2026-01-01T00:00:00Z Orchard SBOM Team (fictional)sbom@orchard.example @orchard-example/gateway 4.2.0 pkg:npm/%40orchard-example/gateway@4.2.0 SAMPLE — fictional supply-chain data. Every package, registry, version, hash, licence, advisory identifier and signature in this document is invented. @orchard-example/router 2.1.3 pkg:npm/%40orchard-example/router@2.1.3 Apache-2.0 d17f0a5171a018c41cdaaa2701b6c32bf49f7404032fa45e5721e2b794cd2e51 @orchard-example/http-core 1.8.0 pkg:npm/%40orchard-example/http-core@1.8.0 MIT 05dc223ec1875dfd80d8c5873f8c29f036f98587f2fe2d02abc7c718bfb4b8bf example-metrics 4.0.0 pkg:npm/example-metrics@4.0.0 MIT 4a8930c617fd12bb99d26e868224d9918e4a3e00f8dd26b876ed19eb6e664f73 example-cache 0.9.2 pkg:npm/example-cache@0.9.2 BSD-3-Clause f7af2ad2d3c3daaa5991b0eae38ffa151a2e2f3bf0f2bdd7333adc3a1dc860f7 example-crypto-shim 1.2.0 pkg:npm/example-crypto-shim@1.2.0 MIT 25b4571f3faedb8df3979d9e509e331b6b88503d8d0057e6414e936e084a56cb example-logger 3.4.1 pkg:npm/example-logger@3.4.1 MIT 7fb72ea58987e5327259b66384f96f5e657c3ce5225b8891c567cac6b58430ec example-retry 1.0.4 pkg:npm/example-retry@1.0.4 ISC 4f2a78f8fb4883a2efd6b73b447f632599790c08e25bb7184f501b5f2b9af33f example-json-path 2.0.5 pkg:npm/example-json-path@2.0.5 MIT 74e30e4812a0cc92bd7c1a965e6f953f5d92b9eaf3cd77d90663a7344e939b63 example-yaml-lite 1.1.7 pkg:npm/example-yaml-lite@1.1.7 Apache-2.0 d7094de3c8e15621381e5f9f02c0eecb9977d249a8a06ab2b0a34f5344a039af