[
  {
    "purl": "pkg:npm/vary@1.1.2",
    "type": "npm",
    "namespace": "",
    "name": "vary",
    "version": "1.1.2",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "JavaScript",
    "description": "Manipulate the HTTP Vary header",
    "notes": "",
    "release_date": null,
    "parties": [
      {
        "url": null,
        "name": "Douglas Christopher Wilson",
        "role": "author",
        "type": "person",
        "email": "doug@somethingdoug.com"
      }
    ],
    "keywords": [
      "http",
      "res",
      "vary"
    ],
    "homepage_url": "",
    "download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "https://github.com/jshttp/vary",
    "repository_homepage_url": "https://www.npmjs.com/package/vary",
    "repository_download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
    "api_data_url": "https://registry.npmjs.org/vary/1.1.2",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "mit",
    "declared_license_expression_spdx": "MIT",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "1-spdx-id",
            "end_line": 1,
            "rule_url": null,
            "from_file": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/vary-1.1.2/package.json",
            "start_line": 1,
            "matched_text": "MIT",
            "match_coverage": 100.0,
            "matched_length": 1,
            "rule_relevance": 100,
            "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
        "license_expression": "mit",
        "license_expression_spdx": "MIT"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- MIT\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [],
    "extra_data": {
      "engines": {
        "node": ">= 0.8"
      }
    },
    "package_uid": "pkg:npm/vary@1.1.2?uuid=a42b1ada-4727-475e-8a1e-15f5bb6bfd5f",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "npm_package_json"
    ],
    "datafile_paths": [
      "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/vary-1.1.2/package.json"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  }
]