[
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-api-2.14.1/META-INF/MANIFEST.MF",
    "type": "file",
    "name": "MANIFEST.MF",
    "status": "application-package",
    "for_packages": [
      "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?uuid=64441493-6f3e-4f89-ad69-5304eceb720b",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".MF",
    "size": 97,
    "mime_type": "text/plain",
    "file_type": "ASCII text, with CRLF line terminators",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": null,
        "purl": null,
        "sha1": null,
        "size": null,
        "type": "jar",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": null,
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "",
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "java_jar_manifest",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": null,
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "522d8eecd2712495f55f142cde81a77e",
    "sha1": "66f4b9aad56af9cb85c01f66d7a7e11633e994ed",
    "sha256": "e973bf0987375033a064fe980f53c40834cea47c82139ea816ea60eeeea89e6a",
    "sha512": "",
    "sha1_git": "af80a6d5b65d3c47ea6a8b0e8c34f6b28ce76f22",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-api-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-api/pom.properties",
    "type": "file",
    "name": "pom.properties",
    "status": "application-package",
    "for_packages": [
      "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?uuid=64441493-6f3e-4f89-ad69-5304eceb720b",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".properties",
    "size": 100,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-api",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": null,
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom_properties",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "22d5583fb9a06fd5fe99437873a0603c",
    "sha1": "50faa1b6c89f83a2af8681f4c0c24aa01e8c7edd",
    "sha256": "bdb0177471692d91dc2634f83a99f13c3de169d89e4cf1bedff1f3e0dfd68d97",
    "sha512": "",
    "sha1_git": "47c8c0982861ccb3880e6fce68c0b5e47db6bfe9",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-api-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-api/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?uuid=64441493-6f3e-4f89-ad69-5304eceb720b",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 14045,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-api",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Apache Log4j API\nThe Apache Log4j API",
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/log4j-api-2.14.1.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api-java9",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.osgi/org.osgi.core",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.felix/org.apache.felix.framework",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.eclipse.tycho/org.eclipse.osgi",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.maven/maven-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-lang3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.vintage/junit-vintage-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-migrationsupport",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.assertj/assertj-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/log4j-api-2.14.1.jar",
        "repository_homepage_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "ba7a8e29a29ac6ba900a55cfb38e5007",
    "sha1": "9199a73770616b1ca0b00f576db3231aaab4876a",
    "sha256": "909fa83ac088e70c8ba0dfb0fbd5b3027d03262edaafcca1250cc6aec46f0ad4",
    "sha512": "",
    "sha1_git": "6e31895f6284a47c671917dab8e689fd3b89e35b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-core-2.14.1/META-INF/MANIFEST.MF",
    "type": "file",
    "name": "MANIFEST.MF",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?uuid=60bfa1f9-a460-41c4-88f7-cd87cfd6d5b7"
    ],
    "tag": "",
    "extension": ".MF",
    "size": 97,
    "mime_type": "text/plain",
    "file_type": "ASCII text, with CRLF line terminators",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": null,
        "purl": null,
        "sha1": null,
        "size": null,
        "type": "jar",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": null,
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "",
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "java_jar_manifest",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": null,
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "522d8eecd2712495f55f142cde81a77e",
    "sha1": "66f4b9aad56af9cb85c01f66d7a7e11633e994ed",
    "sha256": "e973bf0987375033a064fe980f53c40834cea47c82139ea816ea60eeeea89e6a",
    "sha512": "",
    "sha1_git": "af80a6d5b65d3c47ea6a8b0e8c34f6b28ce76f22",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-core-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties",
    "type": "file",
    "name": "pom.properties",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?uuid=60bfa1f9-a460-41c4-88f7-cd87cfd6d5b7"
    ],
    "tag": "",
    "extension": ".properties",
    "size": 101,
    "mime_type": "text/plain",
    "file_type": "ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-core",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": null,
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom_properties",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "922bf88d23e82e16f9d5f4311fe62316",
    "sha1": "ac193497b9d578dae6f348801c061216bf492f17",
    "sha256": "2d75f3ebb30bd500e48af99bb90b552d18ed5d90ef29f214c4bfa34c1f26011b",
    "sha512": "",
    "sha1_git": "12b4ed542a08ec8dd3573f4a62ac93f8b4aeb487",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-core-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-core/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?uuid=60bfa1f9-a460-41c4-88f7-cd87cfd6d5b7"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 23214,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-core",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Apache Log4j Core\nThe Apache Log4j Implementation",
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.lmax/disruptor",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.conversantmedia/disruptor",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jctools/jctools-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "${woodstox.version}"
          },
          {
            "purl": "pkg:maven/org.fusesource.jansi/jansi",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.sun.mail/javax.mail",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.kafka/kafka-clients",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.zeromq/jeromq",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-compress",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-csv",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.slf4j/slf4j-api",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.vintage/junit-vintage-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.mockito/mockito-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.mockito/mockito-junit-jupiter",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-core-java9",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.osgi/org.osgi.core",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jboss.spec.javax.jms/jboss-jms-api_1.1_spec",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.tukaani/xz",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jmdns/jmdns@3.5.3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.3"
          },
          {
            "purl": "pkg:maven/log4j/log4j@1.2.17",
            "scope": "test",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.2.17"
          },
          {
            "purl": "pkg:maven/org.slf4j/slf4j-ext",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hamcrest/hamcrest-all",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hsqldb/hsqldb",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.h2database/h2",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.springframework/spring-test",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.activemq/activemq-broker",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-logging/commons-logging",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/ch.qos.logback/logback-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/ch.qos.logback/logback-classic",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.eclipse.tycho/org.eclipse.osgi",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.felix/org.apache.felix.framework",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.maven/maven-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/net.javacrumbs.json-unit/json-unit",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.xmlunit/xmlunit-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.xmlunit/xmlunit-matchers",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-io/commons-io",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-codec/commons-codec",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-lang3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache-extras.beanshell/bsh",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.groovy/groovy-jsr223",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.groovy/groovy-dateutil",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.github.tomakehurst/wiremock",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hdrhistogram/HdrHistogram",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.jar",
        "repository_homepage_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "20f7ceaf4ef3995ad374f44eb1ab0f14",
    "sha1": "f66708526155233e7351a79358a2942090b8736f",
    "sha256": "8a598b05bfa324efc2f45e825b3aa9813d291054eca3808a8013c6cf7b06fd6a",
    "sha512": "",
    "sha1_git": "ac769ddb60df6cb66ccda0c44e0cdf1d8b7c3eff",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/accepts-1.3.8/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/accepts@1.3.8?uuid=8d327ad2-90c2-4670-b356-8de601f5a86f"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1157,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "accepts",
        "purl": "pkg:npm/accepts@1.3.8",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/accepts",
        "version": "1.3.8",
        "keywords": [
          "content",
          "negotiation",
          "accept",
          "accepts"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Higher-level content negotiation",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/accepts/1.3.8",
        "dependencies": [
          {
            "purl": "pkg:npm/mime-types",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~2.1.34"
          },
          {
            "purl": "pkg:npm/negotiator",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.6.3"
          },
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.3.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/accepts",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "32a15d6909fcae63e52d8664593d32d5",
    "sha1": "131ba4d63747e6663a9c19409e43ac034bd532cf",
    "sha256": "e5716d5d939db08c5c28ec6ae86ed67be5320f91089e2673fca1c5b876e57aa3",
    "sha512": "",
    "sha1_git": "0f2d15da92b29d328f4da484f494c5442c711b4d",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/array-flatten-1.1.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/array-flatten@1.1.1?uuid=21331075-86b7-42ef-a137-88952f0112b9"
    ],
    "tag": "",
    "extension": ".json",
    "size": 879,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "array-flatten",
        "purl": "pkg:npm/array-flatten@1.1.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://blakeembrey.me",
            "name": "Blake Embrey",
            "role": "author",
            "type": "person",
            "email": "hello@blakeembrey.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/blakeembrey/array-flatten.git",
        "version": "1.1.1",
        "keywords": [
          "array",
