npm - @kici-dev/agent - Versions diffs - 0.1.15 → 0.1.17 - Mend

@kici-dev/agent 0.1.15 → 0.1.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (30) hide show

package/dist/diagnostics/mini-bundle.d.ts +9 -0
package/dist/execution/dep-installer.d.ts +7 -3
package/dist/execution/dep-packer.d.ts +6 -1
package/dist/execution/env-init/presets/directives.d.ts +20 -0
package/dist/execution/env-init/presets/expand.d.ts +16 -0
package/dist/execution/env-init/presets/mise/cache-key.d.ts +7 -0
package/dist/execution/env-init/presets/mise/expander.d.ts +16 -0
package/dist/execution/env-init/presets/mise/templates.d.ts +16 -0
package/dist/execution/env-init/presets/mise/windows-install.d.ts +18 -0
package/dist/execution/env-init/presets/registry.d.ts +31 -0
package/dist/execution/init-runner.d.ts +7 -0
package/dist/execution/job-runner.d.ts +18 -1
package/dist/execution/sandbox/env-delta.d.ts +2 -0
package/dist/execution/sandbox/index.d.ts +1 -1
package/dist/execution/sandbox/ipc-protocol.d.ts +101 -3
package/dist/execution/sandbox/step-loop.d.ts +24 -1
package/dist/execution/sandbox/types.d.ts +18 -1
package/dist/execution/sandbox/workflow-runner.d.ts +12 -7
package/dist/execution/validate-kici-deps.d.ts +5 -0
package/dist/execution/workspace-siblings.d.ts +33 -0
package/dist/index.js +223 -6
package/dist/provenance/attest.d.ts +30 -0
package/dist/provenance/sign.d.ts +21 -0
package/dist/provenance/statement-builder.d.ts +38 -0
package/dist/server.js +698 -146
package/dist/version.d.ts +2 -0
package/dist/workflow-runner.js +877 -45
package/dist/ws/orchestrator-client.d.ts +53 -4
package/package.json +8 -5
package/sbom.spdx.json +1957 -152

package/sbom.spdx.json CHANGED Viewed

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/agent@0.1.15",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.15/c153b3ce-90e6-427f-8c25-5fb714e6a0c5",
+  "name": "@kici-dev/agent@0.1.17",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.17/ce302b86-3bf1-4fc3-a35a-a73134925ccc",
   "creationInfo": {
-    "created": "2026-06-11T03:03:58Z",
+    "created": "2026-06-14T12:30:50Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -983,6 +983,25 @@
       "description": "Node.js Adapter for Hono",
       "homepage": "https://github.com/honojs/node-server"
     },
+    {
+      "SPDXID": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "name": "@isaacs/cliui",
+      "versionInfo": "8.0.2",
+      "downloadLocation": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40isaacs/cliui@8.0.2"
+        }
+      ],
+      "description": "easily create complex multi-column command-line-interfaces"
+    },
     {
       "SPDXID": "SPDXRef-Package--isaacs-fs-minipass-4.0.1",
       "name": "@isaacs/fs-minipass",
@@ -1065,7 +1084,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.1.15",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1076,16 +1095,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.15"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.17"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.17",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.15",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1096,16 +1115,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.15"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.17"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.15",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.15",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1116,16 +1135,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.15"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.17"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.15",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.15",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1136,16 +1155,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.15"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.17"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.15",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1156,7 +1175,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.15"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.17"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -2241,6 +2260,26 @@
         }
       ]
     },
+    {
+      "SPDXID": "SPDXRef-Package--pkgjs-parseargs-0.11.0",
+      "name": "@pkgjs/parseargs",
+      "versionInfo": "0.11.0",
+      "downloadLocation": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40pkgjs/parseargs@0.11.0"
+        }
+      ],
+      "description": "Polyfill of future proposal for `util.parseArgs()`",
+      "homepage": "https://github.com/pkgjs/parseargs#readme"
+    },
     {
       "SPDXID": "SPDXRef-Package--smithy-chunked-blob-reader-native-4.2.3",
       "name": "@smithy/chunked-blob-reader-native",
@@ -3366,6 +3405,26 @@
       "description": "TypeScript definitions for triple-beam",
       "homepage": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam"
     },
+    {
+      "SPDXID": "SPDXRef-Package-abort-controller-3.0.0",
+      "name": "abort-controller",
+      "versionInfo": "3.0.0",
+      "downloadLocation": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/abort-controller@3.0.0"
+        }
+      ],
+      "description": "An implementation of WHATWG AbortController interface.",
+      "homepage": "https://github.com/mysticatea/abort-controller#readme"
+    },
     {
       "SPDXID": "SPDXRef-Package-acorn-import-attributes-1.9.5",
       "name": "acorn-import-attributes",
@@ -3424,6 +3483,25 @@
       ],
       "description": "Regular expression for matching ANSI escape codes"
     },
+    {
+      "SPDXID": "SPDXRef-Package-ansi-regex-6.2.2",
+      "name": "ansi-regex",
+      "versionInfo": "6.2.2",
+      "downloadLocation": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/ansi-regex@6.2.2"
+        }
+      ],
+      "description": "Regular expression for matching ANSI escape codes"
+    },
     {
       "SPDXID": "SPDXRef-Package-ansi-styles-4.3.0",
       "name": "ansi-styles",
@@ -3443,6 +3521,65 @@
       ],
       "description": "ANSI escape codes for styling strings in the terminal"
     },
+    {
+      "SPDXID": "SPDXRef-Package-ansi-styles-6.2.3",
+      "name": "ansi-styles",
+      "versionInfo": "6.2.3",
+      "downloadLocation": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/ansi-styles@6.2.3"
+        }
+      ],
+      "description": "ANSI escape codes for styling strings in the terminal"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-archiver-utils-5.0.2",
+      "name": "archiver-utils",
+      "versionInfo": "5.0.2",
+      "downloadLocation": "https://registry.npmjs.org/archiver-utils/-/archiver-utils-5.0.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/archiver-utils@5.0.2"
+        }
+      ],
+      "description": "utility functions for archiver",
+      "homepage": "https://github.com/archiverjs/archiver-utils#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-archiver-7.0.1",
+      "name": "archiver",
+      "versionInfo": "7.0.1",
+      "downloadLocation": "https://registry.npmjs.org/archiver/-/archiver-7.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/archiver@7.0.1"
+        }
+      ],
+      "description": "a streaming interface for archive generation",
+      "homepage": "https://github.com/archiverjs/node-archiver"
+    },
     {
       "SPDXID": "SPDXRef-Package-asn1-0.2.6",
       "name": "asn1",
@@ -3482,6 +3619,165 @@
       "description": "Higher-order functions and common patterns for asynchronous code",
       "homepage": "https://caolan.github.io/async/"
     },
+    {
+      "SPDXID": "SPDXRef-Package-b4a-1.8.0",
+      "name": "b4a",
+      "versionInfo": "1.8.0",
+      "downloadLocation": "https://registry.npmjs.org/b4a/-/b4a-1.8.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/b4a@1.8.0"
+        }
+      ],
+      "description": "Bridging the gap between buffers and typed arrays",
+      "homepage": "https://github.com/holepunchto/b4a#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-balanced-match-4.0.4",
