[
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/docs",
    "type": "directory",
    "name": "docs",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/docs/architecture.md",
    "type": "file",
    "name": "architecture.md",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".md",
    "size": 1493,
    "mime_type": "text/plain",
    "file_type": "exported SGML document, UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "cc-by-4.0 AND (agpl-3.0 AND gpl-2.0 AND classpath-exception-2.0)",
    "detected_license_expression_spdx": "CC-BY-4.0 AND (AGPL-3.0-only AND GPL-2.0-only AND Classpath-exception-2.0)",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 2,
            "rule_url": null,
            "from_file": null,
            "start_line": 2,
            "matched_text": "SPDX-License-Identifier: CC-BY-4.0",
            "match_coverage": 100.0,
            "matched_length": 7,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-cc_by_4_0-b2477a81c4cd9ba15001e84f00e2cded7989d622",
            "license_expression": "cc-by-4.0",
            "license_expression_spdx": "CC-BY-4.0"
          }
        ],
        "identifier": "cc_by_4_0-2c16b630-27cf-bcd4-7677-35820edb9a43",
        "license_expression": "cc-by-4.0",
        "license_expression_spdx": "CC-BY-4.0"
      },
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 37,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/agpl-3.0_5.RULE",
            "from_file": null,
            "start_line": 37,
            "matched_text": "- AGPL-3.0 (ghostscript) \u2014 network-use clause",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "agpl-3.0_5.RULE",
            "license_expression": "agpl-3.0",
            "license_expression_spdx": "AGPL-3.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 38,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_52.RULE",
            "from_file": null,
            "start_line": 38,
            "matched_text": "- GPL-2.0 (mysql-connector) \u2014 verify Classpath exception applies",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "gpl-2.0_52.RULE",
            "license_expression": "gpl-2.0",
            "license_expression_spdx": "GPL-2.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 38,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/classpath-exception-2.0_5.RULE",
            "from_file": null,
            "start_line": 38,
            "matched_text": "- GPL-2.0 (mysql-connector) \u2014 verify Classpath exception applies",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "classpath-exception-2.0_5.RULE",
            "license_expression": "classpath-exception-2.0",
            "license_expression_spdx": "Classpath-exception-2.0"
          }
        ],
        "identifier": "agpl_3_0_and_gpl_2_0_and_classpath_exception_2_0-643099b4-fd71-67f6-6087-1c5cea7eaa4f",
        "license_expression": "agpl-3.0 AND gpl-2.0 AND classpath-exception-2.0",
        "license_expression_spdx": "AGPL-3.0-only AND GPL-2.0-only AND Classpath-exception-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 14.56,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "bc5bb2e11b17b384fd294bd071cbd704",
    "sha1": "704980515980f428882f1c3624f1808d9355c65b",
    "sha256": "8b38cb882fb8c5e801e3eaf24720e4cc4c3393852e297c60146089b8b69280d5",
    "sha512": "",
    "sha1_git": "4f3dc16cd816e95a079ed91743fa9444de5aaa7e",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/docs/CHANGELOG.md",
    "type": "file",
    "name": "CHANGELOG.md",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".md",
    "size": 410,
    "mime_type": "text/plain",
    "file_type": "exported SGML document, UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "cc-by-4.0",
    "detected_license_expression_spdx": "CC-BY-4.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 2,
            "rule_url": null,
            "from_file": null,
            "start_line": 2,
            "matched_text": "SPDX-License-Identifier: CC-BY-4.0",
            "match_coverage": 100.0,
            "matched_length": 7,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-cc_by_4_0-b2477a81c4cd9ba15001e84f00e2cded7989d622",
            "license_expression": "cc-by-4.0",
            "license_expression_spdx": "CC-BY-4.0"
          }
        ],
        "identifier": "cc_by_4_0-2c16b630-27cf-bcd4-7677-35820edb9a43",
        "license_expression": "cc-by-4.0",
        "license_expression_spdx": "CC-BY-4.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 11.48,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "4e2bd3943fb6b91b7f6d7c523a6d94fe",
    "sha1": "a692cce3c321fd731e12d61eb551045d9a3f7516",
    "sha256": "9ab852c303b2e0264e24fb450158a79682064d7ddbe54715370e740fc80cca05",
    "sha512": "",
    "sha1_git": "9a864f10884211ac6622af7d9e0820b1b735e47e",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/lib",
    "type": "directory",
    "name": "lib",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/lib/crypto.js",
    "type": "file",
