[
  {
    "purl": "pkg:bower/jquery",
    "type": "bower",
    "namespace": "",
    "name": "jquery",
    "version": "",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "",
    "description": "",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "jquery",
      "javascript",
      "browser",
      "library"
    ],
    "homepage_url": "",
    "download_url": "",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "",
    "repository_homepage_url": "",
    "repository_download_url": "",
    "api_data_url": "",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/bower.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "MIT",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:bower/jquery?uuid=ebd60dac-8a84-4e26-9eac-8605fb117620",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "bower_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/bower.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/accepts@1.3.8",
    "type": "npm",
    "namespace": "",
    "name": "accepts",
    "version": "1.3.8",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Higher-level content negotiation",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "content",
      "negotiation",
      "accept",
      "accepts"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/accepts",
    "repository_homepage_url": "https://www.npmjs.com/package/accepts",
    "repository_download_url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
    "api_data_url": "https://registry.npmjs.org/accepts/1.3.8",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/accepts-1.3.8/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/accepts@1.3.8?uuid=8d327ad2-90c2-4670-b356-8de601f5a86f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/accepts-1.3.8/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/array-flatten@1.1.1",
    "type": "npm",
    "namespace": "",
    "name": "array-flatten",
    "version": "1.1.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Flatten an array of nested arrays into a single flat array",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://blakeembrey.me",
        "name": "Blake Embrey",
        "role": "author",
        "type": "person",
        "email": "hello@blakeembrey.com"
      }
    ],
    "keywords": [
      "array",
      "flatten",
      "arguments",
      "depth"
    ],
    "homepage_url": "https://github.com/blakeembrey/array-flatten",
    "download_url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
    "bug_tracking_url": "https://github.com/blakeembrey/array-flatten/issues",
    "code_view_url": "",
    "vcs_url": "git://github.com/blakeembrey/array-flatten.git",
    "repository_homepage_url": "https://www.npmjs.com/package/array-flatten",
    "repository_download_url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
    "api_data_url": "https://registry.npmjs.org/array-flatten/1.1.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/array-flatten-1.1.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/array-flatten@1.1.1?uuid=21331075-86b7-42ef-a137-88952f0112b9",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/array-flatten-1.1.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/body-parser@1.20.1",
    "type": "npm",
    "namespace": "",
    "name": "body-parser",
    "version": "1.20.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Node.js body parsing middleware",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/expressjs/body-parser",
    "repository_homepage_url": "https://www.npmjs.com/package/body-parser",
    "repository_download_url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
    "api_data_url": "https://registry.npmjs.org/body-parser/1.20.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/body-parser-1.20.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "npm": "1.2.8000 || >= 1.4.16",
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/body-parser@1.20.1?uuid=ce4ec793-4d33-4690-80e7-76312f3861e4",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/body-parser-1.20.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/bytes@3.1.2",
    "type": "npm",
    "namespace": "",
    "name": "bytes",
    "version": "3.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Utility to parse a string bytes to bytes and vice-versa",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://tjholowaychuk.com",
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": null,
        "name": "Jed Watson",
        "role": "contributor",
        "type": "person",
        "email": "jed.watson@me.com"
      },
      {
        "url": null,
        "name": "Th\u00e9o FIDRY",
        "role": "contributor",
        "type": "person",
        "email": "theo.fidry@gmail.com"
      }
    ],
    "keywords": [
      "byte",
      "bytes",
      "utility",
      "parse",
      "parser",
      "convert",
      "converter"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/visionmedia/bytes.js",
    "repository_homepage_url": "https://www.npmjs.com/package/bytes",
    "repository_download_url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/bytes/3.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/bytes-3.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/bytes@3.1.2?uuid=5874f7d6-cc72-4487-80c6-2b6982116cd1",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/bytes-3.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
    "type": "npm",
    "namespace": "",
    "name": "call-bind-apply-helpers",
    "version": "1.0.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
    "download_url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
    "bug_tracking_url": "https://github.com/ljharb/call-bind-apply-helpers/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
    "repository_homepage_url": "https://www.npmjs.com/package/call-bind-apply-helpers",
    "repository_download_url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
    "api_data_url": "https://registry.npmjs.org/call-bind-apply-helpers/1.0.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bind-apply-helpers-1.0.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/call-bind-apply-helpers@1.0.2?uuid=5f949679-1562-4924-a228-2bca16dbbd16",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bind-apply-helpers-1.0.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/call-bound@1.0.4",
    "type": "npm",
    "namespace": "",
    "name": "call-bound",
    "version": "1.0.4",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "javascript",
      "ecmascript",
      "es",
      "js",
      "callbind",
      "callbound",
      "call",
      "bind",
      "bound",
      "call-bind",
      "call-bound",
      "function",
      "es-abstract"
    ],
    "homepage_url": "https://github.com/ljharb/call-bound#readme",
    "download_url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
    "bug_tracking_url": "https://github.com/ljharb/call-bound/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/call-bound.git",
    "repository_homepage_url": "https://www.npmjs.com/package/call-bound",
    "repository_download_url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
    "api_data_url": "https://registry.npmjs.org/call-bound/1.0.4",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bound-1.0.4/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/call-bound@1.0.4?uuid=21a1dac6-04b8-42d5-b578-f82a28c28f74",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bound-1.0.4/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/content-disposition@0.5.4",
    "type": "npm",
    "namespace": "",
    "name": "content-disposition",
    "version": "0.5.4",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Create and parse Content-Disposition header",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "content-disposition",
      "http",
      "rfc6266",
      "res"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/content-disposition",
    "repository_homepage_url": "https://www.npmjs.com/package/content-disposition",
    "repository_download_url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
    "api_data_url": "https://registry.npmjs.org/content-disposition/0.5.4",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-disposition-0.5.4/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/content-disposition@0.5.4?uuid=d69e2115-13a1-4528-8fa3-8eabb3d40131",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-disposition-0.5.4/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/content-type@1.0.5",
    "type": "npm",
    "namespace": "",
    "name": "content-type",
    "version": "1.0.5",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Create and parse HTTP Content-Type header",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "content-type",
      "http",
      "req",
      "res",
      "rfc7231"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/content-type",
    "repository_homepage_url": "https://www.npmjs.com/package/content-type",
    "repository_download_url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
    "api_data_url": "https://registry.npmjs.org/content-type/1.0.5",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-type-1.0.5/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/content-type@1.0.5?uuid=c8b8b04e-54b3-4ccc-b442-a188dd0c6b97",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-type-1.0.5/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/cookie@0.5.0",
    "type": "npm",
    "namespace": "",
    "name": "cookie",
    "version": "0.5.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "HTTP server cookie parsing and serialization",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Roman Shtylman",
        "role": "author",
        "type": "person",
        "email": "shtylman@gmail.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "cookie",