+      "name": "balanced-match",
+      "versionInfo": "4.0.4",
+      "downloadLocation": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/balanced-match@4.0.4"
+        }
+      ],
+      "description": "Match balanced character pairs, like \"{\" and \"}\""
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-events-2.8.2",
+      "name": "bare-events",
+      "versionInfo": "2.8.2",
+      "downloadLocation": "https://registry.npmjs.org/bare-events/-/bare-events-2.8.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-events@2.8.2"
+        }
+      ],
+      "description": "Event emitters for JavaScript",
+      "homepage": "https://github.com/holepunchto/bare-events#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-fs-4.5.5",
+      "name": "bare-fs",
+      "versionInfo": "4.5.5",
+      "downloadLocation": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.5.5.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-fs@4.5.5"
+        }
+      ],
+      "description": "Native file system operations for Javascript",
+      "homepage": "https://github.com/holepunchto/bare-fs#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-os-3.7.1",
+      "name": "bare-os",
+      "versionInfo": "3.7.1",
+      "downloadLocation": "https://registry.npmjs.org/bare-os/-/bare-os-3.7.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-os@3.7.1"
+        }
+      ],
+      "description": "Operating system utilities for Javascript",
+      "homepage": "https://github.com/holepunchto/bare-os#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-path-3.0.0",
+      "name": "bare-path",
+      "versionInfo": "3.0.0",
+      "downloadLocation": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-path@3.0.0"
+        }
+      ],
+      "description": "Path manipulation library for JavaScript",
+      "homepage": "https://github.com/holepunchto/bare-path#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-stream-2.8.1",
+      "name": "bare-stream",
+      "versionInfo": "2.8.1",
+      "downloadLocation": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.8.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-stream@2.8.1"
+        }
+      ],
+      "description": "Streaming data for JavaScript",
+      "homepage": "https://github.com/holepunchto/bare-stream#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-bare-url-2.3.2",
+      "name": "bare-url",
+      "versionInfo": "2.3.2",
+      "downloadLocation": "https://registry.npmjs.org/bare-url/-/bare-url-2.3.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/bare-url@2.3.2"
+        }
+      ],
+      "description": "WHATWG URL implementation for JavaScript",
+      "homepage": "https://github.com/holepunchto/bare-url"
+    },
     {
       "SPDXID": "SPDXRef-Package-base64-js-1.5.1",
       "name": "base64-js",
@@ -3561,6 +3857,25 @@
       "description": "Lightweight browser detector",
       "homepage": "https://github.com/bowser-js/bowser"
     },
+    {
+      "SPDXID": "SPDXRef-Package-brace-expansion-5.0.5",
+      "name": "brace-expansion",
+      "versionInfo": "5.0.5",
+      "downloadLocation": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/brace-expansion@5.0.5"
+        }
+      ],
+      "description": "Brace expansion as known from sh/bash"
+    },
     {
       "SPDXID": "SPDXRef-Package-braces-3.0.3",
       "name": "braces",
@@ -3581,6 +3896,26 @@
       "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
       "homepage": "https://github.com/micromatch/braces"
     },
+    {
+      "SPDXID": "SPDXRef-Package-buffer-crc32-1.0.0",
+      "name": "buffer-crc32",
+      "versionInfo": "1.0.0",
+      "downloadLocation": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-1.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/buffer-crc32@1.0.0"
+        }
+      ],
+      "description": "A pure javascript CRC32 algorithm that plays nice with binary data",
+      "homepage": "https://github.com/brianloveswords/buffer-crc32"
+    },
     {
       "SPDXID": "SPDXRef-Package-buffer-5.7.1",
       "name": "buffer",
@@ -3601,6 +3936,26 @@
       "description": "Node.js Buffer API, for the browser",
       "homepage": "https://github.com/feross/buffer"
     },
+    {
+      "SPDXID": "SPDXRef-Package-buffer-6.0.3",
+      "name": "buffer",
+      "versionInfo": "6.0.3",
+      "downloadLocation": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/buffer@6.0.3"
+        }
+      ],
+      "description": "Node.js Buffer API, for the browser",
+      "homepage": "https://github.com/feross/buffer"
+    },
     {
       "SPDXID": "SPDXRef-Package-buildcheck-0.0.7",
       "name": "buildcheck",
@@ -3814,10 +4169,10 @@
       "description": "Color conversion and manipulation with CSS string support"
     },
     {
-      "SPDXID": "SPDXRef-Package-cpu-features-0.0.10",
-      "name": "cpu-features",
-      "versionInfo": "0.0.10",
-      "downloadLocation": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "SPDXID": "SPDXRef-Package-compress-commons-6.0.2",
+      "name": "compress-commons",
+      "versionInfo": "6.0.2",
+      "downloadLocation": "https://registry.npmjs.org/compress-commons/-/compress-commons-6.0.2.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "MIT",
@@ -3827,14 +4182,113 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/cpu-features@0.0.10"
+          "referenceLocator": "pkg:npm/compress-commons@6.0.2"
         }
       ],
-      "description": "A simple binding to Google's cpu_features library for obtaining information about installed CPU(s)"
+      "description": "a library that defines a common interface for working with archive formats within node",
+      "homepage": "https://github.com/archiverjs/node-compress-commons"
     },
     {
-      "SPDXID": "SPDXRef-Package-debug-4.4.3",
-      "name": "debug",
+      "SPDXID": "SPDXRef-Package-core-util-is-1.0.3",
+      "name": "core-util-is",
+      "versionInfo": "1.0.3",
+      "downloadLocation": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/core-util-is@1.0.3"
+        }
+      ],
+      "description": "The `util.is*` functions introduced in Node v0.12."
+    },
+    {
+      "SPDXID": "SPDXRef-Package-cpu-features-0.0.10",
+      "name": "cpu-features",
+      "versionInfo": "0.0.10",
+      "downloadLocation": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/cpu-features@0.0.10"
+        }
+      ],
+      "description": "A simple binding to Google's cpu_features library for obtaining information about installed CPU(s)"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-crc-32-1.2.2",
+      "name": "crc-32",
+      "versionInfo": "1.2.2",
+      "downloadLocation": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/crc-32@1.2.2"
+        }
+      ],
+      "description": "Pure-JS CRC-32",
+      "homepage": "https://sheetjs.com/"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-crc32-stream-6.0.0",
+      "name": "crc32-stream",
+      "versionInfo": "6.0.0",
+      "downloadLocation": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-6.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/crc32-stream@6.0.0"
+        }
+      ],
+      "description": "a streaming CRC32 checksumer",
+      "homepage": "https://github.com/archiverjs/node-crc32-stream"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-cross-spawn-7.0.6",
+      "name": "cross-spawn",
+      "versionInfo": "7.0.6",
+      "downloadLocation": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/cross-spawn@7.0.6"
+        }
+      ],
+      "description": "Cross platform child_process#spawn and child_process#spawnSync",
+      "homepage": "https://github.com/moxystudio/node-cross-spawn"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-debug-4.4.3",
+      "name": "debug",
       "versionInfo": "4.4.3",
       "downloadLocation": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
       "filesAnalyzed": false,
@@ -3908,6 +4362,25 @@
       ],
       "description": "Docker Remote API module."