          "flatten",
          "arguments",
          "depth"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Flatten an array of nested arrays into a single flat array",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/array-flatten/1.1.1",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.13"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.2.4"
          },
          {
            "purl": "pkg:npm/pre-commit",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.7"
          },
          {
            "purl": "pkg:npm/standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.7.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
        "homepage_url": "https://github.com/blakeembrey/array-flatten",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/blakeembrey/array-flatten/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/array-flatten",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "cb1aa7f817100a03395dd0163bf6ebe9",
    "sha1": "fc51b89d0fb7cc640a0495baa4005364e83718c3",
    "sha256": "5c5e0e10cfa23f163d1fe68aa57a881d09cac39d720e1361c697b86c4d33e0f5",
    "sha512": "",
    "sha1_git": "1a24e2a1a1d3fbd694b77bf6673ab1e1c2fd5043",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/body-parser-1.20.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/body-parser@1.20.1?uuid=ce4ec793-4d33-4690-80e7-76312f3861e4",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1472,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "body-parser",
        "purl": "pkg:npm/body-parser@1.20.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/expressjs/body-parser",
        "version": "1.20.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "npm": "1.2.8000 || >= 1.4.16",
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Node.js body parsing middleware",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/body-parser/1.20.1",
        "dependencies": [
          {
            "purl": "pkg:npm/bytes",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "3.1.2"
          },
          {
            "purl": "pkg:npm/content-type",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.4"
          },
          {
            "purl": "pkg:npm/debug",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.6.9"
          },
          {
            "purl": "pkg:npm/depd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/destroy",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/http-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/iconv-lite",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.4.24"
          },
          {
            "purl": "pkg:npm/on-finished",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/qs",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "6.11.0"
          },
          {
            "purl": "pkg:npm/raw-body",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.5.1"
          },
          {
            "purl": "pkg:npm/type-is",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.6.18"
          },
          {
            "purl": "pkg:npm/unpipe",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.24.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.26.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/methods",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.2"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.0.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.3.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/body-parser",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "fdd15e03ca10273d11b7d5cac72a3726",
    "sha1": "170d11520bacb15023b6d3ddc1086db02c17c40e",
    "sha256": "039dbc6b0e8ccdefcc06d618aea4da08d3fca7489dcbed6404827be29d41314f",
    "sha512": "",
    "sha1_git": "9cd2ccbbae4b4bbdf349d827ab4fafd54288b515",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/bytes-3.1.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/bytes@3.1.2?uuid=5874f7d6-cc72-4487-80c6-2b6982116cd1",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 959,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "bytes",
        "purl": "pkg:npm/bytes@3.1.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://tjholowaychuk.com",
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": null,
            "name": "Jed Watson",
            "role": "contributor",
            "type": "person",
            "email": "jed.watson@me.com"
          },
          {
            "url": null,
            "name": "Th\u00e9o FIDRY",
            "role": "contributor",
            "type": "person",
            "email": "theo.fidry@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/visionmedia/bytes.js",
        "version": "3.1.2",
        "keywords": [
          "byte",
          "bytes",
          "utility",
          "parse",
          "parser",
          "convert",
          "converter"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Utility to parse a string bytes to bytes and vice-versa",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/bytes/3.1.2",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/bytes",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5e3137feec27c5d88693e0cb2ff95d3c",
    "sha1": "d8fe3e70eb4ecf4bf58385e4b27f89b7ce656a28",
    "sha256": "99b21c09ce812dc76a06cd87c4753247cb9615c6a8501c5a5a9d9caa22ea2d12",
    "sha512": "",
    "sha1_git": "f2b6a8b0e3c9020746409617bcd562c9368be451",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bind-apply-helpers-1.0.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/call-bind-apply-helpers@1.0.2?uuid=5f949679-1562-4924-a228-2bca16dbbd16",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2480,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "call-bind-apply-helpers",
        "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
        "version": "1.0.2",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/call-bind-apply-helpers/1.0.2",
        "dependencies": [
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/function-bind",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.2"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.3"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.3"
          },
          {
            "purl": "pkg:npm/%40types/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.3"
          },
          {
            "purl": "pkg:npm/%40types/function-bind",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.10"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/es-value-fixtures",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.7.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.5"
          },
          {
            "purl": "pkg:npm/has-strict-mode",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.4"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
        "homepage_url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/call-bind-apply-helpers/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/call-bind-apply-helpers",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "0a4d78b734f5c82023b33661d7487f4d",
    "sha1": "ba7d54557351d8746e4d2f88e7d4106ca4d0d541",
    "sha256": "59639b628c6846f674857c6a613fd47e2e4d2a24036cdf0f7a62ac634f4c8a5f",
    "sha512": "",
    "sha1_git": "923b8be2f14c65e78fd75a4fd34aba94fb733274",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/call-bound-1.0.4/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/call-bound@1.0.4?uuid=21a1dac6-04b8-42d5-b578-f82a28c28f74",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2507,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "call-bound",
        "purl": "pkg:npm/call-bound@1.0.4",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/call-bound.git",
        "version": "1.0.4",
        "keywords": [
          "javascript",
          "ecmascript",
          "es",
          "js",
          "callbind",
          "callbound",
          "call",
          "bind",
          "bound",
          "call-bind",
          "call-bound",
          "function",
          "es-abstract"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/call-bound/1.0.4",
        "dependencies": [
          {
            "purl": "pkg:npm/call-bind-apply-helpers",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/get-intrinsic",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.4"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.0"
          },
          {
            "purl": "pkg:npm/%40types/call-bind",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.5"
          },
          {
            "purl": "pkg:npm/%40types/get-intrinsic",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.3"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/es-value-fixtures",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.7.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.5"
          },
          {
            "purl": "pkg:npm/gopd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/has-strict-mode",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.4"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
        "homepage_url": "https://github.com/ljharb/call-bound#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/call-bound/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/call-bound",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "1ae02b4f538ddf50bf9c624b67b3b062",
    "sha1": "7c7c20ff22ed55c0f73a9ca1e378190b9ab3ba29",
    "sha256": "dcc8abb3c4ad3774234272149020cb36d7b1a3d377a419454d1e7adb368dd9c3",
    "sha512": "",
    "sha1_git": "d542db430ed3b58551bbfa688d47c591e9150cb7",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-disposition-0.5.4/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/content-disposition@0.5.4?uuid=d69e2115-13a1-4528-8fa3-8eabb3d40131",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1200,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "content-disposition",
        "purl": "pkg:npm/content-disposition@0.5.4",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/content-disposition",
        "version": "0.5.4",
        "keywords": [
          "content-disposition",
          "http",
          "rfc6266",
          "res"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Create and parse Content-Disposition header",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/content-disposition/0.5.4",
        "dependencies": [
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "13.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.3"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.1.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/content-disposition",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5b285d4db057e7e72225e8e928d2ffa3",
    "sha1": "1b871ffaefe2a1fd69aa9b1538b4003bf0eae9ab",
    "sha256": "2459c0e8fbeb5716ab06e9ef73747bba46ed2bc52e310bd4e9f0ef1f102da61f",
    "sha512": "",
    "sha1_git": "43c70ce24a45a9a8f9eec7c6b6a30e0324d3078d",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/content-type-1.0.5/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/content-type@1.0.5?uuid=c8b8b04e-54b3-4ccc-b442-a188dd0c6b97",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1075,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "content-type",
        "purl": "pkg:npm/content-type@1.0.5",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/content-type",
        "version": "1.0.5",
        "keywords": [
          "content-type",
          "http",
          "req",
          "res",
          "rfc7231"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Create and parse HTTP Content-Type header",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/content-type/1.0.5",
        "dependencies": [
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.27.5"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.2.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/content-type",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "0de0482c40698c075e13e4d54ff34466",
    "sha1": "1545c6d8538d7e59f375d4ae4b0e0d10471a6c1c",