    "name": "crypto.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 539,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 4,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_apache-2.0_for_apache-2.0.RULE",
            "from_file": null,
            "start_line": 4,
            "matched_text": "// Token-generation helpers \u2014 extracted from an Apache-2.0 utility module.",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "spdx_license_id_apache-2.0_for_apache-2.0.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-f0a9b770-a22a-c0f9-7e4d-81f2f8f90760",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 11.54,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright 2015-2022 The Apache Software Foundation",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "c93af403bc8786e7c374ce2493c3398f",
    "sha1": "64f215bb3d07057a8146a4521376c881d7e06889",
    "sha256": "5344f72926ba736cd82b39f35d88a3cfaa027afcf17f494ade0b0ef6f77f5fa1",
    "sha512": "",
    "sha1_git": "d6b40e0c0136571cc442031af6e6a16e12efa9d1",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/lib/legacy.js",
    "type": "file",
    "name": "legacy.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 749,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-f590f40b-411c-1850-b68c-588af90e1dea",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright 2015-2022 The Apache Software Foundation",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "5ff6538b23e7f574d2d55b73b7039d89",
    "sha1": "b7c67dc56ddf7e846d87954f725d46262cfc9a63",
    "sha256": "1b058bf1ffdd3faada9dedab45ff7951e43b071a676997c3329498a37ae3b8a1",
    "sha512": "",
    "sha1_git": "7a8b5a54babc0ac4ef37dcf8d77c544b4a502568",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/LICENSE",
    "type": "file",
    "name": "LICENSE",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 1072,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 1,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_14.RULE",
            "from_file": null,
            "start_line": 1,
            "matched_text": "MIT License",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "mit_14.RULE",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 21,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/licenses/mit.LICENSE",
            "from_file": null,
            "start_line": 5,
            "matched_text": "Permission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.",
            "match_coverage": 100.0,
            "matched_length": 161,
            "rule_relevance": 100,
            "rule_identifier": "mit.LICENSE",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-ac40beba-5702-f54d-755f-333441314bb0",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 96.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "5d8b7d700a2513e4514c0a205fb59b14",
    "sha1": "1fb9a5aff6ff392df79aa6d7d69046ac20aaea76",
    "sha256": "b65bc0eab04530def74e23c2928845f60e6ed58f0405832af2d6e73a21cf7133",
    "sha512": "",
    "sha1_git": "395460f1b7dde1a25343ec58905ab835d4396b5f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".json",
    "size": 449,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "acme-demo-app",
        "purl": "pkg:npm/acme-demo-app@1.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": true,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Demo application used for CuratorPro customer presentations.",
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [
          {
            "purl": "pkg:npm/express",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "4.18.2"
          },
          {
            "purl": "pkg:npm/jquery",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "3.3.1"
          },
          {
            "purl": "pkg:npm/lodash",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "4.17.20"
          },
          {
            "purl": "pkg:npm/react",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "18.2.0"
          },
          {
            "purl": "pkg:npm/react-dom",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "18.2.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/acme-demo-app/-/acme-demo-app-1.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "513cbe654f36299b3d086d3637d9f2c6",
    "sha1": "f937d074eb8628e61b1269486c6c803dfc92699e",
    "sha256": "d513a5f3742366302c53aedb7c5d3a18d6a42599683430c725b2314cbafbde1d",
    "sha512": "",
    "sha1_git": "4ce24b36ab5cf7b1d7fb9938cfcdf78282b6e6a9",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 850,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "acme-demo-app",
        "purl": "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?type=war",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": "com.acme.demo",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {
          "type": "war"
        },
        "description": null,
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.14.1"
          },
          {