      "cookies"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/cookie",
    "repository_homepage_url": "https://www.npmjs.com/package/cookie",
    "repository_download_url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
    "api_data_url": "https://registry.npmjs.org/cookie/0.5.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-0.5.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/cookie@0.5.0?uuid=e8230e47-4c3a-4597-8324-359f8d3e51a2",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-0.5.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/cookie-signature@1.0.6",
    "type": "npm",
    "namespace": "",
    "name": "cookie-signature",
    "version": "1.0.6",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Sign and unsign cookies",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@learnboost.com"
      }
    ],
    "keywords": [
      "cookie",
      "sign",
      "unsign"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/visionmedia/node-cookie-signature.git",
    "repository_homepage_url": "https://www.npmjs.com/package/cookie-signature",
    "repository_download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
    "api_data_url": "https://registry.npmjs.org/cookie-signature/1.0.6",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-signature-1.0.6/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/cookie-signature@1.0.6?uuid=486a5ff7-d234-4b25-a644-ff955781ba8c",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-signature-1.0.6/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/debug@2.6.9",
    "type": "npm",
    "namespace": "",
    "name": "debug",
    "version": "2.6.9",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "small debugging utility",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": "http://n8.io",
        "name": "Nathan Rajlich",
        "role": "contributor",
        "type": "person",
        "email": "nathan@tootallnate.net"
      },
      {
        "url": null,
        "name": "Andrew Rhyne",
        "role": "contributor",
        "type": "person",
        "email": "rhyneandrew@gmail.com"
      }
    ],
    "keywords": [
      "debug",
      "log",
      "debugger"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git://github.com/visionmedia/debug.git",
    "repository_homepage_url": "https://www.npmjs.com/package/debug",
    "repository_download_url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
    "api_data_url": "https://registry.npmjs.org/debug/2.6.9",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/debug-2.6.9/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/debug@2.6.9?uuid=5c8eb19a-fdd0-416e-9171-ceb0a3478fa3",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/debug-2.6.9/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/depd@2.0.0",
    "type": "npm",
    "namespace": "",
    "name": "depd",
    "version": "2.0.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Deprecate all the things",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "deprecate",
      "deprecated"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/dougwilson/nodejs-depd",
    "repository_homepage_url": "https://www.npmjs.com/package/depd",
    "repository_download_url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
    "api_data_url": "https://registry.npmjs.org/depd/2.0.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/depd-2.0.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/depd@2.0.0?uuid=0c6a81b6-9171-40c9-8920-462f34c1e6d2",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/depd-2.0.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/destroy@1.2.0",
    "type": "npm",
    "namespace": "",
    "name": "destroy",
    "version": "1.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "destroy a stream if possible",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "author",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "stream",
      "streams",
      "destroy",
      "cleanup",
      "leak",
      "fd"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/stream-utils/destroy",
    "repository_homepage_url": "https://www.npmjs.com/package/destroy",
    "repository_download_url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/destroy/1.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/destroy-1.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "npm": "1.2.8000 || >= 1.4.16",
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/destroy@1.2.0?uuid=90ecfe88-6701-4599-bf70-b14a3816dd22",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/destroy-1.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/dunder-proto@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "dunder-proto",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "https://github.com/es-shims/dunder-proto#readme",
    "download_url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
    "bug_tracking_url": "https://github.com/es-shims/dunder-proto/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/es-shims/dunder-proto.git",
    "repository_homepage_url": "https://www.npmjs.com/package/dunder-proto",
    "repository_download_url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/dunder-proto/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/dunder-proto-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/dunder-proto@1.0.1?uuid=3deafa3a-f66b-4055-b564-17030516831d",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/dunder-proto-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/ee-first@1.1.1",
    "type": "npm",
    "namespace": "",
    "name": "ee-first",
    "version": "1.1.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "return the first event in a set of ee/event pairs",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "author",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jonathanong/ee-first",
    "repository_homepage_url": "https://www.npmjs.com/package/ee-first",
    "repository_download_url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
    "api_data_url": "https://registry.npmjs.org/ee-first/1.1.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ee-first-1.1.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/ee-first@1.1.1?uuid=b662be8d-0eaa-4f6d-ad95-3f23d9c80d6b",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ee-first-1.1.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/encodeurl@1.0.2",
    "type": "npm",
    "namespace": "",
    "name": "encodeurl",
    "version": "1.0.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "encode",
      "encodeurl",
      "url"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/pillarjs/encodeurl",
    "repository_homepage_url": "https://www.npmjs.com/package/encodeurl",
    "repository_download_url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
    "api_data_url": "https://registry.npmjs.org/encodeurl/1.0.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/encodeurl-1.0.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/encodeurl@1.0.2?uuid=703bf23a-d9de-4251-a5e6-a5618bb406d0",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/encodeurl-1.0.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/escape-html@1.0.3",
    "type": "npm",
    "namespace": "",
    "name": "escape-html",
    "version": "1.0.3",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Escape string for use in HTML",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "escape",
      "html",
      "utility"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/component/escape-html",
    "repository_homepage_url": "https://www.npmjs.com/package/escape-html",
    "repository_download_url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
    "api_data_url": "https://registry.npmjs.org/escape-html/1.0.3",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/escape-html-1.0.3/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/escape-html@1.0.3?uuid=d78534c8-2108-4461-ad78-55d4fc3e4a5f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/escape-html-1.0.3/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/es-define-property@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "es-define-property",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "`Object.defineProperty`, but not IE 8's broken one.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "javascript",
      "ecmascript",
      "object",
      "define",
      "property",
      "defineProperty",
      "Object.defineProperty"
    ],
    "homepage_url": "https://github.com/ljharb/es-define-property#readme",
    "download_url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
    "bug_tracking_url": "https://github.com/ljharb/es-define-property/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/es-define-property.git",
    "repository_homepage_url": "https://www.npmjs.com/package/es-define-property",
    "repository_download_url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/es-define-property/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-define-property-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/es-define-property@1.0.1?uuid=3ceea22e-acef-4a67-baec-f4d1781a0c2f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-define-property-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/es-errors@1.3.0",
    "type": "npm",
    "namespace": "",
    "name": "es-errors",
    "version": "1.3.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "A simple cache for a few of the JS Error constructors.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "javascript",
      "ecmascript",
      "error",
      "typeerror",
      "syntaxerror",
      "rangeerror"
    ],
    "homepage_url": "https://github.com/ljharb/es-errors#readme",
    "download_url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