    "sha256": "bd78a5427ffca1966621301edc6cac2146c8c1e137f122161ba90dca7ec89f77",
    "sha512": "",
    "sha1_git": "9db19f63fb96592d8d3bced654a72d47c12cef97",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-0.5.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/cookie@0.5.0?uuid=e8230e47-4c3a-4597-8324-359f8d3e51a2"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1140,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "cookie",
        "purl": "pkg:npm/cookie@0.5.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Roman Shtylman",
            "role": "author",
            "type": "person",
            "email": "shtylman@gmail.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/cookie",
        "version": "0.5.0",
        "keywords": [
          "cookie",
          "cookies"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "HTTP server cookie parsing and serialization",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/cookie/0.5.0",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/top-sites",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.97"
          }
        ],
        "download_url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/cookie",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "44d16bca62bc27cc2ba3030d62d42b49",
    "sha1": "c90a11e913b1589dc50428f8308864a3cb6299eb",
    "sha256": "de527c7a417d1d2f2c47e6358a66487d731470ab7cd4a42c950c7297816df13f",
    "sha512": "",
    "sha1_git": "ed5606a987e11096405225274869f94be3c2a7ca",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/cookie-signature-1.0.6/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/cookie-signature@1.0.6?uuid=486a5ff7-d234-4b25-a644-ff955781ba8c"
    ],
    "tag": "",
    "extension": ".json",
    "size": 492,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "cookie-signature",
        "purl": "pkg:npm/cookie-signature@1.0.6",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@learnboost.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/visionmedia/node-cookie-signature.git",
        "version": "1.0.6",
        "keywords": [
          "cookie",
          "sign",
          "unsign"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Sign and unsign cookies",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/cookie-signature/1.0.6",
        "dependencies": [
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/should",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          }
        ],
        "download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/cookie-signature",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "076c53814237236a9d1aa999f33ee501",
    "sha1": "eb071423205fc35573e714baa755e3a9e900a979",
    "sha256": "ab66777a673ae096d6b5aa51b5edb46b84e6fcd85dc03358c35576e3df0464f5",
    "sha512": "",
    "sha1_git": "29c4498e07ab1ae43692d7a27f959771a459815c",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/debug-2.6.9/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/debug@2.6.9?uuid=5c8eb19a-fdd0-416e-9171-ceb0a3478fa3",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1138,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "debug",
        "purl": "pkg:npm/debug@2.6.9",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": "http://n8.io",
            "name": "Nathan Rajlich",
            "role": "contributor",
            "type": "person",
            "email": "nathan@tootallnate.net"
          },
          {
            "url": null,
            "name": "Andrew Rhyne",
            "role": "contributor",
            "type": "person",
            "email": "rhyneandrew@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/visionmedia/debug.git",
        "version": "2.6.9",
        "keywords": [
          "debug",
          "log",
          "debugger"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "small debugging utility",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/debug/2.6.9",
        "dependencies": [
          {
            "purl": "pkg:npm/ms",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/browserify",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.0.3"
          },
          {
            "purl": "pkg:npm/chai",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.5.0"
          },
          {
            "purl": "pkg:npm/concurrently",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.1.0"
          },
          {
            "purl": "pkg:npm/coveralls",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.11.15"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.12.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.4.5"
          },
          {
            "purl": "pkg:npm/karma",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/karma-chai",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.0"
          },
          {
            "purl": "pkg:npm/karma-mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/karma-phantomjs-launcher",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/karma-sinon",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.2.0"
          },
          {
            "purl": "pkg:npm/mocha-lcov-reporter",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/rimraf",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.4"
          },
          {
            "purl": "pkg:npm/sinon",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.17.6"
          },
          {
            "purl": "pkg:npm/sinon-chai",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/debug",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "71a7656944ffe50cc27ebe02491ae49b",
    "sha1": "8ebf0f80660d982fc68f00f82855696157e74b10",
    "sha256": "6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee",
    "sha512": "",
    "sha1_git": "dc787ba76781de4c1d4721b69aa881a548365a90",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/depd-2.0.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/depd@2.0.0?uuid=0c6a81b6-9171-40c9-8920-462f34c1e6d2"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1335,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "depd",
        "purl": "pkg:npm/depd@2.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/dougwilson/nodejs-depd",
        "version": "2.0.0",
        "keywords": [
          "deprecate",
          "deprecated"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Deprecate all the things",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/depd/2.0.0",
        "dependencies": [
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.7.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "12.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.14.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0-beta.7"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.0"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.2"
          },
          {
            "purl": "pkg:npm/uid-safe",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/depd",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "7f0a9d228c79f0ee4b89fc6117f1c687",
    "sha1": "3c10082c1464a6f589aa10cda88285e780ebf857",
    "sha256": "5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99",
    "sha512": "",
    "sha1_git": "3857e199184a0a3f0d921e740525278af0f86ff3",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/destroy-1.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/destroy@1.2.0?uuid=90ecfe88-6701-4599-bf70-b14a3816dd22"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1128,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "destroy",
        "purl": "pkg:npm/destroy@1.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "author",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/stream-utils/destroy",
        "version": "1.2.0",
        "keywords": [
          "stream",
          "streams",
          "destroy",
          "cleanup",
          "leak",
          "fd"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "npm": "1.2.8000 || >= 1.4.16",
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "destroy a stream if possible",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/destroy/1.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/destroy",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "6015f23c6e2fd79f4a6e29453ce4dc1d",
    "sha1": "e12115ed9a1e2c56eb35ecfc14ff83b8c02935d5",
    "sha256": "f865b50652dc062f43142e01f55db2760cc10d255bd05afd232e738999c58188",
    "sha512": "",
    "sha1_git": "c85e438378a65c39b3ccd4e0316d1855cf5b7887",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/dunder-proto-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/dunder-proto@1.0.1?uuid=3deafa3a-f66b-4055-b564-17030516831d"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2108,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "dunder-proto",
        "purl": "pkg:npm/dunder-proto@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/es-shims/dunder-proto.git",
        "version": "1.0.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/dunder-proto/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/call-bind-apply-helpers",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/gopd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.7.0"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
        "homepage_url": "https://github.com/es-shims/dunder-proto#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/es-shims/dunder-proto/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/dunder-proto",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "8db1eaabec547b65048796963835c2c9",
    "sha1": "d4f4da85fa9e51b4843d29d7e541991cf377b8d5",
    "sha256": "24df71008e4225c858f389dd2728b76cf66b752256d42a38ed7930aacae7fe2b",
    "sha512": "",
    "sha1_git": "04a40367751ee4c064ac88045e79b17ba4aab0a6",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ee-first-1.1.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/ee-first@1.1.1?uuid=b662be8d-0eaa-4f6d-ad95-3f23d9c80d6b",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 859,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "ee-first",
        "purl": "pkg:npm/ee-first@1.1.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "author",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jonathanong/ee-first",
        "version": "1.1.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "return the first event in a set of ee/event pairs",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/ee-first/1.1.1",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.9"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/ee-first",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "3ed21090e07ef5dd57729a77c4291cb9",
    "sha1": "7ffe61f87f94a558fabc177cad5c9b90b16481cf",
    "sha256": "a4eece6ff6b38bf7ac107323f381cc60500097a9cbdd473f5d5b45e68822cb89",
    "sha512": "",
    "sha1_git": "b6d0b7d6757512f58dbf65a8e92f953a483069ad",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/encodeurl-1.0.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/encodeurl@1.0.2?uuid=703bf23a-d9de-4251-a5e6-a5618bb406d0"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1091,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "encodeurl",
        "purl": "pkg:npm/encodeurl@1.0.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/pillarjs/encodeurl",
        "version": "1.0.2",
        "keywords": [
          "encode",
          "encodeurl",
          "url"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/encodeurl/1.0.2",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.19.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.8.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.6.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.5.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/encodeurl",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "453a9bb10c91e0ec44f305b14e30ce82",
    "sha1": "73c01b81f34a9978b158df2744ef8c45251d6193",
    "sha256": "30b1a43843675f42033fd6c77c19b20ad4344844f0bd5526c586081e93a48fe8",