     },
+    {
+      "SPDXID": "SPDXRef-Package-eastasianwidth-0.2.0",
+      "name": "eastasianwidth",
+      "versionInfo": "0.2.0",
+      "downloadLocation": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/eastasianwidth@0.2.0"
+        }
+      ],
+      "description": "Get East Asian Width from a character."
+    },
     {
       "SPDXID": "SPDXRef-Package-emoji-regex-8.0.0",
       "name": "emoji-regex",
@@ -3928,6 +4401,26 @@
       "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
       "homepage": "https://mths.be/emoji-regex"
     },
+    {
+      "SPDXID": "SPDXRef-Package-emoji-regex-9.2.2",
+      "name": "emoji-regex",
+      "versionInfo": "9.2.2",
+      "downloadLocation": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/emoji-regex@9.2.2"
+        }
+      ],
+      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
+      "homepage": "https://mths.be/emoji-regex"
+    },
     {
       "SPDXID": "SPDXRef-Package-enabled-2.0.0",
       "name": "enabled",
@@ -3986,6 +4479,65 @@
       ],
       "description": "A tiny (183B to 210B) and fast utility to ascend parent directories"
     },
+    {
+      "SPDXID": "SPDXRef-Package-event-target-shim-5.0.1",
+      "name": "event-target-shim",
+      "versionInfo": "5.0.1",
+      "downloadLocation": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/event-target-shim@5.0.1"
+        }
+      ],
+      "description": "An implementation of WHATWG EventTarget interface.",
+      "homepage": "https://github.com/mysticatea/event-target-shim"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-events-universal-1.0.1",
+      "name": "events-universal",
+      "versionInfo": "1.0.1",
+      "downloadLocation": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/events-universal@1.0.1"
+        }
+      ],
+      "description": "Universal wrapper for the Node.js events module",
+      "homepage": "https://github.com/holepunchto/events-universal#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-events-3.3.0",
+      "name": "events",
+      "versionInfo": "3.3.0",
+      "downloadLocation": "https://registry.npmjs.org/events/-/events-3.3.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/events@3.3.0"
+        }
+      ],
+      "description": "Node's event emitter for all engines."
+    },
     {
       "SPDXID": "SPDXRef-Package-fast-cartesian-9.0.1",
       "name": "fast-cartesian",
@@ -4006,6 +4558,26 @@
       "description": "Fast cartesian product",
       "homepage": "https://www.github.com/ehmicky/fast-cartesian"
     },
+    {
+      "SPDXID": "SPDXRef-Package-fast-fifo-1.3.2",
+      "name": "fast-fifo",
+      "versionInfo": "1.3.2",
+      "downloadLocation": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/fast-fifo@1.3.2"
+        }
+      ],
+      "description": "A fast fifo implementation similar to the one powering nextTick in Node.js core",
+      "homepage": "https://github.com/mafintosh/fast-fifo"
+    },
     {
       "SPDXID": "SPDXRef-Package-fast-xml-builder-1.1.9",
       "name": "fast-xml-builder",
@@ -4123,6 +4695,25 @@
       "description": "Extract names from functions",
       "homepage": "https://github.com/3rd-Eden/fn.name"
     },
+    {
+      "SPDXID": "SPDXRef-Package-foreground-child-3.3.1",
+      "name": "foreground-child",
+      "versionInfo": "3.3.1",
+      "downloadLocation": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/foreground-child@3.3.1"
+        }
+      ],
+      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits."
+    },
     {
       "SPDXID": "SPDXRef-Package-fs-constants-1.0.0",
       "name": "fs-constants",
@@ -4162,6 +4753,44 @@
       ],
       "homepage": "https://github.com/stefanpenner/get-caller-file#readme"
     },
+    {
+      "SPDXID": "SPDXRef-Package-glob-10.5.0",
+      "name": "glob",
+      "versionInfo": "10.5.0",
+      "downloadLocation": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/glob@10.5.0"
+        }
+      ],
+      "description": "the most correct and second fastest glob implementation in JavaScript"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-graceful-fs-4.2.11",
+      "name": "graceful-fs",
+      "versionInfo": "4.2.11",
+      "downloadLocation": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/graceful-fs@4.2.11"
+        }
+      ],
+      "description": "A drop-in replacement for fs, making various improvements."
+    },
     {
       "SPDXID": "SPDXRef-Package-hono-4.12.18",
       "name": "hono",
@@ -4298,6 +4927,85 @@
       ],
       "description": "Check if something is a Node.js stream"
     },
+    {
+      "SPDXID": "SPDXRef-Package-isarray-1.0.0",
+      "name": "isarray",
+      "versionInfo": "1.0.0",
+      "downloadLocation": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/isarray@1.0.0"
+        }
+      ],
+      "description": "Array#isArray for older browsers",
+      "homepage": "https://github.com/juliangruber/isarray"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-isexe-2.0.0",
+      "name": "isexe",
+      "versionInfo": "2.0.0",
+      "downloadLocation": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/isexe@2.0.0"
+        }
+      ],
+      "description": "Minimal module to check if a file is executable.",
+      "homepage": "https://github.com/isaacs/isexe#readme"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-jackspeak-3.4.3",
+      "name": "jackspeak",
+      "versionInfo": "3.4.3",
+      "downloadLocation": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/jackspeak@3.4.3"
+        }
+      ],
+      "description": "A very strict and proper argument parser."
+    },
+    {
+      "SPDXID": "SPDXRef-Package-jose-6.2.3",
+      "name": "jose",
+      "versionInfo": "6.2.3",
+      "downloadLocation": "https://registry.npmjs.org/jose/-/jose-6.2.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/jose@6.2.3"
+        }
+      ],
+      "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
+      "homepage": "https://github.com/panva/jose"
+    },
     {
       "SPDXID": "SPDXRef-Package-jsep-1.4.0",
       "name": "jsep",
@@ -4379,10 +5087,10 @@
       "homepage": "https://kysely.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package-lodash.camelcase-4.3.0",
-      "name": "lodash.camelcase",
-      "versionInfo": "4.3.0",
-      "downloadLocation": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "SPDXID": "SPDXRef-Package-lazystream-1.0.1",
+      "name": "lazystream",
+      "versionInfo": "1.0.1",
+      "downloadLocation": "https://registry.npmjs.org/lazystream/-/lazystream-1.0.1.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "MIT",
@@ -4392,10 +5100,50 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/lodash.camelcase@4.3.0"
+          "referenceLocator": "pkg:npm/lazystream@1.0.1"
         }
       ],
-      "description": "The lodash method `_.camelCase` exported as a module.",
+      "description": "Open Node Streams on demand.",
+      "homepage": "https://github.com/jpommerening/node-lazystream"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-lodash.camelcase-4.3.0",
+      "name": "lodash.camelcase",
+      "versionInfo": "4.3.0",
+      "downloadLocation": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/lodash.camelcase@4.3.0"
+        }
+      ],
+      "description": "The lodash method `_.camelCase` exported as a module.",
+      "homepage": "https://lodash.com/"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-lodash-4.18.1",
+      "name": "lodash",
+      "versionInfo": "4.18.1",
+      "downloadLocation": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/lodash@4.18.1"
+        }
+      ],
+      "description": "Lodash modular utilities.",
       "homepage": "https://lodash.com/"
     },
     {
@@ -4437,6 +5185,25 @@
       ],
       "description": "A Long class for representing a 64-bit two's-complement integer value."
