private":false}},{"id":"ad73ceb607fdd321","name":"color-convert","version":"2.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-convert@2.0.1","metadataType":"javascript-npm-package","metadata":{"name":"color-convert","version":"2.0.1","author":"Heather Arthur ","homepage":"","description":"Plain color conversion functions","url":"Qix-/color-convert","private":false}},{"id":"c216a258a2dd7fdf","name":"color-convert","version":"2.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-convert@2.0.1","metadataType":"javascript-npm-package","metadata":{"name":"color-convert","version":"2.0.1","author":"Heather Arthur ","homepage":"","description":"Plain color conversion functions","url":"Qix-/color-convert","private":false}},{"id":"d7906a8074d4b4f9","name":"color-convert","version":"2.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-convert@2.0.1","metadataType":"javascript-npm-package","metadata":{"name":"color-convert","version":"2.0.1","author":"Heather Arthur ","homepage":"","description":"Plain color conversion functions","url":"Qix-/color-convert","private":false}},{"id":"92662d8a3adbe0c9","name":"color-name","version":"1.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-name@1.1.3","metadataType":"javascript-npm-package","metadata":{"name":"color-name","version":"1.1.3","author":"DY ","homepage":"https://github.com/dfcreative/color-name","description":"A list of color names and its values","url":"git@github.com:dfcreative/color-name.git","private":false}},{"id":"a184510682ce4734","name":"color-name","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-name@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"color-name","version":"1.1.4","author":"DY ","homepage":"https://github.com/colorjs/color-name","description":"A list of color names and its values","url":"git@github.com:colorjs/color-name.git","private":false}},{"id":"a80b99ad61e48555","name":"color-name","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-name@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"color-name","version":"1.1.4","author":"DY ","homepage":"https://github.com/colorjs/color-name","description":"A list of color names and its values","url":"git@github.com:colorjs/color-name.git","private":false}},{"id":"01c750f52978cfc6","name":"color-name","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-name@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"color-name","version":"1.1.4","author":"DY ","homepage":"https://github.com/colorjs/color-name","description":"A list of color names and its values","url":"git@github.com:colorjs/color-name.git","private":false}},{"id":"7e888fa51e3748f2","name":"color-string","version":"1.9.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/color-string/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-string/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/color-string/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-string/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-string_project:color-string:1.9.1:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/color-string@1.9.1","metadataType":"javascript-npm-package","metadata":{"name":"color-string","version":"1.9.1","author":"Heather Arthur , Maxime Thirouin, Dyma Ywanov , Josh Junon","homepage":"","description":"Parser and generator for CSS color strings","url":"Qix-/color-string","private":false}},{"id":"a1e232528ce637f4","name":"color-support","version":"1.1.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/color-support/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-support/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/color-support/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/color-support/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/color-support@1.1.3","metadataType":"javascript-npm-package","metadata":{"name":"color-support","version":"1.1.3","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"A module which will endeavor to guess your terminal's level of color support.","url":"git+https://github.com/isaacs/color-support.git","private":false}},{"id":"774e316934f12a96","name":"colors","version":"1.1.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:Marak:colors:1.1.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/colors@1.1.2","metadataType":"javascript-npm-package","metadata":{"name":"colors","version":"1.1.2","author":"Marak Squires","homepage":"https://github.com/Marak/colors.js","description":"get colors in your node.js console","url":"http://github.com/Marak/colors.js.git","private":false}},{"id":"ba9f99e8572f2682","name":"colors","version":"1.4.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/colors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/colors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/colors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:colors:colors:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:Marak:colors:1.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/colors@1.4.0","metadataType":"javascript-npm-package","metadata":{"name":"colors","version":"1.4.0","author":"Marak Squires, DABH (https://github.com/DABH)","homepage":"https://github.com/Marak/colors.js","description":"get colors in your node.js console","url":"http://github.com/Marak/colors.js.git","private":false}},{"id":"84bcfa432cfdd0d0","name":"colorspace","version":"1.1.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/colorspace/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/colorspace/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/colorspace/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/colorspace/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:colorspace:colorspace:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:3rd-Eden:colorspace:1.1.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/colorspace@1.1.4","metadataType":"javascript-npm-package","metadata":{"name":"colorspace","version":"1.1.4","author":"Arnout Kazemier","homepage":"https://github.com/3rd-Eden/colorspace","description":"Generate HEX colors for a given namespace.","url":"https://github.com/3rd-Eden/colorspace","private":false}},{"id":"23da7748c749bc68","name":"commander","version":"2.20.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/commander@2.20.3","metadataType":"javascript-npm-package","metadata":{"name":"commander","version":"2.20.3","author":"TJ Holowaychuk ","homepage":"","description":"the complete solution for node.js command-line programs","url":"https://github.com/tj/commander.js.git","private":false}},{"id":"3facda85b5f59f2a","name":"commander","version":"2.20.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/commander@2.20.3","metadataType":"javascript-npm-package","metadata":{"name":"commander","version":"2.20.3","author":"TJ Holowaychuk ","homepage":"","description":"the complete solution for node.js command-line programs","url":"https://github.com/tj/commander.js.git","private":false}},{"id":"ebc8491ac18b63ae","name":"component-emitter","version":"1.3.