    "sha512": "",
    "sha1_git": "b9f25ef10b2fc15b4a9c2ea5aa48856d73f1aade",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/escape-html-1.0.3/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/escape-html@1.0.3?uuid=d78534c8-2108-4461-ad78-55d4fc3e4a5f",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 434,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "escape-html",
        "purl": "pkg:npm/escape-html@1.0.3",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "https://github.com/component/escape-html",
        "version": "1.0.3",
        "keywords": [
          "escape",
          "html",
          "utility"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Escape string for use in HTML",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/escape-html/1.0.3",
        "dependencies": [
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          }
        ],
        "download_url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/escape-html",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "e9c758769fec9883d5ce3d30b8ee1047",
    "sha1": "f9d3fd64a0196e77965489ce9b81fe4ce3a9ecb1",
    "sha256": "bd320a3e9d23249f5f7d3ce72f2fa426e28a6b2704bd2b281d0c92806a1f5223",
    "sha512": "",
    "sha1_git": "57ec7bd0754d50af9c5e96a208aed6d85c1e6d5e",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-define-property-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/es-define-property@1.0.1?uuid=3ceea22e-acef-4a67-baec-f4d1781a0c2f"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2129,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "es-define-property",
        "purl": "pkg:npm/es-define-property@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/es-define-property.git",
        "version": "1.0.1",
        "keywords": [
          "javascript",
          "ecmascript",
          "object",
          "define",
          "property",
          "defineProperty",
          "Object.defineProperty"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "`Object.defineProperty`, but not IE 8's broken one.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/es-define-property/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/gopd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.3"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/gopd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
        "homepage_url": "https://github.com/ljharb/es-define-property#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/es-define-property/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/es-define-property",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "c0f0354469d9e2a31bea1f5618c6ac9d",
    "sha1": "f1a35cb43fefef0d0e60920c4df5313ba630ee6d",
    "sha256": "3a2cb30dae30a96705dcd9aa2d5fb190cf8200f27badccfa5a81a4374e5708b4",
    "sha512": "",
    "sha1_git": "fbed187879c12efa431383a9d4b9f340e9c41184",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-errors-1.3.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/es-errors@1.3.0?uuid=d0efba03-7d94-4b28-80ea-e4d2f5a05d89"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2174,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "es-errors",
        "purl": "pkg:npm/es-errors@1.3.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/es-errors.git",
        "version": "1.3.0",
        "keywords": [
          "javascript",
          "ecmascript",
          "error",
          "typeerror",
          "syntaxerror",
          "rangeerror"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A simple cache for a few of the JS Error constructors.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/es-errors/1.3.0",
        "dependencies": [
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.4"
          },
          {
            "purl": "pkg:npm/aud",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.4"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.4.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.7.4"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
        "homepage_url": "https://github.com/ljharb/es-errors#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/es-errors/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/es-errors",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "7e6b784827a0aff2a05c343f8a53e88d",
    "sha1": "d13bcb37ab6ab7f0911ce728148cb1c8485a81d1",
    "sha256": "1a0a0bcccc76b915cb64073317312840cf6363e9144b96f406d0059774dd5278",
    "sha512": "",
    "sha1_git": "ff8c2a531b89061d61eadcdd419a752b79cd2daa",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/es-object-atoms-1.1.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/es-object-atoms@1.1.1?uuid=5dc3bffd-790b-4e3e-93e0-235b7c72cc69"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2273,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "es-object-atoms",
        "purl": "pkg:npm/es-object-atoms@1.1.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/es-object-atoms.git",
        "version": "1.1.1",
        "keywords": [
          "javascript",
          "ecmascript",
          "object",
          "toobject",
          "coercible"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/es-object-atoms/1.1.1",
        "dependencies": [
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.3"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
        "homepage_url": "https://github.com/ljharb/es-object-atoms#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/es-object-atoms/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/es-object-atoms",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "3e13347c9fadd34a351474e1a9484214",
    "sha1": "623e510034cf39440e8692aa26c9473765981674",
    "sha256": "9975f032714dd642d08c9b50129096f5daf878dbede1ca3544cdcdbf45b48eb0",
    "sha512": "",
    "sha1_git": "f4cec7152578638f52f6fa67a96c748271e6b4b4",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/etag-1.8.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/etag@1.8.1?uuid=0cb1f366-fbda-4a5b-80b4-2be8ef3dbb6c"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1306,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "etag",
        "purl": "pkg:npm/etag@1.8.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "David Bj\u00f6rklund",
            "role": "contributor",
            "type": "person",
            "email": "david.bjorklund@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/etag",
        "version": "1.8.1",
        "keywords": [
          "etag",
          "http",
          "res"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Create simple HTTP ETags",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/etag/1.8.1",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.19.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.7.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0-beta.6"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.21.5"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.1"
          },
          {
            "purl": "pkg:npm/seedrandom",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.4.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/etag",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "fec91cc11e50ee734c65c2d703db3884",
    "sha1": "e2debd5c6530254abe164bbd44f1e48b7c7c0018",
    "sha256": "836b9a5dd1c6af638f4602e83e2568277f9ab1f457db0b95d949c2a4ddb0462a",
    "sha512": "",
    "sha1_git": "b06ab803c0f80f56c5c88b8dc394468aee3485f4",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/express-4.18.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/express@4.18.2?uuid=c090357b-c030-4ca4-b76d-a9d7a2706af3",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2624,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "express",
        "purl": "pkg:npm/express@4.18.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": null,
            "name": "Aaron Heckmann",
            "role": "contributor",
            "type": "person",
            "email": "aaron.heckmann+github@gmail.com"
          },
          {
            "url": null,
            "name": "Ciaran Jessup",
            "role": "contributor",
            "type": "person",
            "email": "ciaranj@gmail.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "Guillermo Rauch",
            "role": "contributor",
            "type": "person",
            "email": "rauchg@gmail.com"
          },
          {
            "url": null,
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Roman Shtylman",
            "role": "contributor",
            "type": "person",
            "email": "shtylman+expressjs@gmail.com"
          },
          {
            "url": null,
            "name": "Young Jae Sim",
            "role": "contributor",
            "type": "person",
            "email": "hanul@hanul.me"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/expressjs/express",
        "version": "4.18.2",
        "keywords": [
          "express",
          "framework",
          "sinatra",
          "web",
          "http",
          "rest",
          "restful",
          "router",
          "app",
          "api"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.10.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Fast, unopinionated, minimalist web framework",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/express/4.18.2",
        "dependencies": [
          {
            "purl": "pkg:npm/accepts",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.3.8"
          },
          {
            "purl": "pkg:npm/array-flatten",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.1.1"
          },
          {
            "purl": "pkg:npm/body-parser",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.20.1"
          },
          {
            "purl": "pkg:npm/content-disposition",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.5.4"
          },
          {
            "purl": "pkg:npm/content-type",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.4"
          },
          {
            "purl": "pkg:npm/cookie",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.5.0"
          },
          {
            "purl": "pkg:npm/cookie-signature",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.6"
          },
          {
            "purl": "pkg:npm/debug",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.6.9"
          },
          {
            "purl": "pkg:npm/depd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/encodeurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.2"
          },
          {
            "purl": "pkg:npm/escape-html",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.3"
          },
          {
            "purl": "pkg:npm/etag",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.8.1"
          },
          {
            "purl": "pkg:npm/finalhandler",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/fresh",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.5.2"
          },
          {
            "purl": "pkg:npm/http-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/merge-descriptors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/methods",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.1.2"
          },
          {
            "purl": "pkg:npm/on-finished",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/parseurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.3.3"
          },
          {
            "purl": "pkg:npm/path-to-regexp",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.1.7"
          },
          {
            "purl": "pkg:npm/proxy-addr",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~2.0.7"
          },
          {
            "purl": "pkg:npm/qs",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "6.11.0"
          },
          {
            "purl": "pkg:npm/range-parser",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.2.1"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/send",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.18.0"