     },
+    {
+      "SPDXID": "SPDXRef-Package-lru-cache-10.4.3",
+      "name": "lru-cache",
+      "versionInfo": "10.4.3",
+      "downloadLocation": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/lru-cache@10.4.3"
+        }
+      ],
+      "description": "A cache object that deletes the least-recently-used items."
+    },
     {
       "SPDXID": "SPDXRef-Package-micromatch-4.0.8",
       "name": "micromatch",
@@ -4457,6 +5224,44 @@
       "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.",
       "homepage": "https://github.com/micromatch/micromatch"
     },
+    {
+      "SPDXID": "SPDXRef-Package-minimatch-5.1.9",
+      "name": "minimatch",
+      "versionInfo": "5.1.9",
+      "downloadLocation": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/minimatch@5.1.9"
+        }
+      ],
+      "description": "a glob matcher in javascript"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-minimatch-9.0.9",
+      "name": "minimatch",
+      "versionInfo": "9.0.9",
+      "downloadLocation": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/minimatch@9.0.9"
+        }
+      ],
+      "description": "a glob matcher in javascript"
+    },
     {
       "SPDXID": "SPDXRef-Package-minipass-7.1.3",
       "name": "minipass",
@@ -4593,6 +5398,26 @@
       ],
       "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 25 compatibility"
     },
+    {
+      "SPDXID": "SPDXRef-Package-normalize-path-3.0.0",
+      "name": "normalize-path",
+      "versionInfo": "3.0.0",
+      "downloadLocation": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/normalize-path@3.0.0"
+        }
+      ],
+      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
+      "homepage": "https://github.com/jonschlinkert/normalize-path"
+    },
     {
       "SPDXID": "SPDXRef-Package-object-hash-3.0.0",
       "name": "object-hash",
@@ -4671,6 +5496,25 @@
       "description": "Oxc Transformer Node API",
       "homepage": "https://oxc.rs/docs/guide/usage/transformer"
     },
+    {
+      "SPDXID": "SPDXRef-Package-package-json-from-dist-1.0.1",
+      "name": "package-json-from-dist",
+      "versionInfo": "1.0.1",
+      "downloadLocation": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/package-json-from-dist@1.0.1"
+        }
+      ],
+      "description": "Load the local package.json from either src or dist folder"
+    },
     {
       "SPDXID": "SPDXRef-Package-path-expression-matcher-1.5.0",
       "name": "path-expression-matcher",
@@ -4691,6 +5535,44 @@
       "description": "Efficient path tracking and pattern matching for XML/JSON parsers",
       "homepage": "https://github.com/NaturalIntelligence/path-expression-matcher#readme"
     },
+    {
+      "SPDXID": "SPDXRef-Package-path-key-3.1.1",
+      "name": "path-key",
+      "versionInfo": "3.1.1",
+      "downloadLocation": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/path-key@3.1.1"
+        }
+      ],
+      "description": "Get the PATH environment variable key cross-platform"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-path-scurry-1.11.1",
+      "name": "path-scurry",
+      "versionInfo": "1.11.1",
+      "downloadLocation": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "BlueOak-1.0.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/path-scurry@1.11.1"
+        }
+      ],
+      "description": "walk paths fast and efficiently"
+    },
     {
       "SPDXID": "SPDXRef-Package-pg-cloudflare-1.3.0",
       "name": "pg-cloudflare",
@@ -4982,6 +5864,45 @@
       ],
       "description": "Parse Postgres interval columns"
     },
+    {
+      "SPDXID": "SPDXRef-Package-process-nextick-args-2.0.1",
+      "name": "process-nextick-args",
+      "versionInfo": "2.0.1",
+      "downloadLocation": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/process-nextick-args@2.0.1"
+        }
+      ],
+      "description": "process.nextTick but always with args",
+      "homepage": "https://github.com/calvinmetcalf/process-nextick-args"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-process-0.11.10",
+      "name": "process",
+      "versionInfo": "0.11.10",
+      "downloadLocation": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/process@0.11.10"
+        }
+      ],
+      "description": "process information for node.js and browsers"
+    },
     {
       "SPDXID": "SPDXRef-Package-protobufjs-8.0.3",
       "name": "protobufjs",
@@ -5021,6 +5942,25 @@
       ],
       "description": "pipe streams together and close all of them if one of them closes"
     },
+    {
+      "SPDXID": "SPDXRef-Package-readable-stream-2.3.8",
+      "name": "readable-stream",
+      "versionInfo": "2.3.8",
+      "downloadLocation": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/readable-stream@2.3.8"
+        }
+      ],
+      "description": "Streams3, a user-land copy of the stream library from Node.js"
+    },
     {
       "SPDXID": "SPDXRef-Package-readable-stream-3.6.2",
       "name": "readable-stream",
@@ -5040,6 +5980,46 @@
       ],
       "description": "Streams3, a user-land copy of the stream library from Node.js"
     },
+    {
+      "SPDXID": "SPDXRef-Package-readable-stream-4.7.0",
+      "name": "readable-stream",
+      "versionInfo": "4.7.0",
+      "downloadLocation": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.7.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/readable-stream@4.7.0"
+        }
+      ],
+      "description": "Node.js Streams, a user-land copy of the stream library from Node.js",
+      "homepage": "https://github.com/nodejs/readable-stream"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-readdir-glob-1.1.3",
+      "name": "readdir-glob",
+      "versionInfo": "1.1.3",
+      "downloadLocation": "https://registry.npmjs.org/readdir-glob/-/readdir-glob-1.1.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/readdir-glob@1.1.3"
+        }
+      ],
+      "description": "Recursive fs.readdir with streaming API and glob filtering.",
+      "homepage": "https://github.com/Yqnn/node-readdir-glob"
+    },
     {
       "SPDXID": "SPDXRef-Package-require-directory-2.1.1",
       "name": "require-directory",
@@ -5080,6 +6060,26 @@
       "description": "Module to hook into the Node.js require function",
       "homepage": "https://github.com/nodejs/require-in-the-middle#readme"
     },
+    {
+      "SPDXID": "SPDXRef-Package-safe-buffer-5.1.2",
+      "name": "safe-buffer",
+      "versionInfo": "5.1.2",
+      "downloadLocation": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/safe-buffer@5.1.2"
+        }
+      ],
+      "description": "Safer Node.js Buffer API",
+      "homepage": "https://github.com/feross/safe-buffer"
+    },
     {
       "SPDXID": "SPDXRef-Package-safe-buffer-5.2.1",
       "name": "safe-buffer",
@@ -5139,6 +6139,63 @@
       ],
       "description": "Modern Buffer API polyfill without footguns"
     },
+    {
+      "SPDXID": "SPDXRef-Package-shebang-command-2.0.0",
+      "name": "shebang-command",
+      "versionInfo": "2.0.0",
+      "downloadLocation": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/shebang-command@2.0.0"
+        }
+      ],
+      "description": "Get the command from a shebang"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-shebang-regex-3.0.0",
+      "name": "shebang-regex",
+      "versionInfo": "3.0.0",
+      "downloadLocation": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/shebang-regex@3.0.0"
+        }
+      ],
+      "description": "Regular expression for matching a shebang line"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-signal-exit-4.1.0",
+      "name": "signal-exit",
+      "versionInfo": "4.1.0",
+      "downloadLocation": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/signal-exit@4.1.0"
+        }
+      ],
+      "description": "when you want to fire an event no matter how a process exits."