    "bug_tracking_url": "https://github.com/ljharb/es-errors/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/es-errors.git",
    "repository_homepage_url": "https://www.npmjs.com/package/es-errors",
    "repository_download_url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
    "api_data_url": "https://registry.npmjs.org/es-errors/1.3.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-errors-1.3.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/es-errors@1.3.0?uuid=d0efba03-7d94-4b28-80ea-e4d2f5a05d89",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-errors-1.3.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/es-object-atoms@1.1.1",
    "type": "npm",
    "namespace": "",
    "name": "es-object-atoms",
    "version": "1.1.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "javascript",
      "ecmascript",
      "object",
      "toobject",
      "coercible"
    ],
    "homepage_url": "https://github.com/ljharb/es-object-atoms#readme",
    "download_url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
    "bug_tracking_url": "https://github.com/ljharb/es-object-atoms/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/es-object-atoms.git",
    "repository_homepage_url": "https://www.npmjs.com/package/es-object-atoms",
    "repository_download_url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
    "api_data_url": "https://registry.npmjs.org/es-object-atoms/1.1.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-object-atoms-1.1.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/es-object-atoms@1.1.1?uuid=5dc3bffd-790b-4e3e-93e0-235b7c72cc69",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-object-atoms-1.1.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/etag@1.8.1",
    "type": "npm",
    "namespace": "",
    "name": "etag",
    "version": "1.8.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Create simple HTTP ETags",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "David Bj\u00f6rklund",
        "role": "contributor",
        "type": "person",
        "email": "david.bjorklund@gmail.com"
      }
    ],
    "keywords": [
      "etag",
      "http",
      "res"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/etag",
    "repository_homepage_url": "https://www.npmjs.com/package/etag",
    "repository_download_url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
    "api_data_url": "https://registry.npmjs.org/etag/1.8.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/etag-1.8.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/etag@1.8.1?uuid=0cb1f366-fbda-4a5b-80b4-2be8ef3dbb6c",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/etag-1.8.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/express@4.18.2",
    "type": "npm",
    "namespace": "",
    "name": "express",
    "version": "4.18.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Fast, unopinionated, minimalist web framework",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": null,
        "name": "Aaron Heckmann",
        "role": "contributor",
        "type": "person",
        "email": "aaron.heckmann+github@gmail.com"
      },
      {
        "url": null,
        "name": "Ciaran Jessup",
        "role": "contributor",
        "type": "person",
        "email": "ciaranj@gmail.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "Guillermo Rauch",
        "role": "contributor",
        "type": "person",
        "email": "rauchg@gmail.com"
      },
      {
        "url": null,
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Roman Shtylman",
        "role": "contributor",
        "type": "person",
        "email": "shtylman+expressjs@gmail.com"
      },
      {
        "url": null,
        "name": "Young Jae Sim",
        "role": "contributor",
        "type": "person",
        "email": "hanul@hanul.me"
      }
    ],
    "keywords": [
      "express",
      "framework",
      "sinatra",
      "web",
      "http",
      "rest",
      "restful",
      "router",
      "app",
      "api"
    ],
    "homepage_url": "http://expressjs.com/",
    "download_url": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/expressjs/express",
    "repository_homepage_url": "https://www.npmjs.com/package/express",
    "repository_download_url": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
    "api_data_url": "https://registry.npmjs.org/express/4.18.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/express-4.18.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.10.0"
      }
    },
    "package_uid": "pkg:npm/express@4.18.2?uuid=c090357b-c030-4ca4-b76d-a9d7a2706af3",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/express-4.18.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/finalhandler@1.2.0",
    "type": "npm",
    "namespace": "",
    "name": "finalhandler",
    "version": "1.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Node.js final http responder",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/pillarjs/finalhandler",
    "repository_homepage_url": "https://www.npmjs.com/package/finalhandler",
    "repository_download_url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/finalhandler/1.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/finalhandler-1.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/finalhandler@1.2.0?uuid=4642a6d2-007f-463c-883d-b6e927da84eb",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/finalhandler-1.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/forwarded@0.2.0",
    "type": "npm",
    "namespace": "",
    "name": "forwarded",
    "version": "0.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Parse HTTP X-Forwarded-For header",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "x-forwarded-for",
      "http",
      "req"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/forwarded",
    "repository_homepage_url": "https://www.npmjs.com/package/forwarded",
    "repository_download_url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/forwarded/0.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/forwarded-0.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/forwarded@0.2.0?uuid=6412f2d2-7262-416e-aa7c-937fc9fced79",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/forwarded-0.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/fresh@0.5.2",
    "type": "npm",
    "namespace": "",
    "name": "fresh",
    "version": "0.5.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "HTTP response freshness testing",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://tjholowaychuk.com",
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "fresh",
      "http",
      "conditional",
      "cache"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/fresh",
    "repository_homepage_url": "https://www.npmjs.com/package/fresh",
    "repository_download_url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
    "api_data_url": "https://registry.npmjs.org/fresh/0.5.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/fresh-0.5.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/fresh@0.5.2?uuid=209f5e79-f101-492d-b8e7-6a9297210d5a",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/fresh-0.5.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/function-bind@1.1.2",
    "type": "npm",
    "namespace": "",
    "name": "function-bind",
    "version": "1.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Implementation of Function.prototype.bind",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Raynos",
        "role": "author",
        "type": "person",
        "email": "raynos2@gmail.com"
      },
      {
        "url": null,
        "name": "Raynos",
        "role": "contributor",
        "type": "person",
        "email": null
      },
      {
        "url": "https://github.com/ljharb",
        "name": "Jordan Harband",
        "role": "contributor",
        "type": "person",
        "email": null
      }
    ],
    "keywords": [
      "function",
      "bind",
      "shim",
      "es5"
    ],
    "homepage_url": "https://github.com/Raynos/function-bind",
    "download_url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
    "bug_tracking_url": "https://github.com/Raynos/function-bind/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/Raynos/function-bind.git",
    "repository_homepage_url": "https://www.npmjs.com/package/function-bind",
    "repository_download_url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/function-bind/1.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/function-bind-1.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/function-bind@1.1.2?uuid=c32ba07c-2012-42a0-ba67-ac486fa7363d",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/function-bind-1.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/get-intrinsic@1.3.0",
    "type": "npm",
    "namespace": "",
    "name": "get-intrinsic",
    "version": "1.3.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Get and robustly cache all JS language-level intrinsics at first require time",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "javascript",
      "ecmascript",
      "es",
      "js",
      "intrinsic",
      "getintrinsic",
      "es-abstract"
    ],
    "homepage_url": "https://github.com/ljharb/get-intrinsic#readme",
    "download_url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
    "bug_tracking_url": "https://github.com/ljharb/get-intrinsic/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/get-intrinsic.git",
    "repository_homepage_url": "https://www.npmjs.com/package/get-intrinsic",
    "repository_download_url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