          },
          {
            "purl": "pkg:npm/serve-static",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.15.0"
          },
          {
            "purl": "pkg:npm/setprototypeof",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/statuses",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.1"
          },
          {
            "purl": "pkg:npm/type-is",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.6.18"
          },
          {
            "purl": "pkg:npm/utils-merge",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/vary",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.1.2"
          },
          {
            "purl": "pkg:npm/after",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.8.2"
          },
          {
            "purl": "pkg:npm/connect-redis",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.4.2"
          },
          {
            "purl": "pkg:npm/cookie-parser",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.4.6"
          },
          {
            "purl": "pkg:npm/cookie-session",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/ejs",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.1.8"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.24.0"
          },
          {
            "purl": "pkg:npm/express-session",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.17.2"
          },
          {
            "purl": "pkg:npm/hbs",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.2.0"
          },
          {
            "purl": "pkg:npm/marked",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.7.0"
          },
          {
            "purl": "pkg:npm/method-override",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.0.0"
          },
          {
            "purl": "pkg:npm/morgan",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.10.0"
          },
          {
            "purl": "pkg:npm/multiparty",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.2.3"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/pbkdf2-password",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.2.1"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.3.0"
          },
          {
            "purl": "pkg:npm/vhost",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~3.0.2"
          }
        ],
        "download_url": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
        "homepage_url": "http://expressjs.com/",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/express",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "6b157f15e22e6ad2de88252cb9750c15",
    "sha1": "cb2b42eac53dcd670f3b5e556c9365c33b13fa6c",
    "sha256": "2cd424f19ed994070c827b5448a3bc5fbee955bbbe81aff28204d8c5a5a89ebb",
    "sha512": "",
    "sha1_git": "0996637deaa0c79b2a7503f1ce06f22608eba8cc",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/finalhandler-1.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/finalhandler@1.2.0?uuid=4642a6d2-007f-463c-883d-b6e927da84eb"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1207,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "finalhandler",
        "purl": "pkg:npm/finalhandler@1.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/pillarjs/finalhandler",
        "version": "1.2.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Node.js final http responder",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/finalhandler/1.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/debug",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.6.9"
          },
          {
            "purl": "pkg:npm/encodeurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.2"
          },
          {
            "purl": "pkg:npm/escape-html",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.3"
          },
          {
            "purl": "pkg:npm/on-finished",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/parseurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.3.3"
          },
          {
            "purl": "pkg:npm/statuses",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.1"
          },
          {
            "purl": "pkg:npm/unpipe",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/readable-stream",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.6"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.2.2"
          }
        ],
        "download_url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/finalhandler",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "3d09ac571e0b6eaf8fdb9806118b6d30",
    "sha1": "eb758bb6a7d3e4f32f0fa2f941265678539e74f1",
    "sha256": "243d853d4386c4132508ae9a99e5176b25be7f5cb6967bc1bab241f20e937e72",
    "sha512": "",
    "sha1_git": "16bf11ed7c1b662723c6d7d68a20a779ba7eb6a8",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/forwarded-0.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/forwarded@0.2.0?uuid=6412f2d2-7262-416e-aa7c-937fc9fced79"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1150,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "forwarded",
        "purl": "pkg:npm/forwarded@0.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/forwarded",
        "version": "0.2.0",
        "keywords": [
          "x-forwarded-for",
          "http",
          "req"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Parse HTTP X-Forwarded-For header",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/forwarded/0.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.27.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.23.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.3.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.4.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/forwarded",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "e7df15eb8d27abec5607f111411a9df1",
    "sha1": "5d558cad52024d41373ae030c0d7ff67e8dfd7fe",
    "sha256": "550a78f64b6a76bc353d6a10152af5750613d0d910f8478943176c1a6196158a",
    "sha512": "",
    "sha1_git": "bf9c7d6550b4efceee2f6f55350860097b218a0a",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/fresh-0.5.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/fresh@0.5.2?uuid=209f5e79-f101-492d-b8e7-6a9297210d5a"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1357,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "fresh",
        "purl": "pkg:npm/fresh@0.5.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://tjholowaychuk.com",
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/fresh",
        "version": "0.5.2",
        "keywords": [
          "fresh",
          "http",
          "conditional",
          "cache"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "HTTP response freshness testing",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/fresh/0.5.2",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.19.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.7.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0-beta.6"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.21.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/fresh",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "193849cf18966de2814f4f6e85740069",
    "sha1": "6d90f7658279184066c5ee790cfa3dde6921951b",
    "sha256": "65f8ebd91560a3a6143f06bd9066d337bcf5f0c53e4a5329b98894f24eefb8b1",
    "sha512": "",
    "sha1_git": "c2fa0f4870b44895b8d59f1de9d14da0319f5793",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/function-bind-1.1.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/function-bind@1.1.2?uuid=c32ba07c-2012-42a0-ba67-ac486fa7363d"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2262,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "function-bind",
        "purl": "pkg:npm/function-bind@1.1.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Raynos",
            "role": "author",
            "type": "person",
            "email": "raynos2@gmail.com"
          },
          {
            "url": null,
            "name": "Raynos",
            "role": "contributor",
            "type": "person",
            "email": null
          },
          {
            "url": "https://github.com/ljharb",
            "name": "Jordan Harband",
            "role": "contributor",
            "type": "person",
            "email": null
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/Raynos/function-bind.git",
        "version": "1.1.2",
        "keywords": [
          "function",
          "bind",
          "shim",
          "es5"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Implementation of Function.prototype.bind",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/function-bind/1.1.2",
        "dependencies": [
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.0"
          },
          {
            "purl": "pkg:npm/aud",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.3"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.4.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.7.1"
          }
        ],
        "download_url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
        "homepage_url": "https://github.com/Raynos/function-bind",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/Raynos/function-bind/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/function-bind",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "325c50acb9dd3d834589c1aeb318c9a8",
    "sha1": "1fdcd92c6ad33cfab1c556504198e29a38759a7c",
    "sha256": "edb1c4faf4148e6e3d74ed8dbac1a1dc359a647ff4207aad4851396dc7a3559a",
    "sha512": "",
    "sha1_git": "618596389779061eb7f6f34edc61add4a517ca4f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-intrinsic-1.3.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/get-intrinsic@1.3.0?uuid=e94f6b61-3954-4a7b-b6ae-43654e222c37"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2576,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "get-intrinsic",
        "purl": "pkg:npm/get-intrinsic@1.3.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/get-intrinsic.git",
        "version": "1.3.0",
        "keywords": [
          "javascript",
          "ecmascript",
          "es",
          "js",
          "intrinsic",
          "getintrinsic",
          "es-abstract"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Get and robustly cache all JS language-level intrinsics at first require time",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/get-intrinsic/1.3.0",
        "dependencies": [
          {
            "purl": "pkg:npm/call-bind-apply-helpers",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/es-define-property",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/es-object-atoms",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.1"
          },
          {
            "purl": "pkg:npm/function-bind",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.2"
          },
          {
            "purl": "pkg:npm/get-proto",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/gopd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/has-symbols",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/hasown",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^2.0.2"
          },
          {
            "purl": "pkg:npm/math-intrinsics",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/call-bound",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.3"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/es-abstract",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.23.9"
          },
          {
            "purl": "pkg:npm/es-value-fixtures",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.7.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.5"
          },
          {
            "purl": "pkg:npm/make-async-function",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.0"
          },
          {
            "purl": "pkg:npm/make-async-generator-function",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.0"
          },
          {