+    },
     {
       "SPDXID": "SPDXRef-Package-split-ca-1.0.1",
       "name": "split-ca",
@@ -5217,6 +6274,45 @@
       "description": "Get v8 stack traces as an array of CallSite objects.",
       "homepage": "https://github.com/felixge/node-stack-trace"
     },
+    {
+      "SPDXID": "SPDXRef-Package-streamx-2.25.0",
+      "name": "streamx",
+      "versionInfo": "2.25.0",
+      "downloadLocation": "https://registry.npmjs.org/streamx/-/streamx-2.25.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/streamx@2.25.0"
+        }
+      ],
+      "description": "An iteration of the Node.js core streams with a series of improvements",
+      "homepage": "https://github.com/mafintosh/streamx"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-string-width-cjs-4.2.3",
+      "name": "string-width-cjs",
+      "versionInfo": "4.2.3",
+      "downloadLocation": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/string-width-cjs@4.2.3"
+        }
+      ],
+      "description": "Get the visual width of a string - the number of columns required to display it"
+    },
     {
       "SPDXID": "SPDXRef-Package-string-width-4.2.3",
       "name": "string-width",
@@ -5236,6 +6332,45 @@
       ],
       "description": "Get the visual width of a string - the number of columns required to display it"
     },
+    {
+      "SPDXID": "SPDXRef-Package-string-width-5.1.2",
+      "name": "string-width",
+      "versionInfo": "5.1.2",
+      "downloadLocation": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/string-width@5.1.2"
+        }
+      ],
+      "description": "Get the visual width of a string - the number of columns required to display it"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-string-decoder-1.1.1",
+      "name": "string_decoder",
+      "versionInfo": "1.1.1",
+      "downloadLocation": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/string_decoder@1.1.1"
+        }
+      ],
+      "description": "The string_decoder module from Node core",
+      "homepage": "https://github.com/nodejs/string_decoder"
+    },
     {
       "SPDXID": "SPDXRef-Package-string-decoder-1.3.0",
       "name": "string_decoder",
@@ -5256,6 +6391,25 @@
       "description": "The string_decoder module from Node core",
       "homepage": "https://github.com/nodejs/string_decoder"
     },
+    {
+      "SPDXID": "SPDXRef-Package-strip-ansi-cjs-6.0.1",
+      "name": "strip-ansi-cjs",
+      "versionInfo": "6.0.1",
+      "downloadLocation": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/strip-ansi-cjs@6.0.1"
+        }
+      ],
+      "description": "Strip ANSI escape codes from a string"
+    },
     {
       "SPDXID": "SPDXRef-Package-strip-ansi-6.0.1",
       "name": "strip-ansi",
@@ -5275,6 +6429,25 @@
       ],
       "description": "Strip ANSI escape codes from a string"
     },
+    {
+      "SPDXID": "SPDXRef-Package-strip-ansi-7.2.0",
+      "name": "strip-ansi",
+      "versionInfo": "7.2.0",
+      "downloadLocation": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/strip-ansi@7.2.0"
+        }
+      ],
+      "description": "Strip ANSI escape codes from a string"
+    },
     {
       "SPDXID": "SPDXRef-Package-strnum-2.2.3",
       "name": "strnum",
@@ -5289,36 +6462,95 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/strnum@2.2.3"
+          "referenceLocator": "pkg:npm/strnum@2.2.3"
+        }
+      ],
+      "description": "Parse String to Number based on configuration"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-tar-fs-2.1.4",
+      "name": "tar-fs",
+      "versionInfo": "2.1.4",
+      "downloadLocation": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/tar-fs@2.1.4"
+        }
+      ],
+      "description": "filesystem bindings for tar-stream",
+      "homepage": "https://github.com/mafintosh/tar-fs"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-tar-stream-2.2.0",
+      "name": "tar-stream",
+      "versionInfo": "2.2.0",
+      "downloadLocation": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/tar-stream@2.2.0"
+        }
+      ],
+      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
+      "homepage": "https://github.com/mafintosh/tar-stream"
+    },
+    {
+      "SPDXID": "SPDXRef-Package-tar-stream-3.1.8",
+      "name": "tar-stream",
+      "versionInfo": "3.1.8",
+      "downloadLocation": "https://registry.npmjs.org/tar-stream/-/tar-stream-3.1.8.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/tar-stream@3.1.8"
         }
       ],
-      "description": "Parse String to Number based on configuration"
+      "description": "tar-stream is a streaming tar parser and generator and nothing else. It operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
+      "homepage": "https://github.com/mafintosh/tar-stream"
     },
     {
-      "SPDXID": "SPDXRef-Package-tar-fs-2.1.4",
-      "name": "tar-fs",
-      "versionInfo": "2.1.4",
-      "downloadLocation": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "SPDXID": "SPDXRef-Package-tar-7.5.13",
+      "name": "tar",
+      "versionInfo": "7.5.13",
+      "downloadLocation": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "MIT",
+      "licenseDeclared": "BlueOak-1.0.0",
       "copyrightText": "NOASSERTION",
       "supplier": "NOASSERTION",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/tar-fs@2.1.4"
+          "referenceLocator": "pkg:npm/tar@7.5.13"
         }
       ],
-      "description": "filesystem bindings for tar-stream",
-      "homepage": "https://github.com/mafintosh/tar-fs"
+      "description": "tar for node"
     },
     {
-      "SPDXID": "SPDXRef-Package-tar-stream-2.2.0",
-      "name": "tar-stream",
-      "versionInfo": "2.2.0",
-      "downloadLocation": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
+      "SPDXID": "SPDXRef-Package-teex-1.0.1",
+      "name": "teex",
+      "versionInfo": "1.0.1",
+      "downloadLocation": "https://registry.npmjs.org/teex/-/teex-1.0.1.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "MIT",
@@ -5328,30 +6560,31 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/tar-stream@2.2.0"
+          "referenceLocator": "pkg:npm/teex@1.0.1"
         }
       ],
-      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
-      "homepage": "https://github.com/mafintosh/tar-stream"
+      "description": "Turn a readable stream into multiple readable streamx streams",
+      "homepage": "https://github.com/mafintosh/teex"
     },
     {
-      "SPDXID": "SPDXRef-Package-tar-7.5.13",
-      "name": "tar",
-      "versionInfo": "7.5.13",
-      "downloadLocation": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
+      "SPDXID": "SPDXRef-Package-text-decoder-1.2.7",
+      "name": "text-decoder",
+      "versionInfo": "1.2.7",
+      "downloadLocation": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.7.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "BlueOak-1.0.0",
+      "licenseDeclared": "Apache-2.0",
       "copyrightText": "NOASSERTION",
       "supplier": "NOASSERTION",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/tar@7.5.13"
+          "referenceLocator": "pkg:npm/text-decoder@1.2.7"
         }
       ],
-      "description": "tar for node"
+      "description": "Streaming text decoder that preserves multibyte Unicode characters",
+      "homepage": "https://github.com/holepunchto/text-decoder#readme"
     },
     {
       "SPDXID": "SPDXRef-Package-text-hex-1.0.0",
@@ -5493,6 +6726,25 @@
       "description": "The Node.js `util.deprecate()` function with browser support",
       "homepage": "https://github.com/TooTallNate/util-deprecate"
     },
+    {
+      "SPDXID": "SPDXRef-Package-which-2.0.2",
+      "name": "which",
+      "versionInfo": "2.0.2",
+      "downloadLocation": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "ISC",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/which@2.0.2"
+        }
+      ],
+      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH."
