[
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/vendor/acme-internal/AcmeAudit.jar",
    "type": "file",
    "name": "AcmeAudit.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 342,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "proprietary-license",
    "detected_license_expression_spdx": "LicenseRef-scancode-proprietary-license",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/proprietary_8.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: PROPRIETARY (no SPDX header in source)",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "proprietary_8.RULE",
            "license_expression": "proprietary-license",
            "license_expression_spdx": "LicenseRef-scancode-proprietary-license"
          }
        ],
        "identifier": "proprietary_license-c7bb9545-7b66-e7ab-5be4-34e26dc02178",
        "license_expression": "proprietary-license",
        "license_expression_spdx": "LicenseRef-scancode-proprietary-license"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 3.7,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 3,
        "copyright": "Copyright (c) 2026 Acme Corp.",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Acme Corp.",
        "end_line": 3,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "4d930f036d1599b61c0c13acd3a79592",
    "sha1": "756a6eafa5e0861a53f75e0ad42dae5a42095d61",
    "sha256": "c1506d6bc7928aec1b34069b87c357874dd30c7d1533390876398f35a3b0ff55",
    "sha512": "",
    "sha1_git": "c446abecc861226f7d54d3e285556130c99af494",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/vendor/log4j-core-2.14.1.jar",
    "type": "file",
    "name": "log4j-core-2.14.1.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 366,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "apache-2.0",
    "detected_license_expression_spdx": "Apache-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_65.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: Apache-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_65.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0-ec759ae0-ea5a-f138-793e-388520e080c0",
        "license_expression": "apache-2.0",
        "license_expression_spdx": "Apache-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 6.45,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright 1999-2021 The Apache Software Foundation Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "The Apache Software Foundation Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "cf0a6f95c28747ded3d59a1821ee3e3f",
    "sha1": "563c943a52462334bfecc55d9605fec3c48c67b3",
    "sha256": "510d249c49bc7fe00871f948725091033411bdbc9f96f132acd0dacddad2eee8",
    "sha512": "",
    "sha1_git": "d64eb740d2157eda4c8ca79d5dee63581453df45",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/vendor/mysql-connector-java-8.0.28.jar",
    "type": "file",
    "name": "mysql-connector-java-8.0.28.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 368,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "gpl-2.0 AND classpath-exception-2.0",
    "detected_license_expression_spdx": "GPL-2.0-only AND Classpath-exception-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_1352.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: GPL-2.0-only WITH Classpath-exception-2.0",
            "match_coverage": 100.0,
            "matched_length": 5,
            "rule_relevance": 100,
            "rule_identifier": "gpl-2.0_1352.RULE",
            "license_expression": "gpl-2.0",
            "license_expression_spdx": "GPL-2.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/classpath-exception-2.0.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: GPL-2.0-only WITH Classpath-exception-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "classpath-exception-2.0.RULE",
            "license_expression": "classpath-exception-2.0",
            "license_expression_spdx": "Classpath-exception-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-2.0_840.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": "This is a demo placeholder for a JAR. Distribution under GPL-2.0 with the",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 100,
            "rule_identifier": "gpl-2.0_840.RULE",
            "license_expression": "gpl-2.0",
            "license_expression_spdx": "GPL-2.0-only"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 7,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/classpath-exception-2.0_5.RULE",
            "from_file": null,
            "start_line": 7,
            "matched_text": "FOSS / Classpath Exception \u2014 verify the exception applies to your linkage",
            "match_coverage": 100.0,
            "matched_length": 2,
            "rule_relevance": 100,
            "rule_identifier": "classpath-exception-2.0_5.RULE",
            "license_expression": "classpath-exception-2.0",
            "license_expression_spdx": "Classpath-exception-2.0"
          }
        ],
        "identifier": "gpl_2_0_and_classpath_exception_2_0-fc009c05-7e2b-8360-1f46-02c8e3215ba3",
        "license_expression": "gpl-2.0 AND classpath-exception-2.0",
        "license_expression_spdx": "GPL-2.0-only AND Classpath-exception-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 22.58,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 2005, 2024, Oracle and/or its affiliates. Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Oracle and/or its affiliates. Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "9875d15a12546f4d2dcfa25e164d2488",
    "sha1": "a89664172bb9c0784dc2b805c2213267c92b0e73",
    "sha256": "3c6cbdd251bfdf4d823474a3789421bdf205438d598da2f830ca586370de86b5",
    "sha512": "",
    "sha1_git": "a672d0a39cd4f9f32305b89b1dc28ebf41a0a8e6",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/vendor/rhino-1.7.14.jar",
    "type": "file",
    "name": "rhino-1.7.14.jar",
    "status": "scanned",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".jar",
    "size": 337,
    "mime_type": "text/plain",
    "file_type": "UTF-8 Unicode text",
    "programming_language": "",
    "detected_license_expression": "mpl-2.0",
    "detected_license_expression_spdx": "MPL-2.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 2,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mpl-2.0_75.RULE",
            "from_file": null,
            "start_line": 2,
            "matched_text": "License: MPL-2.0",
            "match_coverage": 100.0,
            "matched_length": 4,
            "rule_relevance": 100,
            "rule_identifier": "mpl-2.0_75.RULE",
            "license_expression": "mpl-2.0",
            "license_expression_spdx": "MPL-2.0"
          },
          {
            "score": 50.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_mpl-2.0_for_mpl-2.0.RULE",
            "from_file": null,
            "start_line": 6,
            "matched_text": "This is a demo placeholder for a JAR. MPL-2.0 file-level copyleft \u2014",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 50,
            "rule_identifier": "spdx_license_id_mpl-2.0_for_mpl-2.0.RULE",
            "license_expression": "mpl-2.0",
            "license_expression_spdx": "MPL-2.0"
          }
        ],
        "identifier": "mpl_2_0-6c593f7b-f64c-b07e-e177-8d403a76aed0",
        "license_expression": "mpl-2.0",
        "license_expression_spdx": "MPL-2.0"
      }
    ],
    "license_clues": [],
    "percentage_of_license_text": 12.28,
    "compliance_alert": "",
    "copyrights": [
      {
        "end_line": 4,
        "copyright": "Copyright (c) 1997-2023 Mozilla Foundation Component",
        "start_line": 3
      }
    ],
    "holders": [
      {
        "holder": "Mozilla Foundation Component",
        "end_line": 4,
        "start_line": 3
      }
    ],
    "authors": [],
    "package_data": [],
    "emails": [],
    "urls": [],
    "md5": "932856e1f9172e11833f6b874165ed53",
    "sha1": "cdf8987f6cae7cb23ab427dfa2a1bb8cb86fdbb2",
    "sha256": "994de28aebcc4fb12e3a83a73facc3f4f543ab7fb081dae5b2775b00a0ebc52a",
    "sha512": "",
    "sha1_git": "f0b8f43b9a5fb1026b0a09d4072e7bb0ffb315f2",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  }
]