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/component-emitter/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/component-emitter/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/component-emitter/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/component-emitter/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:component-emitter:component-emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component-emitter:component_emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component_emitter:component-emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component_emitter:component_emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:sindresorhus:component-emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:sindresorhus:component_emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component:component-emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component:component_emitter:1.3.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/component-emitter@1.3.1","metadataType":"javascript-npm-package","metadata":{"name":"component-emitter","version":"1.3.1","author":"","homepage":"","description":"Event emitter","url":"https://github.com/sindresorhus/component-emitter.git","private":false}},{"id":"e91a1227114ad372","name":"component-type","version":"1.2.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/component-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/component-type/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/component-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/component-type/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:component-type:component-type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component-type:component_type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component_type:component-type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component_type:component_type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component:component-type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:component:component_type:1.2.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/component-type@1.2.1","metadataType":"javascript-npm-package","metadata":{"name":"component-type","version":"1.2.1","author":"","homepage":"","description":"Cross-browser type assertions (less broken typeof)","url":"https://github.com/component/type.git","private":false}},{"id":"798bc97add5e6f68","name":"compress-commons","version":"1.2.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/compress-commons/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compress-commons/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/compress-commons/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compress-commons/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:compress-commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:compress_commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/compress-commons@1.2.2","metadataType":"javascript-npm-package","metadata":{"name":"compress-commons","version":"1.2.2","author":"Chris Talkington (http://christalkington.com/)","homepage":"https://github.com/archiverjs/node-compress-commons","description":"a library that defines a common interface for working with archive formats within node","url":"https://github.com/archiverjs/node-compress-commons.git","private":false}},{"id":"d33659b98b525c44","name":"compressible","version":"2.0.18","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/compressible/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compressible/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/compressible/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compressible/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/compressible@2.0.18","metadataType":"javascript-npm-package","metadata":{"name":"compressible","version":"2.0.18","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), Jeremiah Senkpiel (https://searchbeam.jit.su)","homepage":"","description":"Compressible Content-Type / mime checking","url":"jshttp/compressible","private":false}},{"id":"828f0284d303f177","name":"compression","version":"1.8.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/compression/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compression/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/compression/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compression/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/compression@1.8.1","metadataType":"javascript-npm-package","metadata":{"name":"compression","version":"1.8.1","author":"Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)","homepage":"","description":"Node.js compression middleware","url":"expressjs/compression","private":false}},{"id":"e899cd35e0ecfcf6","name":"concat-map","version":"0.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/concat-map/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/concat-map/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/concat-map/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/concat-map/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/concat-map@0.0.1","metadataType":"javascript-npm-package","metadata":{"name":"concat-map","version":"0.0.1","author":"James Halliday (http://substack.net)","homepage":"","description":"concatenative mapdashery","url":"git://github.com/substack/node-concat-map.git","private":false}},{"id":"3cf686e52af98b9c","name":"concat-stream","version":"1.6.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/concat-stream/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/concat-stream/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/concat-stream/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/concat-stream/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:maxogden:concat-stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:maxogden:concat_stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/concat-stream@1.6.2","metadataType":"javascript-npm-package","metadata":{"name":"concat-stream","version":"1.6.2","author":"Max Ogden ","homepage":"","description":"writable stream that concatenates strings or binary data and calls a callback with the result","url":"http://github.com/maxogden/concat-stream.git","private":false}},{"id":"f5d30e88e089520d","name":"config","version":"3.3.12","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/config/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/config/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/config/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/config/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:node-config:config:3.3.12:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:config:config:3.3.12:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/config@3.3.12","metadataType":"javascript-npm-package","metadata":{"name":"config","version":"3.3.12","author":"Loren West ","homepage":"http://github.com/node-config/node-config.git","description":"Configuration control for production node deployments","url":"http://github.com/node-config/node-config.git","private":false}},{"id":"62af6322c8da5d46","name":"console-control-strings","version":"1.