+    },
     {
       "SPDXID": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "name": "winston-daily-rotate-file",
@@ -5552,6 +6804,25 @@
       ],
       "description": "A logger for just about everything."
     },
+    {
+      "SPDXID": "SPDXRef-Package-wrap-ansi-cjs-7.0.0",
+      "name": "wrap-ansi-cjs",
+      "versionInfo": "7.0.0",
+      "downloadLocation": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/wrap-ansi-cjs@7.0.0"
+        }
+      ],
+      "description": "Wordwrap a string with ANSI escape codes"
+    },
     {
       "SPDXID": "SPDXRef-Package-wrap-ansi-7.0.0",
       "name": "wrap-ansi",
@@ -5571,6 +6842,25 @@
       ],
       "description": "Wordwrap a string with ANSI escape codes"
     },
+    {
+      "SPDXID": "SPDXRef-Package-wrap-ansi-8.1.0",
+      "name": "wrap-ansi",
+      "versionInfo": "8.1.0",
+      "downloadLocation": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/wrap-ansi@8.1.0"
+        }
+      ],
+      "description": "Wordwrap a string with ANSI escape codes"
+    },
     {
       "SPDXID": "SPDXRef-Package-wrappy-1.0.2",
       "name": "wrappy",
@@ -5729,6 +7019,26 @@
       "description": "yargs the modern, pirate-themed, successor to optimist.",
       "homepage": "https://yargs.js.org/"
     },
+    {
+      "SPDXID": "SPDXRef-Package-zip-stream-6.0.1",
+      "name": "zip-stream",
+      "versionInfo": "6.0.1",
+      "downloadLocation": "https://registry.npmjs.org/zip-stream/-/zip-stream-6.0.1.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/zip-stream@6.0.1"
+        }
+      ],
+      "description": "a streaming zip archive generator.",
+      "homepage": "https://github.com/archiverjs/node-zip-stream"
+    },
     {
       "SPDXID": "SPDXRef-Package-zod-4.3.6",
       "name": "zod",
@@ -7426,6 +8736,36 @@
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-string-width-cjs-4.2.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-string-width-5.1.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-strip-ansi-cjs-6.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-strip-ansi-7.2.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-wrap-ansi-cjs-7.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-wrap-ansi-8.1.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package--isaacs-fs-minipass-4.0.1",
       "relatedSpdxElement": "SPDXRef-Package-minipass-7.1.3",
@@ -7448,22 +8788,27 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-RootPackage",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-archiver-7.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7476,6 +8821,11 @@
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-RootPackage",
+      "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-RootPackage",
       "relatedSpdxElement": "SPDXRef-Package-tar-7.5.13",
@@ -7502,182 +8852,192 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-fast-cartesian-9.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package-fast-cartesian-9.0.1",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1038.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.28.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.40.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-archiver-7.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-diff-7.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.20.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.8.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -9312,128 +10672,253 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-retry-4.3.6",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "spdxElementId": "SPDXRef-Package--smithy-util-retry-4.3.6",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-retry-4.3.6",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-fetch-http-handler-5.3.17",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-node-http-handler-4.6.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-base64-4.3.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-4.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-hex-encoding-4.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-utf8-4.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-uri-escape-4.2.2",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-2.3.0",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-2.2.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-2.3.0",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-4.2.2",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-4.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-4.2.2",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-waiter-4.3.0",
+      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-util-waiter-4.3.0",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--smithy-uuid-1.1.2",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--so-ric-colorspace-1.1.6",
+      "relatedSpdxElement": "SPDXRef-Package-color-5.0.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--so-ric-colorspace-1.1.6",
+      "relatedSpdxElement": "SPDXRef-Package-text-hex-1.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--tybys-wasm-util-0.10.1",
+      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--types-node-24.12.0",
+      "relatedSpdxElement": "SPDXRef-Package-undici-types-7.16.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-abort-controller-3.0.0",
+      "relatedSpdxElement": "SPDXRef-Package-event-target-shim-5.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-acorn-import-attributes-1.9.5",
+      "relatedSpdxElement": "SPDXRef-Package-acorn-8.16.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-ansi-styles-4.3.0",
+      "relatedSpdxElement": "SPDXRef-Package-color-convert-2.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-glob-10.5.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-retry-4.3.6",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-graceful-fs-4.2.11",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-fetch-http-handler-5.3.17",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-is-stream-2.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-node-http-handler-4.6.1",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-lazystream-1.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-lodash-4.18.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-base64-4.3.2",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-normalize-path-3.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-4.2.2",
+      "spdxElementId": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-4.7.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-hex-encoding-4.2.2",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-archiver-utils-5.0.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-utf8-4.2.2",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-async-3.2.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-stream-4.5.25",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-buffer-crc32-1.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-uri-escape-4.2.2",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-4.7.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-2.3.0",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-2.2.0",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-readdir-glob-1.1.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-2.3.0",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-tar-stream-3.1.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-4.2.2",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-util-buffer-from-4.2.2",
