{"bomFormat":"CycloneDX","specVersion":"1.5","serialNumber":"urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79","version":1,
"metadata":{"timestamp":"2026-11-01T09:00:00Z","component":{"type":"application","bom-ref":"shop","name":"shop","version":"2.1.0"}},
"components":[
{"type":"library","bom-ref":"pkg:npm/express@4.19.2","name":"express","version":"4.19.2","purl":"pkg:npm/express@4.19.2","licenses":[{"license":{"id":"MIT"}}],"hashes":[{"alg":"SHA-256","content":"aa11"}]},
{"type":"library","bom-ref":"pkg:npm/%40types/node@20.1.0","group":"@types","name":"node","version":"20.1.0","purl":"pkg:npm/%40types/node@20.1.0","licenses":[{"license":{"name":"Custom Licence"}}],"scope":"excluded"},
{"type":"library","bom-ref":"pkg:npm/qs@6.11.0","name":"qs","version":"6.11.0","purl":"pkg:npm/qs@6.11.0","licenses":[{"expression":"BSD-3-Clause OR MIT"}]},
{"type":"library","bom-ref":"pkg:maven/org.acme/left@1.0","group":"org.acme","name":"left","version":"1.0","purl":"pkg:maven/org.acme/left@1.0","components":[{"type":"library","bom-ref":"inner","name":"inner","version":"0.1"}]},
{"type":"library","bom-ref":"lonely","name":"lonely","version":"1.0.0","purl":"pkg:npm/lonely@1.0.0","licenses":[{"license":{"id":"GPL-3.0-only"}}]}
],
"dependencies":[
{"ref":"shop","dependsOn":["pkg:npm/express@4.19.2","pkg:npm/%40types/node@20.1.0","pkg:maven/org.acme/left@1.0"]},
{"ref":"pkg:npm/express@4.19.2","dependsOn":["pkg:npm/qs@6.11.0"]},
{"ref":"pkg:maven/org.acme/left@1.0","dependsOn":["inner","pkg:npm/qs@6.11.0"]},
{"ref":"inner","dependsOn":["pkg:maven/org.acme/left@1.0"]}
]}