[
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/lib/crypto.js",
    "type": "file",
    "name": "crypto.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 539,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 4,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_apache-2.0_for_apache-2.0.RULE",
            "from_file": null,
            "start_line": 4,
            "matched_text": "// Token-generation helpers \u2014 extracted from an Apache-2.0 utility module.",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "spdx_license_id_apache-2.0_for_apache-2.0.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-f0a9b770-a22a-c0f9-7e4d-81f2f8f90760",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 11.54,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright 2015-2022 The Apache Software Foundation",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "c93af403bc8786e7c374ce2493c3398f",
    "sha1": "64f215bb3d07057a8146a4521376c881d7e06889",
    "sha256": "5344f72926ba736cd82b39f35d88a3cfaa027afcf17f494ade0b0ef6f77f5fa1",
    "sha512": "",
    "sha1_git": "d6b40e0c0136571cc442031af6e6a16e12efa9d1",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/lib/legacy.js",
    "type": "file",
    "name": "legacy.js",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".js",
    "size": 749,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "JavaScript",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": null,
            "start_line": 1,
            "matched_text": "// SPDX-License-Identifier: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-f590f40b-411c-1850-b68c-588af90e1dea",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 2,
        "copyright": "Copyright 2015-2022 The Apache Software Foundation",
        "start_line": 2
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation",
        "end_line": 2,
        "start_line": 2
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "5ff6538b23e7f574d2d55b73b7039d89",
    "sha1": "b7c67dc56ddf7e846d87954f725d46262cfc9a63",
    "sha256": "1b058bf1ffdd3faada9dedab45ff7951e43b071a676997c3329498a37ae3b8a1",
    "sha512": "",
    "sha1_git": "7a8b5a54babc0ac4ef37dcf8d77c544b4a502568",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-862af2a4-ea65-4b0f-b730-37bd03d5ed98.zip-extract/sources/vendor/log4j-core-2.14.1.jar",
    "type": "file",
    "name": "log4j-core-2.14.1.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=cff8c5a5-9be4-4f2d-b74e-41151300c7b9"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 366,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_65.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_65.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-ec759ae0-ea5a-f138-793e-388520e080c0",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright 1999-2021 The Apache Software Foundation Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "cf0a6f95c28747ded3d59a1821ee3e3f",
    "sha1": "563c943a52462334bfecc55d9605fec3c48c67b3",
    "sha256": "510d249c49bc7fe00871f948725091033411bdbc9f96f132acd0dacddad2eee8",
    "sha512": "",
    "sha1_git": "d64eb740d2157eda4c8ca79d5dee63581453df45",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  }
]