            "purl": "pkg:maven/com.mysql/mysql-connector-j@8.0.28",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.0.28"
          },
          {
            "purl": "pkg:maven/org.mozilla/rhino@1.7.14",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.7.14"
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.war",
        "repository_homepage_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5498fbff00bc4e48fab14f311534bc82",
    "sha1": "b0e737c3ad26a9a0b2d51077e96d214dcd96b906",
    "sha256": "2a9d8c11d81d6972376cc45fae8d573e2906289c522e29f805c0e7edada77f24",
    "sha512": "",
    "sha1_git": "b463df3d66c7d2513b5bc969db5d9c68f080f20b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/README.md",
    "type": "file",
    "name": "README.md",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".md",
    "size": 1074,
    "mime_type": "text/plain",
    "file_type": "exported SGML document, UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "cc-by-4.0",
    "detected_license_expression_spdx": "CC-BY-4.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 2,
            "rule_url": null,
            "from_file": null,
            "start_line": 2,
            "matched_text": "SPDX-License-Identifier: CC-BY-4.0",
            "match_coverage": 100.0,
            "matched_length": 7,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-cc_by_4_0-b2477a81c4cd9ba15001e84f00e2cded7989d622",
            "license_expression": "cc-by-4.0",
            "license_expression_spdx": "CC-BY-4.0"
          }
        ],
        "identifier": "cc_by_4_0-2c16b630-27cf-bcd4-7677-35820edb9a43",
        "license_expression": "cc-by-4.0",
        "license_expression_spdx": "CC-BY-4.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 4.64,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "9edae601d8f04276734546522cd4093b",
    "sha1": "b1318a53dfc7dd02dddf9f456a36d2101aa738ef",
    "sha256": "eae44cce0b7b8870f31256041ec881247c0722310891b552963e31da20b1fd64",
    "sha512": "",
    "sha1_git": "1d505db502a946d5bdc25fc4e5577555e66cdcdb",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server",
    "type": "directory",
    "name": "server",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/config",
    "type": "directory",
    "name": "config",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/config/database.js",
    "type": "file",
    "name": "database.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 366,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 8.0,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "9d262ca7c782e995cfdd0f5999038e12",
    "sha1": "9e0e9258f13184f547fdacbbd6bccaffd23f5df6",
    "sha256": "9b47c8c5a4dc911c99beedb4d12ea63788b9215d1eea475cc6d1f8481fbf70ce",
    "sha512": "",
    "sha1_git": "8b73fb070d5c59965e6f58ab70dec9a4846743bb",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/index.js",
    "type": "file",
    "name": "index.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 422,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 7.55,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "7e2d02c876a2506e8a97b9441cef4462",
    "sha1": "e5a76cff1f68c98b00acd976ff3148816adf11f8",
    "sha256": "9c81fa57df39843a32571f57524ce58d86c072f500bb35b49a21f277be05918d",
    "sha512": "",
    "sha1_git": "6b54d7f7de86d97310a6811abaf7696bdf66f909",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/middleware",
    "type": "directory",
    "name": "middleware",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/middleware/cors.js",
    "type": "file",
    "name": "cors.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 510,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.67,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "b14ee08bf12154321b0f815ffdc962a2",
    "sha1": "21982d07fa948c84b9b0bce0c5e31038093ac40c",
    "sha256": "9ad4618891d1862632b1363943814f32269a8d3c4c72657c02db8077731c7833",
    "sha512": "",
    "sha1_git": "f117238b435868ae2dca2d4980936dd62bce3c86",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/routes",
    "type": "directory",
    "name": "routes",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/server/routes/api.js",
    "type": "file",
    "name": "api.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 1647,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 1.94,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "41a61633bf11b4ca36af1562c3183cec",
    "sha1": "58f8380ae273d1eaddff8e7c06f29ceb351f8baf",
    "sha256": "097caa63d10ab00fb5e989c2ace7b48728958f1bfd8b7f832d935732bab98f1f",
    "sha512": "",
    "sha1_git": "b5b0af8bc2919655c2f54b5a722bca7e67cf46a7",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src",
    "type": "directory",
    "name": "src",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/App.tsx",
    "type": "file",
    "name": "App.tsx",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".tsx",
    "size": 569,
    "mime_type": "text/x-java",
    "file_type": "Java source, ASCII text",