+      "spdxElementId": "SPDXRef-Package-archiver-7.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-zip-stream-6.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-utf8-4.2.2",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-asn1-0.2.6",
+      "relatedSpdxElement": "SPDXRef-Package-safer-buffer-2.1.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-waiter-4.3.0",
-      "relatedSpdxElement": "SPDXRef-Package--smithy-types-4.14.1",
+      "spdxElementId": "SPDXRef-Package-bare-fs-4.5.5",
+      "relatedSpdxElement": "SPDXRef-Package-bare-events-2.8.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-util-waiter-4.3.0",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-bare-fs-4.5.5",
+      "relatedSpdxElement": "SPDXRef-Package-bare-path-3.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--smithy-uuid-1.1.2",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-bare-fs-4.5.5",
+      "relatedSpdxElement": "SPDXRef-Package-bare-stream-2.8.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--so-ric-colorspace-1.1.6",
-      "relatedSpdxElement": "SPDXRef-Package-color-5.0.3",
+      "spdxElementId": "SPDXRef-Package-bare-fs-4.5.5",
+      "relatedSpdxElement": "SPDXRef-Package-bare-url-2.3.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--so-ric-colorspace-1.1.6",
-      "relatedSpdxElement": "SPDXRef-Package-text-hex-1.0.0",
+      "spdxElementId": "SPDXRef-Package-bare-fs-4.5.5",
+      "relatedSpdxElement": "SPDXRef-Package-fast-fifo-1.3.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--tybys-wasm-util-0.10.1",
-      "relatedSpdxElement": "SPDXRef-Package-tslib-2.8.1",
+      "spdxElementId": "SPDXRef-Package-bare-path-3.0.0",
+      "relatedSpdxElement": "SPDXRef-Package-bare-os-3.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--types-node-24.12.0",
-      "relatedSpdxElement": "SPDXRef-Package-undici-types-7.16.0",
+      "spdxElementId": "SPDXRef-Package-bare-stream-2.8.1",
+      "relatedSpdxElement": "SPDXRef-Package-bare-events-2.8.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package-acorn-import-attributes-1.9.5",
-      "relatedSpdxElement": "SPDXRef-Package-acorn-8.16.0",
+      "spdxElementId": "SPDXRef-Package-bare-stream-2.8.1",
+      "relatedSpdxElement": "SPDXRef-Package-streamx-2.25.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ansi-styles-4.3.0",
-      "relatedSpdxElement": "SPDXRef-Package-color-convert-2.0.1",
+      "spdxElementId": "SPDXRef-Package-bare-stream-2.8.1",
+      "relatedSpdxElement": "SPDXRef-Package-teex-1.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package-asn1-0.2.6",
-      "relatedSpdxElement": "SPDXRef-Package-safer-buffer-2.1.2",
+      "spdxElementId": "SPDXRef-Package-bare-url-2.3.2",
+      "relatedSpdxElement": "SPDXRef-Package-bare-path-3.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -9456,6 +10941,11 @@
       "relatedSpdxElement": "SPDXRef-Package-readable-stream-3.6.2",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-brace-expansion-5.0.5",
+      "relatedSpdxElement": "SPDXRef-Package-balanced-match-4.0.4",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-braces-3.0.3",
       "relatedSpdxElement": "SPDXRef-Package-fill-range-7.1.1",
@@ -9471,6 +10961,16 @@
       "relatedSpdxElement": "SPDXRef-Package-ieee754-1.2.1",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-buffer-6.0.3",
+      "relatedSpdxElement": "SPDXRef-Package-base64-js-1.5.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-buffer-6.0.3",
+      "relatedSpdxElement": "SPDXRef-Package-ieee754-1.2.1",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-cliui-8.0.1",
       "relatedSpdxElement": "SPDXRef-Package-string-width-4.2.3",
@@ -9511,6 +11011,31 @@
       "relatedSpdxElement": "SPDXRef-Package-color-string-2.1.4",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-compress-commons-6.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-crc-32-1.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-compress-commons-6.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-crc32-stream-6.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-compress-commons-6.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-is-stream-2.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-compress-commons-6.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-normalize-path-3.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-compress-commons-6.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-4.7.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-cpu-features-0.0.10",
       "relatedSpdxElement": "SPDXRef-Package-buildcheck-0.0.7",
@@ -9521,6 +11046,31 @@
       "relatedSpdxElement": "SPDXRef-Package-nan-2.25.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-crc32-stream-6.0.0",
+      "relatedSpdxElement": "SPDXRef-Package-crc-32-1.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-crc32-stream-6.0.0",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-4.7.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-cross-spawn-7.0.6",
+      "relatedSpdxElement": "SPDXRef-Package-path-key-3.1.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-cross-spawn-7.0.6",
+      "relatedSpdxElement": "SPDXRef-Package-shebang-command-2.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-cross-spawn-7.0.6",
+      "relatedSpdxElement": "SPDXRef-Package-which-2.0.2",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-debug-4.4.3",
       "relatedSpdxElement": "SPDXRef-Package-ms-2.1.3",
@@ -9581,6 +11131,11 @@
       "relatedSpdxElement": "SPDXRef-Package-once-1.4.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-events-universal-1.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-bare-events-2.8.2",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-fast-xml-builder-1.1.9",
       "relatedSpdxElement": "SPDXRef-Package-path-expression-matcher-1.5.0",
@@ -9616,6 +11171,46 @@
       "relatedSpdxElement": "SPDXRef-Package-to-regex-range-5.0.1",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-foreground-child-3.3.1",
+      "relatedSpdxElement": "SPDXRef-Package-cross-spawn-7.0.6",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-foreground-child-3.3.1",
+      "relatedSpdxElement": "SPDXRef-Package-signal-exit-4.1.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-foreground-child-3.3.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-jackspeak-3.4.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-minimatch-9.0.9",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-minipass-7.1.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-package-json-from-dist-1.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-glob-10.5.0",
+      "relatedSpdxElement": "SPDXRef-Package-path-scurry-1.11.1",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-import-in-the-middle-3.0.1",
       "relatedSpdxElement": "SPDXRef-Package-acorn-import-attributes-1.9.5",
@@ -9636,6 +11231,16 @@
       "relatedSpdxElement": "SPDXRef-Package-module-details-from-path-1.0.4",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-jackspeak-3.4.3",
+      "relatedSpdxElement": "SPDXRef-Package--isaacs-cliui-8.0.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-jackspeak-3.4.3",
+      "relatedSpdxElement": "SPDXRef-Package--pkgjs-parseargs-0.11.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relatedSpdxElement": "SPDXRef-Package--jsep-plugin-assignment-1.3.0",
@@ -9651,6 +11256,11 @@
       "relatedSpdxElement": "SPDXRef-Package-jsep-1.4.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-lazystream-1.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-2.3.8",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-logform-2.7.0",
       "relatedSpdxElement": "SPDXRef-Package--colors-colors-1.6.0",
