{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:00000000-0000-4000-8000-000000000303",
  "version": 1,
  "metadata": {
    "timestamp": "2026-05-26T00:00:00Z",
    "component": {
      "type": "application",
      "name": "oss-report-osv-id-heavy-sample-app",
      "version": "1.0.0"
    },
    "properties": [
      {
        "name": "sample:purpose",
        "value": "Local LP sample input for verifying many OSV_ID values in the generated OSS vulnerability report PDF."
      },
      {
        "name": "sample:raw-file-policy",
        "value": "This SBOM is a sample for report rendering. The LP processor submits only sanitized dependency signals."
      },
      {
        "name": "sample:verified-osv-querybatch-at",
        "value": "2026-05-26"
      },
      {
        "name": "sample:expected-osv-id-counts",
        "value": "axios@0.21.0=17; node-forge@0.9.0=15; tar@4.4.13=12; handlebars@4.7.6=10; lodash@4.17.20=5; webpack-dev-server@3.11.2=3; several others return 1-2 IDs each."
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:npm/axios@0.21.0",
      "name": "axios",
      "version": "0.21.0",
      "scope": "required",
      "purl": "pkg:npm/axios@0.21.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/node-forge@0.9.0",
      "name": "node-forge",
      "version": "0.9.0",
      "scope": "required",
      "purl": "pkg:npm/node-forge@0.9.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/tar@4.4.13",
      "name": "tar",
      "version": "4.4.13",
      "scope": "required",
      "purl": "pkg:npm/tar@4.4.13"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.7.6",
      "name": "handlebars",
      "version": "4.7.6",
      "scope": "required",
      "purl": "pkg:npm/handlebars@4.7.6"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.20",
      "name": "lodash",
      "version": "4.17.20",
      "scope": "required",
      "purl": "pkg:npm/lodash@4.17.20"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@3.11.2",
      "name": "webpack-dev-server",
      "version": "3.11.2",
      "scope": "dev",
      "purl": "pkg:npm/webpack-dev-server@3.11.2"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "required",
      "purl": "pkg:npm/minimist@0.0.8"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.0",
      "name": "node-fetch",
      "version": "2.6.0",
      "scope": "required",
      "purl": "pkg:npm/node-fetch@2.6.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@2.1.1",
      "name": "serialize-javascript",
      "version": "2.1.1",
      "scope": "required",
      "purl": "pkg:npm/serialize-javascript@2.1.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/ws@7.4.5",
      "name": "ws",
      "version": "7.4.5",
      "scope": "required",
      "purl": "pkg:npm/ws@7.4.5"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.29.1",
      "name": "moment",
      "version": "2.29.1",
      "scope": "required",
      "purl": "pkg:npm/moment@2.29.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/jquery@3.4.1",
      "name": "jquery",
      "version": "3.4.1",
      "scope": "required",
      "purl": "pkg:npm/jquery@3.4.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.12.0",
      "name": "underscore",
      "version": "1.12.0",
      "scope": "required",
      "purl": "pkg:npm/underscore@1.12.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "name": "semver",
      "version": "5.7.1",
      "scope": "required",
      "purl": "pkg:npm/semver@5.7.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/json5@1.0.1",
      "name": "json5",
      "version": "1.0.1",
      "scope": "required",
      "purl": "pkg:npm/json5@1.0.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.0",
      "name": "y18n",
      "version": "4.0.0",
      "scope": "required",
      "purl": "pkg:npm/y18n@4.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:npm/got@11.8.2",
      "name": "got",
      "version": "11.8.2",
      "scope": "optional",
      "purl": "pkg:npm/got@11.8.2"
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/axios@0.21.0"
    },
    {
      "ref": "pkg:npm/node-forge@0.9.0"
    },
    {
      "ref": "pkg:npm/tar@4.4.13"
    },
    {
      "ref": "pkg:npm/handlebars@4.7.6"
    },
    {
      "ref": "pkg:npm/lodash@4.17.20"
    },
    {
      "ref": "pkg:npm/webpack-dev-server@3.11.2"
    },
    {
      "ref": "pkg:npm/minimist@0.0.8"
    },
    {
      "ref": "pkg:npm/node-fetch@2.6.0"
    },
    {
      "ref": "pkg:npm/serialize-javascript@2.1.1"
    },
    {
      "ref": "pkg:npm/ws@7.4.5"
    },
    {
      "ref": "pkg:npm/moment@2.29.1"
    },
    {
      "ref": "pkg:npm/jquery@3.4.1"
    },
    {
      "ref": "pkg:npm/underscore@1.12.0"
    },
    {
      "ref": "pkg:npm/semver@5.7.1"
    },
    {
      "ref": "pkg:npm/json5@1.0.1"
    },
    {
      "ref": "pkg:npm/y18n@4.0.0"
    },
    {
      "ref": "pkg:npm/got@11.8.2"
    }
  ]
}