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/console-control-strings/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/console-control-strings/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"ISC","spdxExpression":"ISC","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/console-control-strings/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/console-control-strings/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/console-control-strings@1.1.0","metadataType":"javascript-npm-package","metadata":{"name":"console-control-strings","version":"1.1.0","author":"Rebecca Turner (http://re-becca.org/)","homepage":"","description":"A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.","url":"https://github.com/iarna/console-control-strings","private":false}},{"id":"64ecabe801d13657","name":"constantinople","version":"4.0.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/constantinople/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/constantinople/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/constantinople/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/constantinople/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:ForbesLindesay:constantinople:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:constantinople:constantinople:4.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/constantinople@4.0.1","metadataType":"javascript-npm-package","metadata":{"name":"constantinople","version":"4.0.1","author":"ForbesLindesay","homepage":"","description":"Determine whether a JavaScript expression evaluates to a constant","url":"https://github.com/ForbesLindesay/constantinople.git","private":false}},{"id":"6d99ffbaf9a3dbf2","name":"content-disposition","version":"0.5.4","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/content-disposition/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/content-disposition/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/content-disposition/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/content-disposition/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/content-disposition@0.5.4","metadataType":"javascript-npm-package","metadata":{"name":"content-disposition","version":"0.5.4","author":"Douglas Christopher Wilson ","homepage":"","description":"Create and parse Content-Disposition header","url":"jshttp/content-disposition","private":false}},{"id":"1e680466175b93f0","name":"content-type","version":"1.0.5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/content-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/content-type/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/content-type/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/content-type/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/content-type@1.0.5","metadataType":"javascript-npm-package","metadata":{"name":"content-type","version":"1.0.5","author":"Douglas Christopher Wilson ","homepage":"","description":"Create and parse HTTP Content-Type header","url":"jshttp/content-type","private":false}},{"id":"299182936c2fe78a","name":"cookie","version":"0.4.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cookie@0.4.2","metadataType":"javascript-npm-package","metadata":{"name":"cookie","version":"0.4.2","author":"Roman Shtylman , Douglas Christopher Wilson ","homepage":"","description":"HTTP server cookie parsing and serialization","url":"jshttp/cookie","private":false}},{"id":"5f1423a9340f2ecc","name":"cookie","version":"0.7.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/express/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/express/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/express/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/express/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cookie:cookie:0.7.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cookie@0.7.1","metadataType":"javascript-npm-package","metadata":{"name":"cookie","version":"0.7.1","author":"Roman Shtylman , Douglas Christopher Wilson ","homepage":"","description":"HTTP server cookie parsing and serialization","url":"jshttp/cookie","private":false}},{"id":"f30613fbb68ad643","name":"cookie","version":"0.7.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cookie/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cookie@0.7.2","metadataType":"javascript-npm-package","metadata":{"name":"cookie","version":"0.7.2","author":"Roman Shtylman , Douglas Christopher Wilson ","homepage":"","description":"HTTP server cookie parsing and serialization","url":"jshttp/cookie","private":false}},{"id":"52b0adc8ff09f017","name":"cookie-parser","version":"1.4.7","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cookie-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie-parser/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cookie-parser/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie-parser/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cookie-parser@1.4.7","metadataType":"javascript-npm-package","metadata":{"name":"cookie-parser","version":"1.4.7","author":"TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson ","homepage":"","description":"Parse HTTP request cookies","url":"expressjs/cookie-parser","private":false}},{"id":"f7961879936cc1c0","name":"cookie-signature","version":"1.0.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cookie-signature/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie-signature/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cookie-signature/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cookie-signature/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/cookie-signature@1.0.6","metadataType":"javascript-npm-package","metadata":{"name":"cookie-signature","version":"1.0.6","author":"TJ Holowaychuk ","homepage":"","description":"Sign and unsign cookies","url":"https://github.com/visionmedia/node-cookie-signature.git","private":false}},{"id":"84bc1ef1a454e04d","name":"copy-descriptor","version":"0.