            "purl": "pkg:npm/make-generator-function",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/mock-property",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.4"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
        "homepage_url": "https://github.com/ljharb/get-intrinsic#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/get-intrinsic/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/get-intrinsic",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "d14470b60f84265c205a24856bb673fb",
    "sha1": "43046e9d01abc17bd97dcfc2dd8fa25bf8f8619c",
    "sha256": "45b14763baacc59b0fd7b39e3ad983d5d2aaf7f5ed682f2fce9edb469826c999",
    "sha512": "",
    "sha1_git": "2828e736c2c67960628ff7ad82e69bb778f2242c",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/get-proto-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/get-proto@1.0.1?uuid=91f32caa-3d43-4b26-b677-3a9f27b664a6"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2176,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "get-proto",
        "purl": "pkg:npm/get-proto@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/get-proto.git",
        "version": "1.0.1",
        "keywords": [
          "get",
          "proto",
          "prototype",
          "getPrototypeOf",
          "[[Prototype]]"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Robustly get the [[Prototype]] of an object",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/get-proto/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/dunder-proto",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/es-object-atoms",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.0"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.2"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.3"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.0"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
        "homepage_url": "https://github.com/ljharb/get-proto#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/get-proto/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/get-proto",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "1b03290772697797c448341d51a5f0e7",
    "sha1": "6dbd8c5f598b42b9445a7958c5749122e09158d4",
    "sha256": "73839e012ac7134a632c9d9fc6bdb700ac9ab5553cce39eb789ba2b65663e734",
    "sha512": "",
    "sha1_git": "9c35cec93a5697a6c0858b8bbf8092c9dcca27ee",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/gopd-1.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/gopd@1.2.0?uuid=05cc754b-05ad-42a6-b819-122932545266"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2070,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "gopd",
        "purl": "pkg:npm/gopd@1.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/gopd.git",
        "version": "1.2.0",
        "keywords": [
          "ecmascript",
          "javascript",
          "getownpropertydescriptor",
          "property",
          "descriptor"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/gopd/1.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.0"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
        "homepage_url": "https://github.com/ljharb/gopd#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/gopd/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/gopd",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "572257a2cde0f2ee4c5a5eb77fca43f5",
    "sha1": "682b4b77bd041501546a485298d662b1a54de702",
    "sha256": "33ace32dc861f6da9d1fd9d0a44c66e8c6ff3b13358d070683c1c2978ff5f19f",
    "sha512": "",
    "sha1_git": "01c5ffa632971171f69bd06cf866d4a3be0db124",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/hasown-2.0.3/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/hasown@2.0.3?uuid=3b5f3751-f840-4603-86c6-b18cde78cdb4",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2283,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "hasown",
        "purl": "pkg:npm/hasown@2.0.3",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/inspect-js/hasOwn.git",
        "version": "2.0.3",
        "keywords": [
          "has",
          "hasOwnProperty",
          "hasOwn",
          "has-own",
          "own",
          "has",
          "property",
          "in",
          "javascript",
          "ecmascript"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A robust, ES3 compatible, \"has own property\" predicate.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/hasown/2.0.3",
        "dependencies": [
          {
            "purl": "pkg:npm/function-bind",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.2"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.18.2"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^22.2.2"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.2"
          },
          {
            "purl": "pkg:npm/%40types/function-bind",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.10"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.2.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/jiti",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.0"
          },
          {
            "purl": "pkg:npm/mock-property",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.5"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
        "homepage_url": "https://github.com/inspect-js/hasOwn#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/inspect-js/hasOwn/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/hasown",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "74c7d44f5155d6f63c6a356644cdffce",
    "sha1": "5221fc7eb2ef1f25edc665579aac82a8445062b3",
    "sha256": "0e7437fae8ec34f1d908723882b99919c749d8c0953d9afa38d2674154bdd0e6",
    "sha512": "",
    "sha1_git": "0537b66a065f400743a79891d0e9e60764ac8d57",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/has-symbols-1.1.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/has-symbols@1.1.0?uuid=bc1c3aeb-6e19-4f13-8d32-eec59c79c668",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2974,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "has-symbols",
        "purl": "pkg:npm/has-symbols@1.1.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://ljharb.codes",
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          },
          {
            "url": "http://ljharb.codes",
            "name": "Jordan Harband",
            "role": "contributor",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/inspect-js/has-symbols.git",
        "version": "1.1.0",
        "keywords": [
          "Symbol",
          "symbols",
          "typeof",
          "sham",
          "polyfill",
          "native",
          "core-js",
          "ES6"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/has-symbols/1.1.0",
        "dependencies": [
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.0"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.0"
          },
          {
            "purl": "pkg:npm/%40types/core-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.8"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/core-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.6.12"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/get-own-property-symbols",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.9.5"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
        "homepage_url": "https://github.com/ljharb/has-symbols#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/has-symbols/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/has-symbols",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "88b5a1b52126cdfb1e60dd57a3b2eff6",
    "sha1": "8e49a565463e9e23d9c32d8ccc18009321af19bf",
    "sha256": "5190268c0e3308d7446d1f7c036238f329f786938453e6017cb90980b3612e7a",
    "sha512": "",
    "sha1_git": "d835e20b957be00d24b62cfc3e7243cc9f133ca2",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/http-errors-2.0.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/http-errors@2.0.0?uuid=875a8888-185e-4f9d-95a2-89490e31edcf"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1314,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "http-errors",
        "purl": "pkg:npm/http-errors@2.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "author",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Alan Plum",
            "role": "contributor",
            "type": "person",
            "email": "me@pluma.io"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/http-errors",
        "version": "2.0.0",
        "keywords": [
          "http",
          "error"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Create HTTP error objects",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/http-errors/2.0.0",
        "dependencies": [
          {
            "purl": "pkg:npm/depd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/inherits",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.4"
          },
          {
            "purl": "pkg:npm/setprototypeof",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/statuses",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.1"
          },
          {
            "purl": "pkg:npm/toidentifier",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.3"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.1.3"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/http-errors",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "f44e01d2e815367806c58207ac92a5fc",
    "sha1": "bcb1768525f7f5e1af75c272867bfed66dd983c7",
    "sha256": "dda88273810ec9e624bf08d4815cb6aa4007135bf98ce11706d2e1b2f2a6690a",
    "sha512": "",
    "sha1_git": "4cb6d7edad5952ce18bc5d1a65483a1da82a485b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/iconv-lite-0.4.24/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/iconv-lite@0.4.24?uuid=b6c31691-f7f9-4f4b-9878-a8de021f7e63"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1227,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "iconv-lite",
        "purl": "pkg:npm/iconv-lite@0.4.24",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Alexander Shtuchkin",
            "role": "author",
            "type": "person",
            "email": "ashtuchkin@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/ashtuchkin/iconv-lite.git",
        "version": "0.4.24",
        "keywords": [
          "iconv",
          "convert",
          "charset",
          "icu"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">=0.10.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Convert character encodings in pure javascript.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/iconv-lite/0.4.24",
        "dependencies": [
          {
            "purl": "pkg:npm/safer-buffer",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": ">= 2.1.2 < 3"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.1.0"
          },
          {
            "purl": "pkg:npm/request",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~2.87.0"
          },
          {
            "purl": "pkg:npm/unorm",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/errto",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/async",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/semver",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/iconv",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          }
        ],
        "download_url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
        "homepage_url": "https://github.com/ashtuchkin/iconv-lite",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ashtuchkin/iconv-lite/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/iconv-lite",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "a8b97f25878ddc5419a9afe173037035",
    "sha1": "a1e76edb6428e44345ed3851ff7af5d850434cf5",
    "sha256": "6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384",
    "sha512": "",