    "programming_language": "TypeScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 7.02,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "573b9d7e30edf29d91b5b632118dd0b2",
    "sha1": "21faede9d1fd97bca524d0bd2c32edac37383a58",
    "sha256": "f69165488c6412acd616e4233ebe54282a2e6dc88e9f103fd5102a0edf5b2c81",
    "sha512": "",
    "sha1_git": "654b84e69c8f02685211c0733e53c5d0a0be1298",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/components",
    "type": "directory",
    "name": "components",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/components/Comment.tsx",
    "type": "file",
    "name": "Comment.tsx",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".tsx",
    "size": 865,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "TypeScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 4.4,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "8705d24ac4f5ac820b6f161ed521d534",
    "sha1": "12174aea20d02b25d1eb18968596ee781b1e5498",
    "sha256": "02b486c1969f067c54587b037bd95d567f689c2fbc5a40473768f1a14dac5fc7",
    "sha512": "",
    "sha1_git": "d52ac2b09cb7f7a54532d2e9851fd161d51eaafb",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/index.tsx",
    "type": "file",
    "name": "index.tsx",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".tsx",
    "size": 298,
    "mime_type": "text/x-java",
    "file_type": "Java source, ASCII text",
    "programming_language": "TypeScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 11.43,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "2bdb8ec940a1013c6fa26b41d17d8cba",
    "sha1": "50bde736d4342ae67d762eb460c76d52bef58fcc",
    "sha256": "2e7061142365ed0f81b50eef40c6c83b3b7d37e914ef86816a6d60929febadd3",
    "sha512": "",
    "sha1_git": "051651fc3939a62ab0849c9f3dd49f693176e391",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/utils",
    "type": "directory",
    "name": "utils",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/utils/auth.js",
    "type": "file",
    "name": "auth.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 796,
    "mime_type": "text/x-java",
    "file_type": "Java source, UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 3.96,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "331c1056e94af921ef28585c9f525f86",
    "sha1": "66754c694261b3a1cd773763c51f0d1e9271f553",
    "sha256": "2b963490d7e57934d9b60255e2312eda16fd62503087127a29edd75d9139c517",
    "sha512": "",
    "sha1_git": "ef4c99baf907834279c899fbc84e0c65b554e186",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/src/utils/format.ts",
    "type": "file",
    "name": "format.ts",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".ts",
    "size": 433,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "TypeScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: MIT",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-70c99094-5482-8374-7f01-91df318346a5",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.9,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright (c) 2024-2026 Acme Corp.",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "acc4f38362a296cc0e3f4becb389d1bc",
    "sha1": "1df116605f33623d3aa22a4ba032b0f717f9d17c",
    "sha256": "9ba3368b6930d01d0230ce4b5f9d68f71264919aef5d41ed4ad77603757434a2",
    "sha512": "",
    "sha1_git": "3db3e4b970ec27b204f9c544bcdfc95e96e57d0f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor",
    "type": "directory",
    "name": "vendor",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/acme-internal",
    "type": "directory",
    "name": "acme-internal",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/acme-internal/AcmeAudit.jar",
    "type": "file",
    "name": "AcmeAudit.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 342,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "proprietary-license",
    "detected_license_expression_spdx": "LicenseRef-scancode-proprietary-license",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/proprietary_8.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: PROPRIETARY (no SPDX header in source)",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "proprietary_8.RULE",
            "license_expression": "proprietary-license",
            "license_expression_spdx": "LicenseRef-scancode-proprietary-license"
          }
        ],
        "identifier": "proprietary_license-c7bb9545-7b66-e7ab-5be4-34e26dc02178",
        "license_expression": "proprietary-license",
        "license_expression_spdx": "LicenseRef-scancode-proprietary-license"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 3.7,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "4d930f036d1599b61c0c13acd3a79592",
    "sha1": "756a6eafa5e0861a53f75e0ad42dae5a42095d61",
    "sha256": "c1506d6bc7928aec1b34069b87c357874dd30c7d1533390876398f35a3b0ff55",
    "sha512": "",
    "sha1_git": "c446abecc861226f7d54d3e285556130c99af494",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/ghostscript-9.55",
    "type": "directory",
