{
 "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
 "bomFormat": "CycloneDX",
 "specVersion": "1.5",
 "serialNumber": "urn:uuid:338d40a6-6c86-48d5-8f01-fb1956edfb7a",
 "version": 1,
 "metadata": {
  "timestamp": "2026-08-17T19:03:13Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "author": "anchore",
     "name": "syft",
     "version": "1.51.0"
    }
   ]
  },
  "component": {
   "bom-ref": "7b3688ab24f11d7a",
   "type": "container",
   "name": "/w/image.tar",
   "version": "sha256:0e0ea2173ddb68591f2255bb87bab45c3c81895f5cb4b6719d277270ae7acec1"
  },
  "properties": [
   {
    "name": "syft:image:labels:io.buildah.version",
    "value": "1.43.1"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.description",
    "value": "Yarn package manager"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.licenses",
    "value": "AGPL-3.0-only"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.source",
    "value": "https://index.boks.sh"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.title",
    "value": "yarn"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.vendor",
    "value": "boks"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.version",
    "value": "1.22.22"
   },
   {
    "name": "syft:image:labels:sh.boks.compose.requires",
    "value": "node@26"
   },
   {
    "name": "syft:image:labels:sh.boks.description",
    "value": "Yarn package manager"
   },
   {
    "name": "syft:image:labels:sh.boks.prefix",
    "value": "/boks/dist/yarn-1.22.22"
   },
   {
    "name": "syft:image:labels:sh.boks.project",
    "value": "yarn"
   },
   {
    "name": "syft:image:labels:sh.boks.provides",
    "value": "[\"/boks/dist/yarn-1.22.22/bin/yarn\", \"/boks/dist/yarn-1.22.22/bin/yarnpkg\"]"
   },
   {
    "name": "syft:image:labels:sh.boks.source-url",
    "value": "https://yarnpkg.com/"
   },
   {
    "name": "syft:image:labels:sh.boks.version",
    "value": "1.22.22"
   }
  ]
 },
 "components": [
  {
   "bom-ref": "pkg:npm/yarn@1.22.22?package-id=f7da9469752d813f",
   "type": "library",
   "name": "yarn",
   "version": "1.22.22",
   "description": "\ud83d\udce6\ud83d\udc08 Fast, reliable, and secure dependency management.",
   "licenses": [
    {
     "license": {
      "id": "BSD-2-Clause"
     }
    }
   ],
   "cpe": "cpe:2.3:a:yarn:yarn:1.22.22:*:*:*:*:*:*:*",
   "purl": "pkg:npm/yarn@1.22.22",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "javascript-package-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "javascript"
    },
    {
     "name": "syft:package:type",
     "value": "npm"
    },
    {
     "name": "syft:package:metadataType",
     "value": "javascript-npm-package"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:3a3bb2c88fd28f157316fdd84489c3c909c43d1e7f53f3d771feccf49726e673"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/node_modules/yarn/package.json"
    },
    {
     "name": "syft:location:1:path",
     "value": "/bin/yarn"
    },
    {
     "name": "syft:location:2:path",
     "value": "/bin/yarnpkg"
    },
    {
     "name": "syft:location:3:path",
     "value": "/lib/node_modules/yarn/LICENSE"
    },
    {
     "name": "syft:location:4:path",
     "value": "/lib/node_modules/yarn/README.md"
    },
    {
     "name": "syft:location:5:path",
     "value": "/lib/node_modules/yarn/bin/yarn"
    },
    {
     "name": "syft:location:6:path",
     "value": "/lib/node_modules/yarn/bin/yarn.cmd"
    },
    {
     "name": "syft:location:7:path",
     "value": "/lib/node_modules/yarn/bin/yarn.js"
    },
    {
     "name": "syft:location:8:path",
     "value": "/lib/node_modules/yarn/bin/yarnpkg"
    },
    {
     "name": "syft:location:9:path",
     "value": "/lib/node_modules/yarn/bin/yarnpkg.cmd"
    },
    {
     "name": "syft:location:10:path",
     "value": "/lib/node_modules/yarn/lib/cli.js"
    },
    {
     "name": "syft:location:11:path",
     "value": "/lib/node_modules/yarn/lib/v8-compile-cache.js"
    },
    {
     "name": "syft:location:12:path",
     "value": "/lib/node_modules/yarn/preinstall.js"
    }
   ]
  }
 ]
}