    "sha1_git": "a7c74fcc299d744ce6cec7dc79023475d29f4673",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/inherits-2.0.4/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/inherits@2.0.4?uuid=c5101a49-1a85-4367-b516-36cad18a3e9a",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 581,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "inherits",
        "purl": "pkg:npm/inherits@2.0.4",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "git://github.com/isaacs/inherits",
        "version": "2.0.4",
        "keywords": [
          "inheritance",
          "class",
          "klass",
          "oop",
          "object-oriented",
          "inherits",
          "browser",
          "browserify"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/inherits/2.0.4",
        "dependencies": [
          {
            "purl": "pkg:npm/tap",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^14.2.4"
          }
        ],
        "download_url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "ISC",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-isc-9931cb7ad33c2eb18f322c94660b670a84186baa",
                "license_expression": "isc",
                "license_expression_spdx": "ISC"
              }
            ],
            "identifier": "isc-6c4320cc-eb5b-3792-8c56-b8565fff1119",
            "license_expression": "isc",
            "license_expression_spdx": "ISC"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/inherits",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "isc",
        "extracted_license_statement": "- ISC\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "ISC"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "f73908dab55d4259f3ed052ce9fb2fbb",
    "sha1": "62b11dd736a0047fbd8d2dc0406d2118a549a359",
    "sha256": "be645800bc94fd8de29c8ae91690549b316cc437100108aeea7b2f347693cc80",
    "sha512": "",
    "sha1_git": "37b4366b83e63e037cd447090ec25b39fce27e01",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ipaddr.js-1.9.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/ipaddr.js@1.9.1?uuid=408f2393-cd52-4156-9603-a70a12f59f32"
    ],
    "tag": "",
    "extension": ".json",
    "size": 719,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "ipaddr.js",
        "purl": "pkg:npm/ipaddr.js@1.9.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "whitequark",
            "role": "author",
            "type": "person",
            "email": "whitequark@whitequark.org"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/whitequark/ipaddr.js",
        "version": "1.9.1",
        "keywords": [
          "ip",
          "ipv4",
          "ipv6"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.10"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/ipaddr.js/1.9.1",
        "dependencies": [
          {
            "purl": "pkg:npm/coffee-script",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~1.12.6"
          },
          {
            "purl": "pkg:npm/nodeunit",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.11.3"
          },
          {
            "purl": "pkg:npm/uglify-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~3.0.19"
          }
        ],
        "download_url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/ipaddr.js",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "17bc176c8d78f76c5e70cad7ba16a598",
    "sha1": "532be044ce57a9f81fed35f3742767f587cfbc95",
    "sha256": "fc1071893728a0e78fa40ce0dbe04c5a1021179fdcb5b229f274e3556d6a87cd",
    "sha512": "",
    "sha1_git": "f4d35475d17abd96f03b0e1133258703b284c785",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/bower.json",
    "type": "file",
    "name": "bower.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/jquery@3.3.1?uuid=fd1b2544-f649-46b1-9eca-e6f6e0ae5e74",
      "pkg:bower/jquery?uuid=ebd60dac-8a84-4e26-9eac-8605fb117620",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 190,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "jquery",
        "purl": "pkg:bower/jquery",
        "sha1": null,
        "size": null,
        "type": "bower",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": null,
        "keywords": [
          "jquery",
          "javascript",
          "browser",
          "library"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": null,
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "bower_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": null,
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "MIT",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5dc00f10d3c2752e1a1d6f27abbc2062",
    "sha1": "000530ba7ab5ff636b103baf460e5fb7035ee5d0",
    "sha256": "80e3898ee933347b9f9a84c3d95d377b3f3cc64423f9a54df7d3c6d45a6aad5a",
    "sha512": "",
    "sha1_git": "95798d5ada6dc0bb3d3d1799a2fdfbe489ed3e18",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/jquery-3.3.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/jquery@3.3.1?uuid=fd1b2544-f649-46b1-9eca-e6f6e0ae5e74",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2811,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "jquery",
        "purl": "pkg:npm/jquery@3.3.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "https://github.com/jquery/jquery/blob/3.3.1/AUTHORS.txt",
            "name": "JS Foundation and other contributors",
            "role": "author",
            "type": "person",
            "email": null
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/jquery/jquery.git",
        "version": "3.3.1",
        "keywords": [
          "jquery",
          "javascript",
          "browser",
          "library"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "JavaScript library for DOM operations",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/jquery/3.3.1",
        "dependencies": [
          {
            "purl": "pkg:npm/babel-core",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.0.0-beta.0"
          },
          {
            "purl": "pkg:npm/babel-plugin-transform-es2015-for-of",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.0.0-beta.0"
          },
          {
            "purl": "pkg:npm/commitplease",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.7.10"
          },
          {
            "purl": "pkg:npm/core-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/eslint-config-jquery",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/grunt",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/grunt-babel",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.0.0"
          },
          {
            "purl": "pkg:npm/grunt-cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/grunt-compare-size",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.2"
          },
          {
            "purl": "pkg:npm/grunt-contrib-uglify",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.1"
          },
          {
            "purl": "pkg:npm/grunt-contrib-watch",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/grunt-eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "20.0.0"
          },
          {
            "purl": "pkg:npm/grunt-git-authors",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.2.0"
          },
          {
            "purl": "pkg:npm/grunt-jsonlint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.0"
          },
          {
            "purl": "pkg:npm/grunt-karma",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/grunt-newer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.3.0"
          },
          {
            "purl": "pkg:npm/grunt-npmcopy",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.1.0"
          },
          {
            "purl": "pkg:npm/gzip-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.2"
          },
          {
            "purl": "pkg:npm/husky",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.14.3"
          },
          {
            "purl": "pkg:npm/insight",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.8.4"
          },
          {
            "purl": "pkg:npm/jsdom",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.6.1"
          },
          {
            "purl": "pkg:npm/karma",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.7.0"
          },
          {
            "purl": "pkg:npm/karma-browserstack-launcher",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.3.0"
          },
          {
            "purl": "pkg:npm/karma-chrome-launcher",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.0"
          },
          {
            "purl": "pkg:npm/karma-firefox-launcher",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/karma-qunit",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.2.1"
          },
          {
            "purl": "pkg:npm/load-grunt-tasks",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.2"
          },
          {
            "purl": "pkg:npm/native-promise-only",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.8.1"
          },
          {
            "purl": "pkg:npm/promises-aplus-tests",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.2"
          },
          {
            "purl": "pkg:npm/q",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.5.0"
          },
          {
            "purl": "pkg:npm/qunit-assert-step",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.3"
          },
          {
            "purl": "pkg:npm/qunitjs",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.23.1"
          },
          {
            "purl": "pkg:npm/raw-body",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.0"
          },
          {
            "purl": "pkg:npm/requirejs",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.3"
          },
          {
            "purl": "pkg:npm/sinon",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.7"
          },
          {
            "purl": "pkg:npm/sizzle",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.3"
          },
          {
            "purl": "pkg:npm/strip-json-comments",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.0.1"
          },
          {
            "purl": "pkg:npm/testswarm",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.0"
          },
          {
            "purl": "pkg:npm/uglify-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.3.4"
          }
        ],
        "download_url": "https://registry.npmjs.org/jquery/-/jquery-3.3.1.tgz",
        "homepage_url": "https://jquery.com",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/jquery/jquery/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/jquery/-/jquery-3.3.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/jquery",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "11a694dc833bbff1faef417a6859eec7",
    "sha1": "39250c508315cd2440a0b5a0375eaadf5ae765e3",
    "sha256": "2b914e2ea558978f08ffe2c12d34c28a254607198a2c7a14eeb7c421f8b28248",
    "sha512": "",
    "sha1_git": "edd4385cba13579ab7835b281e206081e8ee9dbe",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/js-tokens-4.0.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/js-tokens@4.0.0?uuid=8088b3d1-41ff-4328-88ea-732f2777b10b"
    ],
    "tag": "",
    "extension": ".json",
    "size": 649,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "js-tokens",
        "purl": "pkg:npm/js-tokens@4.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Simon Lydell",
            "role": "author",
            "type": "person",
            "email": null
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/lydell/js-tokens",
        "version": "4.0.0",
        "keywords": [
          "JavaScript",
          "js",
          "token",
          "tokenize",
          "regex"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A regex that tokenizes JavaScript.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/js-tokens/4.0.0",
        "dependencies": [
          {
            "purl": "pkg:npm/coffeescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.1"
          },
          {
            "purl": "pkg:npm/esprima",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.0"
          },
          {