@@ -9691,6 +11301,16 @@
       "relatedSpdxElement": "SPDXRef-Package-picomatch-2.3.2",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-minimatch-5.1.9",
+      "relatedSpdxElement": "SPDXRef-Package-brace-expansion-5.0.5",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-minimatch-9.0.9",
+      "relatedSpdxElement": "SPDXRef-Package-brace-expansion-5.0.5",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-minizlib-3.1.0",
       "relatedSpdxElement": "SPDXRef-Package-minipass-7.1.3",
@@ -9806,6 +11426,16 @@
       "relatedSpdxElement": "SPDXRef-Package--oxc-transform-binding-win32-x64-msvc-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-path-scurry-1.11.1",
+      "relatedSpdxElement": "SPDXRef-Package-lru-cache-10.4.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-path-scurry-1.11.1",
+      "relatedSpdxElement": "SPDXRef-Package-minipass-7.1.3",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-pg-pool-3.13.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.20.0",
@@ -9896,6 +11526,41 @@
       "relatedSpdxElement": "SPDXRef-Package-once-1.4.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-core-util-is-1.0.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-inherits-2.0.4",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-isarray-1.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-process-nextick-args-2.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-safe-buffer-5.1.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-string-decoder-1.1.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-2.3.8",
+      "relatedSpdxElement": "SPDXRef-Package-util-deprecate-1.0.2",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-readable-stream-3.6.2",
       "relatedSpdxElement": "SPDXRef-Package-inherits-2.0.4",
@@ -9911,6 +11576,36 @@
       "relatedSpdxElement": "SPDXRef-Package-util-deprecate-1.0.2",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-4.7.0",
+      "relatedSpdxElement": "SPDXRef-Package-abort-controller-3.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-4.7.0",
+      "relatedSpdxElement": "SPDXRef-Package-buffer-6.0.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-4.7.0",
+      "relatedSpdxElement": "SPDXRef-Package-events-3.3.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-4.7.0",
+      "relatedSpdxElement": "SPDXRef-Package-process-0.11.10",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readable-stream-4.7.0",
+      "relatedSpdxElement": "SPDXRef-Package-string-decoder-1.3.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-readdir-glob-1.1.3",
+      "relatedSpdxElement": "SPDXRef-Package-minimatch-5.1.9",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-require-in-the-middle-8.0.1",
       "relatedSpdxElement": "SPDXRef-Package-debug-4.4.3",
@@ -9921,6 +11616,11 @@
       "relatedSpdxElement": "SPDXRef-Package-module-details-from-path-1.0.4",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-shebang-command-2.0.0",
+      "relatedSpdxElement": "SPDXRef-Package-shebang-regex-3.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-ssh2-1.17.0",
       "relatedSpdxElement": "SPDXRef-Package-asn1-0.2.6",
@@ -9941,6 +11641,21 @@
       "relatedSpdxElement": "SPDXRef-Package-nan-2.25.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-streamx-2.25.0",
+      "relatedSpdxElement": "SPDXRef-Package-events-universal-1.0.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-streamx-2.25.0",
+      "relatedSpdxElement": "SPDXRef-Package-fast-fifo-1.3.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-streamx-2.25.0",
+      "relatedSpdxElement": "SPDXRef-Package-text-decoder-1.2.7",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-string-width-4.2.3",
       "relatedSpdxElement": "SPDXRef-Package-emoji-regex-8.0.0",
@@ -9956,6 +11671,26 @@
       "relatedSpdxElement": "SPDXRef-Package-strip-ansi-6.0.1",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-string-width-5.1.2",
+      "relatedSpdxElement": "SPDXRef-Package-eastasianwidth-0.2.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-string-width-5.1.2",
+      "relatedSpdxElement": "SPDXRef-Package-emoji-regex-9.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-string-width-5.1.2",
+      "relatedSpdxElement": "SPDXRef-Package-strip-ansi-7.2.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-string-decoder-1.1.1",
+      "relatedSpdxElement": "SPDXRef-Package-safe-buffer-5.1.2",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-string-decoder-1.3.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-buffer-5.2.1",
@@ -9966,6 +11701,11 @@
       "relatedSpdxElement": "SPDXRef-Package-ansi-regex-5.0.1",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-strip-ansi-7.2.0",
+      "relatedSpdxElement": "SPDXRef-Package-ansi-regex-6.2.2",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-tar-fs-2.1.4",
       "relatedSpdxElement": "SPDXRef-Package-chownr-1.1.4",
@@ -10011,6 +11751,26 @@
       "relatedSpdxElement": "SPDXRef-Package-readable-stream-3.6.2",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-tar-stream-3.1.8",
+      "relatedSpdxElement": "SPDXRef-Package-b4a-1.8.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-tar-stream-3.1.8",
+      "relatedSpdxElement": "SPDXRef-Package-bare-fs-4.5.5",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-tar-stream-3.1.8",
+      "relatedSpdxElement": "SPDXRef-Package-fast-fifo-1.3.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-tar-stream-3.1.8",
+      "relatedSpdxElement": "SPDXRef-Package-streamx-2.25.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-tar-7.5.13",
       "relatedSpdxElement": "SPDXRef-Package--isaacs-fs-minipass-4.0.1",
@@ -10036,11 +11796,26 @@
       "relatedSpdxElement": "SPDXRef-Package-yallist-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-teex-1.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-streamx-2.25.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-text-decoder-1.2.7",
+      "relatedSpdxElement": "SPDXRef-Package-b4a-1.8.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-to-regex-range-5.0.1",
       "relatedSpdxElement": "SPDXRef-Package-is-number-7.0.0",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-which-2.0.2",
+      "relatedSpdxElement": "SPDXRef-Package-isexe-2.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relatedSpdxElement": "SPDXRef-Package-file-stream-rotator-0.6.1",
@@ -10151,6 +11926,21 @@
       "relatedSpdxElement": "SPDXRef-Package-strip-ansi-6.0.1",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-wrap-ansi-8.1.0",
+      "relatedSpdxElement": "SPDXRef-Package-ansi-styles-6.2.3",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-wrap-ansi-8.1.0",
+      "relatedSpdxElement": "SPDXRef-Package-string-width-5.1.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-wrap-ansi-8.1.0",
+      "relatedSpdxElement": "SPDXRef-Package-strip-ansi-7.2.0",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-Package-yargs-17.7.2",
       "relatedSpdxElement": "SPDXRef-Package-cliui-8.0.1",
@@ -10185,6 +11975,21 @@
       "spdxElementId": "SPDXRef-Package-yargs-17.7.2",
       "relatedSpdxElement": "SPDXRef-Package-yargs-parser-21.1.1",
       "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-zip-stream-6.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-archiver-utils-5.0.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-zip-stream-6.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-compress-commons-6.0.2",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-zip-stream-6.0.1",
+      "relatedSpdxElement": "SPDXRef-Package-readable-stream-4.7.0",
+      "relationshipType": "DEPENDS_ON"
     }
   ]
 }