    "name": "ghostscript-9.55",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".55",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/ghostscript-9.55/gs",
    "type": "file",
    "name": "gs",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 391,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "agpl-3.0 AND (agpl-3.0 OR commercial-license)",
    "detected_license_expression_spdx": "AGPL-3.0-only AND (AGPL-3.0-only OR LicenseRef-scancode-commercial-license)",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/agpl-3.0_176.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: AGPL-3.0-only",
            "match_coverage": 100.0,
            "matched_length": 5,
            "rule_relevance": 100,
            "rule_identifier": "agpl-3.0_176.RULE",
            "license_expression": "agpl-3.0",
            "license_expression_spdx": "AGPL-3.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/agpl-3.0_5.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": "This is a demo placeholder for the ghostscript binary. AGPL-3.0 \u2014 note",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "agpl-3.0_5.RULE",
            "license_expression": "agpl-3.0",
            "license_expression_spdx": "AGPL-3.0-only"
          },
          {
            "score": 11.76,
            "matcher": "3-seq",
            "end_line": 9,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/agpl-3.0_or_commercial-license_5.RULE",
            "from_file": null,
            "start_line": 8,
            "matched_text": "source-disclosure obligations. Artifex offers a commercial license for\ncustomers who cannot meet the AGPL terms.",
            "match_coverage": 11.76,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "agpl-3.0_or_commercial-license_5.RULE",
            "license_expression": "agpl-3.0 OR commercial-license",
            "license_expression_spdx": "AGPL-3.0-only OR LicenseRef-scancode-commercial-license"
          }
        ],
        "identifier": "agpl_3_0_and__agpl_3_0_or_commercial_license-f9b2ca99-6bb3-2d00-2542-4642c2d98294",
        "license_expression": "agpl-3.0 AND (agpl-3.0 OR commercial-license)",
        "license_expression_spdx": "AGPL-3.0-only AND (AGPL-3.0-only OR LicenseRef-scancode-commercial-license)"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 20.69,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 1989-2024 Artifex Software, Inc. Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Artifex Software, Inc. Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "6ee5c02910f997574697512852d99114",
    "sha1": "cccba8105aa226fd4eab8fa7df6c1ae4f910b49f",
    "sha256": "cd2ea0d313eb49ec25d712ead61b22002a671e27019d77724f041c5c935acd23",
    "sha512": "",
    "sha1_git": "c7004142c71cd0864dd48da679444538eea25845",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/jquery-3.3.1.js",
    "type": "file",
    "name": "jquery-3.3.1.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 335,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 7,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_496.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": " * Released under the MIT license\n * https://jquery.org/license",
            "match_coverage": 100.0,
            "matched_length": 9,
            "rule_relevance": 100,
            "rule_identifier": "mit_496.RULE",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a092b422-296f-31af-ebd9-63d5fca9aa58",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 23.08,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 5,
        "copyright": "Copyright JS Foundation and other contributors",
        "start_line": 5
      }
    ],
    "holders": [
      {
        "holder": "JS Foundation and other contributors",
        "end_line": 5,
        "start_line": 5
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [
      {
        "url": "https://jquery.com/",
        "end_line": 3,
        "start_line": 3
      },
      {
        "url": "https://jquery.org/license",
        "end_line": 7,
        "start_line": 7
      }
    ],
    "md5": "f79a8d205b049e3908da8c0403d289bf",
    "sha1": "872032c94e2ad7925be8653be75df09dd8e8edce",
    "sha256": "aec7efd8a70fe5cdc8e7807076a28c72e6a1ec6a7cb92f4bad7171aa276ea377",
    "sha512": "",
    "sha1_git": "1651576122fa5f04a922f06aaf21c98d4ee5dcb3",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/lodash-4.17.20.js",
    "type": "file",
    "name": "lodash-4.17.20.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 396,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "mit",
    "detected_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 5,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_115.RULE",
            "from_file": null,
            "start_line": 5,
            "matched_text": " * Released under MIT license <https://lodash.com/license>",
            "match_coverage": 100.0,
            "matched_length": 8,
            "rule_relevance": 100,