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/copy-descriptor/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/copy-descriptor/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/copy-descriptor/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/copy-descriptor/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:copy-descriptor:copy-descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:copy-descriptor:copy_descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:copy_descriptor:copy-descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:copy_descriptor:copy_descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:copy-descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:jonschlinkert:copy_descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:copy:copy-descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:copy:copy_descriptor:0.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/copy-descriptor@0.1.1","metadataType":"javascript-npm-package","metadata":{"name":"copy-descriptor","version":"0.1.1","author":"Jon Schlinkert (https://github.com/jonschlinkert)","homepage":"https://github.com/jonschlinkert/copy-descriptor","description":"Copy a descriptor from object A to object B","url":"jonschlinkert/copy-descriptor","private":false}},{"id":"36ced86f8d381680","name":"core-util-is","version":"1.0.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/core-util-is/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/core-util-is/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/core-util-is/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/core-util-is/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:isaacs:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/core-util-is@1.0.2","metadataType":"javascript-npm-package","metadata":{"name":"core-util-is","version":"1.0.2","author":"Isaac Z. Schlueter (http://blog.izs.me/)","homepage":"","description":"The `util.is*` functions introduced in Node v0.12.","url":"git://github.com/isaacs/core-util-is","private":false}},{"id":"9f4d3a70130c3163","name":"cors","version":"2.8.5","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cors/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cors/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cors/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cors:cors:2.8.5:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cors@2.8.5","metadataType":"javascript-npm-package","metadata":{"name":"cors","version":"2.8.5","author":"Troy Goode (https://github.com/troygoode/)","homepage":"","description":"Node.js CORS middleware","url":"expressjs/cors","private":false}},{"id":"5e060917a7b152aa","name":"crc","version":"3.8.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/crc/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/crc/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:alexgorbatchev:crc:3.8.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/crc@3.8.0","metadataType":"javascript-npm-package","metadata":{"name":"crc","version":"3.8.0","author":"Alex Gorbatchev (https://github.com/alexgorbatchev)","homepage":"https://github.com/alexgorbatchev/node-crc","description":"Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.","url":"git://github.com/alexgorbatchev/node-crc.git","private":false}},{"id":"65ce75ba55690187","name":"crc-32","version":"1.2.2","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/crc-32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc-32/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"Apache-2.0","spdxExpression":"Apache-2.0","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/crc-32/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc-32/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:SheetJS:crc-32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:SheetJS:crc_32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc-32:crc-32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc-32:crc_32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc_32:crc-32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc_32:crc_32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc:crc-32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc:crc_32:1.2.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/crc-32@1.2.2","metadataType":"javascript-npm-package","metadata":{"name":"crc-32","version":"1.2.2","author":"sheetjs","homepage":"https://sheetjs.com/","description":"Pure-JS CRC-32","url":"git://github.com/SheetJS/js-crc32.git","private":false}},{"id":"828196a2c6a9e027","name":"crc32-stream","version":"2.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/crc32-stream/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc32-stream/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/crc32-stream/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crc32-stream/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:crc32-stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:archiverjs:crc32_stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/crc32-stream@2.0.0","metadataType":"javascript-npm-package","metadata":{"name":"crc32-stream","version":"2.0.0","author":"Chris Talkington (http://christalkington.com/)","homepage":"https://github.com/archiverjs/node-crc32-stream","description":"a streaming CRC32 checksumer","url":"https://github.com/archiverjs/node-crc32-stream.git","private":false}},{"id":"fbc0fafe2877b078","name":"create-require","version":"1.1.1","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/create-require/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/create-require/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/create-require/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/create-require/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:create-require:create-require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:create-require:create_require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:create_require:create-require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:create_require:create_require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:create:create-require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:create:create_require:1.1.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/create-require@1.1.1","metadataType":"javascript-npm-package","metadata":{"name":"create-require","version":"1.1.1","author":"Maël Nison , Paul Soporan , Pooya Parsa ","homepage":"","description":"Polyfill for Node.js module.createRequire (<= v12.2.0)","url":"nuxt-contrib/create-require","private":false}},{"id":"28238b546a501760","name":"cross-fetch","version":"4.1.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cross-fetch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-fetch/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cross-fetch/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-fetch/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cross-fetch_project:cross-fetch:4.1.0:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/cross-fetch@4.1.0","metadataType":"javascript-npm-package","metadata":{"name":"cross-fetch","version":"4.1.0","author":"Leonardo Quixada ","homepage":"https://github.com/lquixada/cross-fetch","description":"Universal WHATWG Fetch API for Node, Browsers and React Native","url":"https://github.com/lquixada/cross-fetch.git","private":false}},{"id":"50b42809242de976","name":"cross-fetch-polyfill","version":"0.0.