    "api_data_url": "https://registry.npmjs.org/get-intrinsic/1.3.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-intrinsic-1.3.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/get-intrinsic@1.3.0?uuid=e94f6b61-3954-4a7b-b6ae-43654e222c37",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-intrinsic-1.3.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/get-proto@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "get-proto",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Robustly get the [[Prototype]] of an object",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "get",
      "proto",
      "prototype",
      "getPrototypeOf",
      "[[Prototype]]"
    ],
    "homepage_url": "https://github.com/ljharb/get-proto#readme",
    "download_url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
    "bug_tracking_url": "https://github.com/ljharb/get-proto/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/get-proto.git",
    "repository_homepage_url": "https://www.npmjs.com/package/get-proto",
    "repository_download_url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/get-proto/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-proto-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/get-proto@1.0.1?uuid=91f32caa-3d43-4b26-b677-3a9f27b664a6",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-proto-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/gopd@1.2.0",
    "type": "npm",
    "namespace": "",
    "name": "gopd",
    "version": "1.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "ecmascript",
      "javascript",
      "getownpropertydescriptor",
      "property",
      "descriptor"
    ],
    "homepage_url": "https://github.com/ljharb/gopd#readme",
    "download_url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
    "bug_tracking_url": "https://github.com/ljharb/gopd/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/gopd.git",
    "repository_homepage_url": "https://www.npmjs.com/package/gopd",
    "repository_download_url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/gopd/1.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/gopd-1.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/gopd@1.2.0?uuid=05cc754b-05ad-42a6-b819-122932545266",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/gopd-1.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/hasown@2.0.3",
    "type": "npm",
    "namespace": "",
    "name": "hasown",
    "version": "2.0.3",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "A robust, ES3 compatible, \"has own property\" predicate.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "has",
      "hasOwnProperty",
      "hasOwn",
      "has-own",
      "own",
      "has",
      "property",
      "in",
      "javascript",
      "ecmascript"
    ],
    "homepage_url": "https://github.com/inspect-js/hasOwn#readme",
    "download_url": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
    "bug_tracking_url": "https://github.com/inspect-js/hasOwn/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/inspect-js/hasOwn.git",
    "repository_homepage_url": "https://www.npmjs.com/package/hasown",
    "repository_download_url": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
    "api_data_url": "https://registry.npmjs.org/hasown/2.0.3",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/hasown-2.0.3/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/hasown@2.0.3?uuid=3b5f3751-f840-4603-86c6-b18cde78cdb4",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/hasown-2.0.3/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/has-symbols@1.1.0",
    "type": "npm",
    "namespace": "",
    "name": "has-symbols",
    "version": "1.1.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://ljharb.codes",
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      },
      {
        "url": "http://ljharb.codes",
        "name": "Jordan Harband",
        "role": "contributor",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "Symbol",
      "symbols",
      "typeof",
      "sham",
      "polyfill",
      "native",
      "core-js",
      "ES6"
    ],
    "homepage_url": "https://github.com/ljharb/has-symbols#readme",
    "download_url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
    "bug_tracking_url": "https://github.com/ljharb/has-symbols/issues",
    "code_view_url": "",
    "vcs_url": "git://github.com/inspect-js/has-symbols.git",
    "repository_homepage_url": "https://www.npmjs.com/package/has-symbols",
    "repository_download_url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
    "api_data_url": "https://registry.npmjs.org/has-symbols/1.1.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/has-symbols-1.1.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/has-symbols@1.1.0?uuid=bc1c3aeb-6e19-4f13-8d32-eec59c79c668",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/has-symbols-1.1.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/http-errors@2.0.0",
    "type": "npm",
    "namespace": "",
    "name": "http-errors",
    "version": "2.0.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Create HTTP error objects",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "author",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Alan Plum",
        "role": "contributor",
        "type": "person",
        "email": "me@pluma.io"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "http",
      "error"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/http-errors",
    "repository_homepage_url": "https://www.npmjs.com/package/http-errors",
    "repository_download_url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
    "api_data_url": "https://registry.npmjs.org/http-errors/2.0.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/http-errors-2.0.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/http-errors@2.0.0?uuid=875a8888-185e-4f9d-95a2-89490e31edcf",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/http-errors-2.0.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/iconv-lite@0.4.24",
    "type": "npm",
    "namespace": "",
    "name": "iconv-lite",
    "version": "0.4.24",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Convert character encodings in pure javascript.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Alexander Shtuchkin",
        "role": "author",
        "type": "person",
        "email": "ashtuchkin@gmail.com"
      }
    ],
    "keywords": [
      "iconv",
      "convert",
      "charset",
      "icu"
    ],
    "homepage_url": "https://github.com/ashtuchkin/iconv-lite",
    "download_url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
    "bug_tracking_url": "https://github.com/ashtuchkin/iconv-lite/issues",
    "code_view_url": "",
    "vcs_url": "git://github.com/ashtuchkin/iconv-lite.git",
    "repository_homepage_url": "https://www.npmjs.com/package/iconv-lite",
    "repository_download_url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
    "api_data_url": "https://registry.npmjs.org/iconv-lite/0.4.24",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/iconv-lite-0.4.24/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">=0.10.0"
      }
    },
    "package_uid": "pkg:npm/iconv-lite@0.4.24?uuid=b6c31691-f7f9-4f4b-9878-a8de021f7e63",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/iconv-lite-0.4.24/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/ipaddr.js@1.9.1",
    "type": "npm",
    "namespace": "",
    "name": "ipaddr.js",
    "version": "1.9.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "whitequark",
        "role": "author",
        "type": "person",
        "email": "whitequark@whitequark.org"
      }
    ],
    "keywords": [
      "ip",
      "ipv4",
      "ipv6"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git://github.com/whitequark/ipaddr.js",
    "repository_homepage_url": "https://www.npmjs.com/package/ipaddr.js",
    "repository_download_url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
    "api_data_url": "https://registry.npmjs.org/ipaddr.js/1.9.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ipaddr.js-1.9.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.10"
      }
    },
    "package_uid": "pkg:npm/ipaddr.js@1.9.1?uuid=408f2393-cd52-4156-9603-a70a12f59f32",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ipaddr.js-1.9.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/jquery@3.3.1",
    "type": "npm",
    "namespace": "",
    "name": "jquery",
    "version": "3.3.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "JavaScript library for DOM operations",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "https://github.com/jquery/jquery/blob/3.3.1/AUTHORS.txt",
        "name": "JS Foundation and other contributors",
        "role": "author",
        "type": "person",
        "email": null
      }
    ],
    "keywords": [
      "jquery",
      "javascript",
      "browser",
      "library"
    ],
    "homepage_url": "https://jquery.com",
    "download_url": "https://registry.npmjs.org/jquery/-/jquery-3.3.1.tgz",
    "bug_tracking_url": "https://github.com/jquery/jquery/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/jquery/jquery.git",
    "repository_homepage_url": "https://www.npmjs.com/package/jquery",
    "repository_download_url": "https://registry.npmjs.org/jquery/-/jquery-3.3.1.tgz",
    "api_data_url": "https://registry.npmjs.org/jquery/3.3.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/jquery@3.3.1?uuid=fd1b2544-f649-46b1-9eca-e6f6e0ae5e74",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/js-tokens@4.0.0",
    "type": "npm",
    "namespace": "",
    "name": "js-tokens",
    "version": "4.0.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "A regex that tokenizes JavaScript.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Simon Lydell",
        "role": "author",
        "type": "person",
        "email": null
      }
    ],
    "keywords": [
      "JavaScript",
      "js",
      "token",
      "tokenize",
      "regex"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/lydell/js-tokens",
    "repository_homepage_url": "https://www.npmjs.com/package/js-tokens",
    "repository_download_url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
    "api_data_url": "https://registry.npmjs.org/js-tokens/4.0.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/js-tokens-4.0.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/js-tokens@4.0.0?uuid=8088b3d1-41ff-4328-88ea-732f2777b10b",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/js-tokens-4.0.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/lodash@4.17.20",
    "type": "npm",
    "namespace": "",
    "name": "lodash",
    "version": "4.17.20",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Lodash modular utilities.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "John-David Dalton",
        "role": "author",
        "type": "person",
        "email": "john.david.dalton@gmail.com"
      },
      {
        "url": null,
        "name": "John-David Dalton",
        "role": "contributor",
        "type": "person",
        "email": "john.david.dalton@gmail.com"
      },
      {
        "url": null,
        "name": "Mathias Bynens",
        "role": "contributor",
        "type": "person",
        "email": "mathias@qiwi.be"
      }
    ],
    "keywords": [
      "modules",
      "stdlib",
      "util"
    ],
    "homepage_url": "https://lodash.com/",
    "download_url": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/lodash/lodash",
    "repository_homepage_url": "https://www.npmjs.com/package/lodash",
    "repository_download_url": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
    "api_data_url": "https://registry.npmjs.org/lodash/4.17.20",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/lodash-4.17.20/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/lodash@4.17.20?uuid=96e46a60-5f50-44bf-9d2e-249c9858e63f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/lodash-4.17.20/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/loose-envify@1.4.0",
    "type": "npm",
    "namespace": "",
    "name": "loose-envify",
    "version": "1.4.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Andres Suarez",
        "role": "author",
        "type": "person",
        "email": "zertosh@gmail.com"
      }
    ],
    "keywords": [
      "environment",
      "variables",
      "browserify",
      "browserify-transform",
      "transform",
      "source",
      "configuration"
    ],
    "homepage_url": "https://github.com/zertosh/loose-envify",
    "download_url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git://github.com/zertosh/loose-envify.git",
    "repository_homepage_url": "https://www.npmjs.com/package/loose-envify",
    "repository_download_url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
    "api_data_url": "https://registry.npmjs.org/loose-envify/1.4.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/loose-envify-1.4.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/loose-envify@1.4.0?uuid=8c545991-c51b-49be-a047-fbf0e84d5c7a",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/loose-envify-1.4.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/math-intrinsics@1.1.0",
    "type": "npm",
    "namespace": "",
    "name": "math-intrinsics",
    "version": "1.1.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "ES Math-related intrinsics and helpers, robustly cached.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "https://github.com/es-shims/math-intrinsics#readme",
    "download_url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
    "bug_tracking_url": "https://github.com/es-shims/math-intrinsics/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/es-shims/math-intrinsics.git",
    "repository_homepage_url": "https://www.npmjs.com/package/math-intrinsics",
    "repository_download_url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
    "api_data_url": "https://registry.npmjs.org/math-intrinsics/1.1.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/math-intrinsics-1.1.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/math-intrinsics@1.1.0?uuid=074d8cda-1abd-4f72-9ce7-a2cc284fca65",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/math-intrinsics-1.1.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/media-typer@0.3.0",
    "type": "npm",
    "namespace": "",
    "name": "media-typer",
    "version": "0.3.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Simple RFC 6838 media type parser and formatter",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/media-typer",
    "repository_homepage_url": "https://www.npmjs.com/package/media-typer",
    "repository_download_url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
    "api_data_url": "https://registry.npmjs.org/media-typer/0.3.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/media-typer-0.3.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/media-typer@0.3.0?uuid=bee0fa90-2966-4596-b4f8-54a1d0315513",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/media-typer-0.3.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/merge-descriptors@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "merge-descriptors",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Merge objects using descriptors",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "author",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "Mike Grabowski",
        "role": "contributor",
        "type": "person",
        "email": "grabbou@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/component/merge-descriptors",
    "repository_homepage_url": "https://www.npmjs.com/package/merge-descriptors",
    "repository_download_url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/merge-descriptors/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/merge-descriptors-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/merge-descriptors@1.0.1?uuid=c6c98ed4-6926-4a54-9128-069eb7c7ec08",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/merge-descriptors-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/methods@1.1.2",
    "type": "npm",
    "namespace": "",
    "name": "methods",
    "version": "1.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "HTTP methods that node supports",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": "http://tjholowaychuk.com",
        "name": "TJ Holowaychuk",
        "role": "contributor",
        "type": "person",
        "email": "tj@vision-media.ca"
      }
    ],
    "keywords": [
      "http",
      "methods"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/methods",
    "repository_homepage_url": "https://www.npmjs.com/package/methods",
    "repository_download_url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/methods/1.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/methods-1.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/methods@1.1.2?uuid=ae48eed2-0527-4c7e-a95f-dbf6dfb54703",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/methods-1.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/mime@1.6.0",
    "type": "npm",
    "namespace": "",
    "name": "mime",
    "version": "1.6.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "A comprehensive library for mime-type mapping",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://github.com/broofa",
        "name": "Robert Kieffer",
        "role": "author",
        "type": "person",
        "email": "robert@broofa.com"
      },
      {
        "url": "http://github.com/bentomas",
        "name": "Benjamin Thomas",
        "role": "contributor",
        "type": "person",
        "email": "benjamin@benjaminthomas.org"
      }
    ],
    "keywords": [
      "util",
      "mime"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/broofa/node-mime",
    "repository_homepage_url": "https://www.npmjs.com/package/mime",
    "repository_download_url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
    "api_data_url": "https://registry.npmjs.org/mime/1.6.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-1.6.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">=4"
      }
    },
    "package_uid": "pkg:npm/mime@1.6.0?uuid=78ecbd24-4875-49da-918b-d453987eb06a",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-1.6.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/mime-db@1.52.0",
    "type": "npm",
    "namespace": "",
    "name": "mime-db",
    "version": "1.52.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Media Type Database",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": "http://github.com/broofa",
        "name": "Robert Kieffer",
        "role": "contributor",
        "type": "person",
        "email": "robert@broofa.com"
      }
    ],
    "keywords": [
      "mime",
      "db",
      "type",
      "types",
      "database",
      "charset",
      "charsets"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/mime-db",
    "repository_homepage_url": "https://www.npmjs.com/package/mime-db",
    "repository_download_url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "api_data_url": "https://registry.npmjs.org/mime-db/1.52.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-db-1.52.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/mime-db@1.52.0?uuid=60e93430-2dc8-42ff-bf29-3af226f07288",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-db-1.52.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/mime-types@2.1.35",
    "type": "npm",
    "namespace": "",
    "name": "mime-types",
    "version": "2.1.35",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "The ultimate javascript content-type utility.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "https://searchbeam.jit.su",
        "name": "Jeremiah Senkpiel",
        "role": "contributor",
        "type": "person",
        "email": "fishrock123@rocketmail.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "mime",
      "types"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/mime-types",
    "repository_homepage_url": "https://www.npmjs.com/package/mime-types",
    "repository_download_url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "api_data_url": "https://registry.npmjs.org/mime-types/2.1.35",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-types-2.1.35/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/mime-types@2.1.35?uuid=94f09f7e-b863-4f37-95c6-b1aea7dc9105",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-types-2.1.35/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/ms@2.0.0",
    "type": "npm",
    "namespace": "",
    "name": "ms",
    "version": "2.0.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Tiny milisecond conversion utility",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/zeit/ms",
    "repository_homepage_url": "https://www.npmjs.com/package/ms",
    "repository_download_url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
    "api_data_url": "https://registry.npmjs.org/ms/2.0.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.0.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/ms@2.0.0?uuid=e5ebd937-a718-4987-8e2d-d26d248f0352",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.0.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/ms@2.1.3",
    "type": "npm",
    "namespace": "",
    "name": "ms",
    "version": "2.1.3",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Tiny millisecond conversion utility",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/vercel/ms",
    "repository_homepage_url": "https://www.npmjs.com/package/ms",
    "repository_download_url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
    "api_data_url": "https://registry.npmjs.org/ms/2.1.3",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.1.3/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/ms@2.1.3?uuid=237fc36f-e30d-488d-afc4-f657068218dc",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.1.3/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/negotiator@0.6.3",
    "type": "npm",
    "namespace": "",
    "name": "negotiator",
    "version": "0.6.3",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "HTTP content negotiation",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "Federico Romero",
        "role": "contributor",
        "type": "person",
        "email": "federico.romero@outboxlabs.com"
      },
      {
        "url": "http://blog.izs.me/",
        "name": "Isaac Z. Schlueter",
        "role": "contributor",
        "type": "person",
        "email": "i@izs.me"
      }
    ],
    "keywords": [
      "http",
      "content negotiation",
      "accept",
      "accept-language",
      "accept-encoding",
      "accept-charset"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/negotiator",
    "repository_homepage_url": "https://www.npmjs.com/package/negotiator",
    "repository_download_url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
    "api_data_url": "https://registry.npmjs.org/negotiator/0.6.3",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/negotiator-0.6.3/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/negotiator@0.6.3?uuid=84fab394-e00c-4dda-a4d3-2464bb139c79",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/negotiator-0.6.3/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/object-inspect@1.13.4",
    "type": "npm",
    "namespace": "",
    "name": "object-inspect",
    "version": "1.13.4",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "string representations of objects in node and the browser",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://substack.net",
        "name": "James Halliday",
        "role": "author",
        "type": "person",
        "email": "mail@substack.net"
      }
    ],
    "keywords": [
      "inspect",
      "util.inspect",
      "object",
      "stringify",
      "pretty"
    ],
    "homepage_url": "https://github.com/inspect-js/object-inspect",
    "download_url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git://github.com/inspect-js/object-inspect.git",
    "repository_homepage_url": "https://www.npmjs.com/package/object-inspect",
    "repository_download_url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
    "api_data_url": "https://registry.npmjs.org/object-inspect/1.13.4",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/object-inspect-1.13.4/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/object-inspect@1.13.4?uuid=e729e70e-206c-4695-bcb6-b917a6942e63",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/object-inspect-1.13.4/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/on-finished@2.4.1",
    "type": "npm",
    "namespace": "",
    "name": "on-finished",
    "version": "2.4.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Execute a callback when a request closes, finishes, or errors",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/on-finished",
    "repository_homepage_url": "https://www.npmjs.com/package/on-finished",
    "repository_download_url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
    "api_data_url": "https://registry.npmjs.org/on-finished/2.4.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/on-finished-2.4.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/on-finished@2.4.1?uuid=e6e5d07e-195a-4c4e-8d28-a6c61084e645",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/on-finished-2.4.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/parseurl@1.3.3",
    "type": "npm",
    "namespace": "",
    "name": "parseurl",
    "version": "1.3.3",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "parse a url with memoization",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/pillarjs/parseurl",
    "repository_homepage_url": "https://www.npmjs.com/package/parseurl",
    "repository_download_url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
    "api_data_url": "https://registry.npmjs.org/parseurl/1.3.3",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/parseurl-1.3.3/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/parseurl@1.3.3?uuid=e5d3b846-f601-4b39-b340-c214b644f969",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/parseurl-1.3.3/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/path-to-regexp@0.1.7",
    "type": "npm",
    "namespace": "",
    "name": "path-to-regexp",
    "version": "0.1.7",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Express style path to RegExp utility",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "express",
      "regexp"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/component/path-to-regexp.git",
    "repository_homepage_url": "https://www.npmjs.com/package/path-to-regexp",
    "repository_download_url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz",
    "api_data_url": "https://registry.npmjs.org/path-to-regexp/0.1.7",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/path-to-regexp-0.1.7/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/path-to-regexp@0.1.7?uuid=b814c0fb-0d0a-46a8-a575-a9ff38987f68",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/path-to-regexp-0.1.7/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/proxy-addr@2.0.7",
    "type": "npm",
    "namespace": "",
    "name": "proxy-addr",
    "version": "2.0.7",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Determine address of proxied request",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "ip",
      "proxy",
      "x-forwarded-for"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/proxy-addr",
    "repository_homepage_url": "https://www.npmjs.com/package/proxy-addr",
    "repository_download_url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
    "api_data_url": "https://registry.npmjs.org/proxy-addr/2.0.7",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/proxy-addr-2.0.7/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.10"
      }
    },
    "package_uid": "pkg:npm/proxy-addr@2.0.7?uuid=194635b4-f7b6-48d4-a970-a5de3f94c3c9",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/proxy-addr-2.0.7/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/range-parser@1.2.1",
    "type": "npm",
    "namespace": "",
    "name": "range-parser",
    "version": "1.2.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Range header field string parser",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://tjholowaychuk.com",
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "James Wyatt Cready",
        "role": "contributor",
        "type": "person",
        "email": "wyatt.cready@lanetix.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "range",
      "parser",
      "http"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/range-parser",
    "repository_homepage_url": "https://www.npmjs.com/package/range-parser",
    "repository_download_url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
    "api_data_url": "https://registry.npmjs.org/range-parser/1.2.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/range-parser-1.2.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/range-parser@1.2.1?uuid=9144f39b-9f92-4234-8709-ad10e2de098c",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/range-parser-1.2.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/raw-body@2.5.1",
    "type": "npm",
    "namespace": "",
    "name": "raw-body",
    "version": "2.5.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Get and validate the raw body of a readable stream.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "author",
        "type": "person",
        "email": "me@jongleberry.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "Raynos",
        "role": "contributor",
        "type": "person",
        "email": "raynos2@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/stream-utils/raw-body",
    "repository_homepage_url": "https://www.npmjs.com/package/raw-body",
    "repository_download_url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
    "api_data_url": "https://registry.npmjs.org/raw-body/2.5.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/raw-body-2.5.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/raw-body@2.5.1?uuid=100497b0-3e6a-42f7-8824-31a8d9472b77",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/raw-body-2.5.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/react@18.2.0",
    "type": "npm",
    "namespace": "",
    "name": "react",
    "version": "18.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "React is a JavaScript library for building user interfaces.",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "react"
    ],
    "homepage_url": "https://reactjs.org/",
    "download_url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
    "bug_tracking_url": "https://github.com/facebook/react/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/facebook/react.git",
    "repository_homepage_url": "https://www.npmjs.com/package/react",
    "repository_download_url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/react/18.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-18.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">=0.10.0"
      }
    },
    "package_uid": "pkg:npm/react@18.2.0?uuid=6e2b5257-c260-4d51-8576-d305944c56de",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-18.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/react-dom@18.2.0",
    "type": "npm",
    "namespace": "",
    "name": "react-dom",
    "version": "18.2.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "React package for working with the DOM.",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "react"
    ],
    "homepage_url": "https://reactjs.org/",
    "download_url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz",
    "bug_tracking_url": "https://github.com/facebook/react/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/facebook/react.git",
    "repository_homepage_url": "https://www.npmjs.com/package/react-dom",
    "repository_download_url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz",
    "api_data_url": "https://registry.npmjs.org/react-dom/18.2.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-dom-18.2.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/react-dom@18.2.0?uuid=e68dd036-fa4f-4884-8a4b-47a731e0153e",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-dom-18.2.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/safe-buffer@5.2.1",
    "type": "npm",
    "namespace": "",
    "name": "safe-buffer",
    "version": "5.2.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Safer Node.js Buffer API",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "https://feross.org",
        "name": "Feross Aboukhadijeh",
        "role": "author",
        "type": "person",
        "email": "feross@feross.org"
      }
    ],
    "keywords": [
      "buffer",
      "buffer allocate",
      "node security",
      "safe",
      "safe-buffer",
      "security",
      "uninitialized"
    ],
    "homepage_url": "https://github.com/feross/safe-buffer",
    "download_url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
    "bug_tracking_url": "https://github.com/feross/safe-buffer/issues",
    "code_view_url": "",
    "vcs_url": "git://github.com/feross/safe-buffer.git",
    "repository_homepage_url": "https://www.npmjs.com/package/safe-buffer",
    "repository_download_url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
    "api_data_url": "https://registry.npmjs.org/safe-buffer/5.2.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safe-buffer-5.2.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/safe-buffer@5.2.1?uuid=90eb1487-6d6e-4204-ba1e-70d78b31599a",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safe-buffer-5.2.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/safer-buffer@2.1.2",
    "type": "npm",
    "namespace": "",
    "name": "safer-buffer",
    "version": "2.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Modern Buffer API polyfill without footguns",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "https://github.com/ChALkeR",
        "name": "Nikita Skovoroda",
        "role": "author",
        "type": "person",
        "email": "chalkerx@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
    "bug_tracking_url": "https://github.com/ChALkeR/safer-buffer/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ChALkeR/safer-buffer.git",
    "repository_homepage_url": "https://www.npmjs.com/package/safer-buffer",
    "repository_download_url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/safer-buffer/2.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safer-buffer-2.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/safer-buffer@2.1.2?uuid=81a31834-1a70-4a36-8af7-a8cecc1ced73",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safer-buffer-2.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/scheduler@0.23.2",
    "type": "npm",
    "namespace": "",
    "name": "scheduler",
    "version": "0.23.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Cooperative scheduler for the browser environment.",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [
      "react"
    ],
    "homepage_url": "https://reactjs.org/",
    "download_url": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
    "bug_tracking_url": "https://github.com/facebook/react/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/facebook/react.git",
    "repository_homepage_url": "https://www.npmjs.com/package/scheduler",
    "repository_download_url": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
    "api_data_url": "https://registry.npmjs.org/scheduler/0.23.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/scheduler-0.23.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/scheduler@0.23.2?uuid=9575163b-bc62-4bda-8e2c-ef032f46a0cd",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/scheduler-0.23.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/send@0.18.0",
    "type": "npm",
    "namespace": "",
    "name": "send",
    "version": "0.18.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Better streaming static file server with Range and conditional-GET support",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@vision-media.ca"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "James Wyatt Cready",
        "role": "contributor",
        "type": "person",
        "email": "jcready@gmail.com"
      },
      {
        "url": null,
        "name": "Jes\u00fas Legan\u00e9s Combarro",
        "role": "contributor",
        "type": "person",
        "email": "piranna@gmail.com"
      }
    ],
    "keywords": [
      "static",
      "file",
      "server"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/pillarjs/send",
    "repository_homepage_url": "https://www.npmjs.com/package/send",
    "repository_download_url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz",
    "api_data_url": "https://registry.npmjs.org/send/0.18.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/send-0.18.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8.0"
      }
    },
    "package_uid": "pkg:npm/send@0.18.0?uuid=3d845b63-983a-4faf-a36f-d0342a14ac3f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/send-0.18.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/serve-static@1.15.0",
    "type": "npm",
    "namespace": "",
    "name": "serve-static",
    "version": "1.15.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Serve static files",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/expressjs/serve-static",
    "repository_homepage_url": "https://www.npmjs.com/package/serve-static",
    "repository_download_url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz",
    "api_data_url": "https://registry.npmjs.org/serve-static/1.15.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/serve-static-1.15.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8.0"
      }
    },
    "package_uid": "pkg:npm/serve-static@1.15.0?uuid=5e84a4f3-b7c3-472d-ac31-d451f96edf26",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/serve-static-1.15.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/side-channel@1.1.0",
    "type": "npm",
    "namespace": "",
    "name": "side-channel",
    "version": "1.1.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "weakmap",
      "map",
      "side",
      "channel",
      "metadata"
    ],
    "homepage_url": "https://github.com/ljharb/side-channel#readme",
    "download_url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
    "bug_tracking_url": "https://github.com/ljharb/side-channel/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/side-channel.git",
    "repository_homepage_url": "https://www.npmjs.com/package/side-channel",
    "repository_download_url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
    "api_data_url": "https://registry.npmjs.org/side-channel/1.1.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-1.1.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/side-channel@1.1.0?uuid=e64766ef-23e9-49b4-9f33-ac338010edaf",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-1.1.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/side-channel-list@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "side-channel-list",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Store information about any JS value in a side channel, using a linked list",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "https://github.com/ljharb/side-channel-list#readme",
    "download_url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
    "bug_tracking_url": "https://github.com/ljharb/side-channel-list/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/side-channel-list.git",
    "repository_homepage_url": "https://www.npmjs.com/package/side-channel-list",
    "repository_download_url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/side-channel-list/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-list-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/side-channel-list@1.0.1?uuid=96db4c47-475d-40b1-8572-5f0c1a5fcff4",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-list-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/side-channel-map@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "side-channel-map",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Store information about any JS value in a side channel, using a Map",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "https://github.com/ljharb/side-channel-map#readme",
    "download_url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
    "bug_tracking_url": "https://github.com/ljharb/side-channel-map/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/side-channel-map.git",
    "repository_homepage_url": "https://www.npmjs.com/package/side-channel-map",
    "repository_download_url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/side-channel-map/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-map-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/side-channel-map@1.0.1?uuid=e0f08e11-096f-4863-abc4-1de39d47a593",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-map-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/side-channel-weakmap@1.0.2",
    "type": "npm",
    "namespace": "",
    "name": "side-channel-weakmap",
    "version": "1.0.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Jordan Harband",
        "role": "author",
        "type": "person",
        "email": "ljharb@gmail.com"
      }
    ],
    "keywords": [
      "weakmap",
      "map",
      "side",
      "channel",
      "metadata"
    ],
    "homepage_url": "https://github.com/ljharb/side-channel-weakmap#readme",
    "download_url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
    "bug_tracking_url": "https://github.com/ljharb/side-channel-weakmap/issues",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/ljharb/side-channel-weakmap.git",
    "repository_homepage_url": "https://www.npmjs.com/package/side-channel-weakmap",
    "repository_download_url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
    "api_data_url": "https://registry.npmjs.org/side-channel-weakmap/1.0.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-weakmap-1.0.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4"
      }
    },
    "package_uid": "pkg:npm/side-channel-weakmap@1.0.2?uuid=ffa9b3a6-79b6-439d-a7b4-d5b774170ecf",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-weakmap-1.0.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/statuses@2.0.1",
    "type": "npm",
    "namespace": "",
    "name": "statuses",
    "version": "2.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "HTTP status utility",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "http",
      "status",
      "code"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/statuses",
    "repository_homepage_url": "https://www.npmjs.com/package/statuses",
    "repository_download_url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/statuses/2.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/statuses-2.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/statuses@2.0.1?uuid=8ce7dec0-4d3d-49cb-ac1e-004385272f9d",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/statuses-2.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/toidentifier@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "toidentifier",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Convert a string of words to a JavaScript identifier",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://niftylettuce.com/",
        "name": "Nick Baugh",
        "role": "contributor",
        "type": "person",
        "email": "niftylettuce@gmail.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/component/toidentifier",
    "repository_homepage_url": "https://www.npmjs.com/package/toidentifier",
    "repository_download_url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/toidentifier/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/toidentifier-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">=0.6"
      }
    },
    "package_uid": "pkg:npm/toidentifier@1.0.1?uuid=9bb3729a-081e-490c-9c47-118a0a26d110",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/toidentifier-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/type-is@1.6.18",
    "type": "npm",
    "namespace": "",
    "name": "type-is",
    "version": "1.6.18",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Infer the content-type of a request.",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "contributor",
        "type": "person",
        "email": "doug@somethingdoug.com"
      },
      {
        "url": "http://jongleberry.com",
        "name": "Jonathan Ong",
        "role": "contributor",
        "type": "person",
        "email": "me@jongleberry.com"
      }
    ],
    "keywords": [
      "content",
      "type",
      "checking"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/type-is",
    "repository_homepage_url": "https://www.npmjs.com/package/type-is",
    "repository_download_url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
    "api_data_url": "https://registry.npmjs.org/type-is/1.6.18",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/type-is-1.6.18/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.6"
      }
    },
    "package_uid": "pkg:npm/type-is@1.6.18?uuid=0d538221-235b-4528-b9ae-364025a508e4",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/type-is-1.6.18/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/unpipe@1.0.0",
    "type": "npm",
    "namespace": "",
    "name": "unpipe",
    "version": "1.0.0",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Unpipe a stream from all destinations",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/stream-utils/unpipe",
    "repository_homepage_url": "https://www.npmjs.com/package/unpipe",
    "repository_download_url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
    "api_data_url": "https://registry.npmjs.org/unpipe/1.0.0",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/unpipe-1.0.0/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/unpipe@1.0.0?uuid=5c7b9b88-feae-45f0-8dc3-29ffd3d045ba",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/unpipe-1.0.0/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/utils-merge@1.0.1",
    "type": "npm",
    "namespace": "",
    "name": "utils-merge",
    "version": "1.0.1",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "merge() utility function",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": "http://www.jaredhanson.net/",
        "name": "Jared Hanson",
        "role": "author",
        "type": "person",
        "email": "jaredhanson@gmail.com"
      }
    ],
    "keywords": [
      "util"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
    "bug_tracking_url": "http://github.com/jaredhanson/utils-merge/issues",
    "code_view_url": "",
    "vcs_url": "git://github.com/jaredhanson/utils-merge.git",
    "repository_homepage_url": "https://www.npmjs.com/package/utils-merge",
    "repository_download_url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
    "api_data_url": "https://registry.npmjs.org/utils-merge/1.0.1",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/utils-merge-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      },
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/utils-merge-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      },
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-hash",
            "end_line": 1,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_82.RULE",
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/utils-merge-1.0.1/package.json",
            "start_line": 1,
            "matched_text": "http://opensource.org/licenses/MIT",
            "match_coverage": 100.0,
            "matched_length": 5,
            "rule_relevance": 100,
            "rule_identifier": "mit_82.RULE",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-ed4b10a1-dee4-8c47-62ce-3459c82174bc",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n- type: MIT\n  url: http://opensource.org/licenses/MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.4.0"
      }
    },
    "package_uid": "pkg:npm/utils-merge@1.0.1?uuid=78062fa6-5471-442d-9f84-0d4b57e3d633",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/utils-merge-1.0.1/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  },
  {
    "purl": "pkg:npm/vary@1.1.2",
    "type": "npm",
    "namespace": "",
    "name": "vary",
    "version": "1.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Manipulate the HTTP Vary header",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "http",
      "res",
      "vary"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/vary",
    "repository_homepage_url": "https://www.npmjs.com/package/vary",
    "repository_download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/vary/1.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/vary-1.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/vary@1.1.2?uuid=a42b1ada-4727-475e-8a1e-15f5bb6bfd5f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/vary-1.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  }
]