            "rule_identifier": "mit_115.RULE",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-f04e7ab2-017a-609b-fbef-5a406c41e2cf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 17.39,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright OpenJS Foundation and other contributors https://openjsf.org",
        "start_line": 4
      }
    ],
    "holders": [
      {
        "holder": "OpenJS Foundation and other contributors",
        "end_line": 4,
        "start_line": 4
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [
      {
        "url": "https://lodash.com/",
        "end_line": 3,
        "start_line": 3
      },
      {
        "url": "https://openjsf.org/",
        "end_line": 4,
        "start_line": 4
      },
      {
        "url": "https://lodash.com/license",
        "end_line": 5,
        "start_line": 5
      }
    ],
    "md5": "f238d860e29070a6818c645371829a00",
    "sha1": "4b4cafb60cd4107c84d8af08c496ea30749ce04a",
    "sha256": "7b23b6d2d8344c89b645722b31831869257ca6d20b101b69b5bd96cfd794051a",
    "sha512": "",
    "sha1_git": "e0412dddef807064312bd188a98d51900d99e93a",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/log4j-core-2.14.1.jar",
    "type": "file",
    "name": "log4j-core-2.14.1.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 366,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_65.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_65.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-ec759ae0-ea5a-f138-793e-388520e080c0",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright 1999-2021 The Apache Software Foundation Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "cf0a6f95c28747ded3d59a1821ee3e3f",
    "sha1": "563c943a52462334bfecc55d9605fec3c48c67b3",
    "sha256": "510d249c49bc7fe00871f948725091033411bdbc9f96f132acd0dacddad2eee8",
    "sha512": "",
    "sha1_git": "d64eb740d2157eda4c8ca79d5dee63581453df45",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/mysql-connector-java-8.0.28.jar",
    "type": "file",
    "name": "mysql-connector-java-8.0.28.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 368,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "gpl-2.0 AND classpath-exception-2.0",
    "detected_license_expression_spdx": "GPL-2.0-only AND Classpath-exception-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_1352.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: GPL-2.0-only WITH Classpath-exception-2.0",
            "match_coverage": 100.0,
            "matched_length": 5,
            "rule_relevance": 100,
            "rule_identifier": "gpl-2.0_1352.RULE",
            "license_expression": "gpl-2.0",
            "license_expression_spdx": "GPL-2.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/classpath-exception-2.0.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: GPL-2.0-only WITH Classpath-exception-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "classpath-exception-2.0.RULE",
            "license_expression": "classpath-exception-2.0",
            "license_expression_spdx": "Classpath-exception-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_840.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": "This is a demo placeholder for a JAR. Distribution under GPL-2.0 with the",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "gpl-2.0_840.RULE",
            "license_expression": "gpl-2.0",
            "license_expression_spdx": "GPL-2.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 7,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/classpath-exception-2.0_5.RULE",
            "from_file": null,
            "start_line": 7,
            "matched_text": "FOSS / Classpath Exception \u2014 verify the exception applies to your linkage",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "classpath-exception-2.0_5.RULE",
            "license_expression": "classpath-exception-2.0",
            "license_expression_spdx": "Classpath-exception-2.0"
          }
        ],
        "identifier": "gpl_2_0_and_classpath_exception_2_0-fc009c05-7e2b-8360-1f46-02c8e3215ba3",
        "license_expression": "gpl-2.0 AND classpath-exception-2.0",
        "license_expression_spdx": "GPL-2.0-only AND Classpath-exception-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 22.58,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 2005, 2024, Oracle and/or its affiliates. Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Oracle and/or its affiliates. Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "9875d15a12546f4d2dcfa25e164d2488",
    "sha1": "a89664172bb9c0784dc2b805c2213267c92b0e73",
    "sha256": "3c6cbdd251bfdf4d823474a3789421bdf205438d598da2f830ca586370de86b5",
    "sha512": "",
    "sha1_git": "a672d0a39cd4f9f32305b89b1dc28ebf41a0a8e6",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/openssl",
    "type": "directory",
    "name": "openssl",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": "",
    "size": 4096,
    "mime_type": "",
    "file_type": "",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "sha1_git": "",
    "is_binary": false,