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cross-fetch/polyfill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-fetch/polyfill/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cross-fetch/polyfill/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-fetch/polyfill/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cross-fetch-polyfill:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross-fetch-polyfill:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_fetch_polyfill:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_fetch_polyfill:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross-fetch:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross-fetch:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_fetch:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_fetch:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross:cross-fetch-polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross:cross_fetch_polyfill:0.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cross-fetch-polyfill@0.0.0","metadataType":"javascript-npm-package","metadata":{"name":"cross-fetch-polyfill","version":"0.0.0","author":"","homepage":"","description":"","url":"","private":false}},{"id":"1b99c2dc3022043f","name":"cross-spawn","version":"7.0.6","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/cross-spawn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-spawn/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/cross-spawn/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/cross-spawn/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/cross-spawn@7.0.6","metadataType":"javascript-npm-package","metadata":{"name":"cross-spawn","version":"7.0.6","author":"André Cruz ","homepage":"https://github.com/moxystudio/node-cross-spawn","description":"Cross platform child_process#spawn and child_process#spawnSync","url":"git@github.com:moxystudio/node-cross-spawn.git","private":false}},{"id":"c00a8b8b043aae72","name":"crypto-js","version":"3.3.0","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/crypto-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crypto-js/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/crypto-js/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/crypto-js/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:crypto-js:crypto-js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crypto-js:crypto_js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crypto_js:crypto-js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crypto_js:crypto_js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crypto:crypto-js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:crypto:crypto_js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brix:crypto-js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:brix:crypto_js:3.3.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/crypto-js@3.3.0","metadataType":"javascript-npm-package","metadata":{"name":"crypto-js","version":"3.3.0","author":"Evan Vosberg (http://github.com/evanvosberg)","homepage":"http://github.com/brix/crypto-js","description":"JavaScript library of crypto standards.","url":"http://github.com/brix/crypto-js.git","private":false}},{"id":"a64626d34d414995","name":"dateformat","version":"4.6.3","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/dateformat/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/dateformat/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/dateformat/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/dateformat/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:dateformat:dateformat:4.6.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:felixge:dateformat:4.6.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:npm/dateformat@4.6.3","metadataType":"javascript-npm-package","metadata":{"name":"dateformat","version":"4.6.3","author":"Steven Levithan, Steven Levithan, Felix Geisendörfer , Christoph Tavan , Jon Schlinkert (https://github.com/jonschlinkert), Felix Geisendörfer ","homepage":"https://github.com/felixge/node-dateformat","description":"A node.js package for Steven Levithan's excellent dateFormat() function.","url":"https://github.com/felixge/node-dateformat.git","private":false}},{"id":"13ce5d31ef865754","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/body-parser/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"07994462f17337cd","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/compression/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compression/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/compression/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/compression/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"18b6649e0a78c9a1","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/expand-brackets/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"36ba4b44e6e4cfc1","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/express/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/express/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/express/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/express/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"7ef811ee564508d1","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/finalhandler/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"1eaad6013e183bbc","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/morgan/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/morgan/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/morgan/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/morgan/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ","homepage":"","description":"small debugging utility","url":"git://github.com/visionmedia/debug.git","private":false}},{"id":"5cd11cba890ff1a4","name":"debug","version":"2.6.9","type":"npm","foundBy":"javascript-package-cataloger","locations":[{"path":"/juice-shop/node_modules/send/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/send/node_modules/debug/package.json","annotations":{"evidence":"primary"}}],"licenses":[{"value":"MIT","spdxExpression":"MIT","type":"declared","urls":[],"locations":[{"path":"/juice-shop/node_modules/send/node_modules/debug/package.json","layerID":"sha256:1e8da654b2e057ef43f26384aa9c71d2bdafdc4de0248cf1cfd44c4867559123","accessPath":"/juice-shop/node_modules/send/node_modules/debug/package.json","annotations":{"evidence":"primary"}}]}],"language":"javascript","cpes":[{"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","source":"nvd-cpe-dictionary"}],"purl":"pkg:npm/debug@2.6.9","metadataType":"javascript-npm-package","metadata":{"name":"debug","version":"2.6.9","author":"TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne