[
  {
    "purl": "pkg:npm/cookie-signature@1.0.6",
    "type": "npm",
    "namespace": "",
    "name": "cookie-signature",
    "version": "1.0.6",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Sign and unsign cookies",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "TJ Holowaychuk",
        "role": "author",
        "type": "person",
        "email": "tj@learnboost.com"
      }
    ],
    "keywords": [
      "cookie",
      "sign",
      "unsign"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "git+https://github.com/visionmedia/node-cookie-signature.git",
    "repository_homepage_url": "https://www.npmjs.com/package/cookie-signature",
    "repository_download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
    "api_data_url": "https://registry.npmjs.org/cookie-signature/1.0.6",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-signature-1.0.6/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {},
    "package_uid": "pkg:npm/cookie-signature@1.0.6?uuid=486a5ff7-d234-4b25-a644-ff955781ba8c",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-signature-1.0.6/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  }
]