    "is_text": false,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/openssl/libssl.so",
    "type": "file",
    "name": "libssl.so",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".so",
    "size": 378,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "openssl-ssleay",
    "detected_license_expression_spdx": "OpenSSL",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 3,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/openssl-ssleay_30.RULE",
            "from_file": null,
            "start_line": 3,
            "matched_text": "License: OpenSSL",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "openssl-ssleay_30.RULE",
            "license_expression": "openssl-ssleay",
            "license_expression_spdx": "OpenSSL"
          }
        ],
        "identifier": "openssl_ssleay-78306e17-9b5a-dff4-4d30-ea3528ef5648",
        "license_expression": "openssl-ssleay",
        "license_expression_spdx": "OpenSSL"
      },
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 8,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/lead-in_unknown_30.RULE",
            "from_file": null,
            "start_line": 8,
            "matched_text": "shipped. Dual-licensed under the OpenSSL License and the original SSLeay",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "lead-in_unknown_30.RULE",
            "license_expression": "unknown-license-reference",
            "license_expression_spdx": "LicenseRef-scancode-unknown-license-reference"
          },
          {
            "score": 80.0,
            "matcher": "3-seq",
            "end_line": 9,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/openssl-ssleay_39.RULE",
            "from_file": null,
            "start_line": 8,
            "matched_text": "shipped. Dual-licensed under the OpenSSL License and the original SSLeay\nLicense \u2014 both must be reproduced in any redistribution.",
            "match_coverage": 80.0,
            "matched_length": 8,
            "rule_relevance": 100,
            "rule_identifier": "openssl-ssleay_39.RULE",
            "license_expression": "openssl-ssleay",
            "license_expression_spdx": "OpenSSL"
          }
        ],
        "identifier": "openssl_ssleay-136bd2ac-df70-8cbb-c963-a918caedd166",
        "license_expression": "openssl-ssleay",
        "license_expression_spdx": "OpenSSL"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 22.03,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 1998-2024 The OpenSSL Project",
        "start_line": 4
      },
      {
        "end_line": 5,
        "copyright": "Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson",
        "start_line": 5
      }
    ],
    "holders": [
      {
        "holder": "The OpenSSL Project",
        "end_line": 4,
        "start_line": 4
      },
      {
        "holder": "Eric A. Young, Tim J. Hudson",
        "end_line": 5,
        "start_line": 5
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "119358cc45066f0e6e8536719816f285",
    "sha1": "0eb959571ebdbf9860d84c54714bbe0f54b8c73e",
    "sha256": "0483bafb8ef04f05ccfd81e369e7dc48e1414dd532f8aa5364272818501d0efd",
    "sha512": "",
    "sha1_git": "6ef4d97c02a90e89143a02947e4a5a9b510ba184",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/rhino-1.7.14.jar",
    "type": "file",
    "name": "rhino-1.7.14.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 337,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "mpl-2.0",
    "detected_license_expression_spdx": "MPL-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mpl-2.0_75.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: MPL-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "mpl-2.0_75.RULE",
            "license_expression": "mpl-2.0",
            "license_expression_spdx": "MPL-2.0"
          },
          {
            "score": 50.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_mpl-2.0_for_mpl-2.0.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": "This is a demo placeholder for a JAR. MPL-2.0 file-level copyleft \u2014",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 50,
            "rule_identifier": "spdx_license_id_mpl-2.0_for_mpl-2.0.RULE",
            "license_expression": "mpl-2.0",
            "license_expression_spdx": "MPL-2.0"
          }
        ],
        "identifier": "mpl_2_0-6c593f7b-f64c-b07e-e177-8d403a76aed0",
        "license_expression": "mpl-2.0",
        "license_expression_spdx": "MPL-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 12.28,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 1997-2023 Mozilla Foundation Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Mozilla Foundation Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "932856e1f9172e11833f6b874165ed53",
    "sha1": "cdf8987f6cae7cb23ab427dfa2a1bb8cb86fdbb2",
    "sha256": "994de28aebcc4fb12e3a83a73facc3f4f543ab7fb081dae5b2775b00a0ebc52a",
    "sha512": "",
    "sha1_git": "f0b8f43b9a5fb1026b0a09d4072e7bb0ffb315f2",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  }
]