            "purl": "pkg:npm/everything.js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.3"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.0.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/js-tokens",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "022ec03d76e85da58a8ad1134290dfdf",
    "sha1": "6704feb8cbaf803288d9185a2fc86017e24ba55b",
    "sha256": "47345931827b3e26db9fe690abb81f856a0d040cbca8af1e69711a64cd58ce0d",
    "sha512": "",
    "sha1_git": "66752fab275101253f6ff42463b8765ad9e3ae41",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/lodash-4.17.20/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/lodash@4.17.20?uuid=96e46a60-5f50-44bf-9d2e-249c9858e63f"
    ],
    "tag": "",
    "extension": ".json",
    "size": 578,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "lodash",
        "purl": "pkg:npm/lodash@4.17.20",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "John-David Dalton",
            "role": "author",
            "type": "person",
            "email": "john.david.dalton@gmail.com"
          },
          {
            "url": null,
            "name": "John-David Dalton",
            "role": "contributor",
            "type": "person",
            "email": "john.david.dalton@gmail.com"
          },
          {
            "url": null,
            "name": "Mathias Bynens",
            "role": "contributor",
            "type": "person",
            "email": "mathias@qiwi.be"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/lodash/lodash",
        "version": "4.17.20",
        "keywords": [
          "modules",
          "stdlib",
          "util"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Lodash modular utilities.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/lodash/4.17.20",
        "dependencies": [],
        "download_url": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
        "homepage_url": "https://lodash.com/",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/lodash",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "19bfdc7796cc0778ad4bb5285dc112b2",
    "sha1": "f95a2cf4038f0d4b9ecd2db53f6e5779a29552e8",
    "sha256": "a31f975e12af9f665ce76e3dcc00a83fb94d13b601e49c1afa4e3390bbe8b6b3",
    "sha512": "",
    "sha1_git": "2539c2434cb7414d83da7047fe8481047d2a83bc",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/loose-envify-1.4.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/loose-envify@1.4.0?uuid=8c545991-c51b-49be-a047-fbf0e84d5c7a"
    ],
    "tag": "",
    "extension": ".json",
    "size": 809,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "loose-envify",
        "purl": "pkg:npm/loose-envify@1.4.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Andres Suarez",
            "role": "author",
            "type": "person",
            "email": "zertosh@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/zertosh/loose-envify.git",
        "version": "1.4.0",
        "keywords": [
          "environment",
          "variables",
          "browserify",
          "browserify-transform",
          "transform",
          "source",
          "configuration"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/loose-envify/1.4.0",
        "dependencies": [
          {
            "purl": "pkg:npm/js-tokens",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^3.0.0 || ^4.0.0"
          },
          {
            "purl": "pkg:npm/browserify",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^13.1.1"
          },
          {
            "purl": "pkg:npm/envify",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^3.4.0"
          },
          {
            "purl": "pkg:npm/tap",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.0.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
        "homepage_url": "https://github.com/zertosh/loose-envify",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/loose-envify",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "2bbdb6b2066f71f8f75648c3eef42042",
    "sha1": "2162096bfa92a2ab1ab7bcde6fe70e590adb7eaf",
    "sha256": "8c2e27dae366396ced36fe0f7c6d35d71a1440fd8e82df5f2005a5297888a0d4",
    "sha512": "",
    "sha1_git": "5e3d0e2777f624f77263be28d31a8fa7d50c8157",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/math-intrinsics-1.1.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/math-intrinsics@1.1.0?uuid=074d8cda-1abd-4f72-9ce7-a2cc284fca65"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2670,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "math-intrinsics",
        "purl": "pkg:npm/math-intrinsics@1.1.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/es-shims/math-intrinsics.git",
        "version": "1.1.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "ES Math-related intrinsics and helpers, robustly cached.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/math-intrinsics/1.1.0",
        "dependencies": [
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.3"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.0"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/es-value-fixtures",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.5.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.3"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.3"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
        "homepage_url": "https://github.com/es-shims/math-intrinsics#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/es-shims/math-intrinsics/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/math-intrinsics",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "40f7cbef6bf0d73ee2864c7191056cd1",
    "sha1": "017b2996c50a49f073f75e2cb92b61b9d4258bce",
    "sha256": "39d74aa5a354153130706286dd60a2d8409ce0c8f66546eff2edcac0afff17e1",
    "sha512": "",
    "sha1_git": "067627354b768e180e286f8c2efdb0c35a188e52",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/media-typer-0.3.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/media-typer@0.3.0?uuid=bee0fa90-2966-4596-b4f8-54a1d0315513"
    ],
    "tag": "",
    "extension": ".json",
    "size": 759,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "media-typer",
        "purl": "pkg:npm/media-typer@0.3.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/media-typer",
        "version": "0.3.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Simple RFC 6838 media type parser and formatter",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/media-typer/0.3.0",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.2"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~1.21.4"
          },
          {
            "purl": "pkg:npm/should",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "~4.0.4"
          }
        ],
        "download_url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/media-typer",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "127ce4abeb265c6eef7b45540241ca91",
    "sha1": "866c9ea28a167b6800da67cdbe18cc9f0ec5cbab",
    "sha256": "8ccf875e488e700b79ec48386e2f47c51c5f26297ec74e5e4e5d92dc5d70ef30",
    "sha512": "",
    "sha1_git": "8cf3ebcd775f0f5977bd2f590c5e91893e58c733",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/merge-descriptors-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/merge-descriptors@1.0.1?uuid=c6c98ed4-6926-4a54-9128-069eb7c7ec08",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 931,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "merge-descriptors",
        "purl": "pkg:npm/merge-descriptors@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "author",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "Mike Grabowski",
            "role": "contributor",
            "type": "person",
            "email": "grabbou@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/component/merge-descriptors",
        "version": "1.0.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Merge objects using descriptors",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/merge-descriptors/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.21.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/merge-descriptors",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "570e06d8ce0167e07a32ba70fdd56795",
    "sha1": "39dc652dfa419d46d6fed0835444c603c57077f8",
    "sha256": "45ebe570483c48b6460767fc4a0bb69e4dee4bf4becc645b0e0627172a30a580",
    "sha512": "",
    "sha1_git": "514cdbd814cdd4709ccad66d059a8e66ff134c25",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/methods-1.1.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/methods@1.1.2?uuid=ae48eed2-0527-4c7e-a95f-dbf6dfb54703"
    ],
    "tag": "",
    "extension": ".json",
    "size": 947,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "methods",
        "purl": "pkg:npm/methods@1.1.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": "http://tjholowaychuk.com",
            "name": "TJ Holowaychuk",
            "role": "contributor",
            "type": "person",
            "email": "tj@vision-media.ca"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/methods",
        "version": "1.1.2",
        "keywords": [
          "http",
          "methods"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "HTTP methods that node supports",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/methods/1.1.2",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.21.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/methods",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "8a9cbead0f83bf845207ad21534dfdfa",
    "sha1": "93fab7b874afa4232986a2cab9a7e900b5eaee5a",
    "sha256": "1aea21641646c87a589208a9363141cd2acd503db45c635f8217613c45837c09",
    "sha512": "",
    "sha1_git": "c4ce6f053c68581068898fd2a4be53a861e5b1b5",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-1.6.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/mime@1.6.0?uuid=78ecbd24-4875-49da-918b-d453987eb06a",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 933,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "mime",
        "purl": "pkg:npm/mime@1.6.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://github.com/broofa",
            "name": "Robert Kieffer",
            "role": "author",
            "type": "person",
            "email": "robert@broofa.com"
          },
          {
            "url": "http://github.com/bentomas",
            "name": "Benjamin Thomas",
            "role": "contributor",
            "type": "person",
            "email": "benjamin@benjaminthomas.org"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/broofa/node-mime",
        "version": "1.6.0",
        "keywords": [
          "util",
          "mime"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">=4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A comprehensive library for mime-type mapping",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/mime/1.6.0",
        "dependencies": [
          {
            "purl": "pkg:npm/github-release-notes",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.13.1"
          },
          {
            "purl": "pkg:npm/mime-db",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.31.0"
          },
          {
            "purl": "pkg:npm/mime-score",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/mime",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "624ef11f91e60b224942ff81b13d10c6",
    "sha1": "0779ea22afe593a2ec0223d16e9ccb5d0e01e45f",
    "sha256": "f6a871d6ab40d2f2945d626a4d75da2fce78a35737c0870a0a4da9bee43f9d4e",
    "sha512": "",
    "sha1_git": "6bd24bc53c1a7067b60f43e559d1739d138b987f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-db-1.52.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/mime-db@1.52.0?uuid=60e93430-2dc8-42ff-bf29-3af226f07288"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1624,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "mime-db",
        "purl": "pkg:npm/mime-db@1.52.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": "http://github.com/broofa",
            "name": "Robert Kieffer",
            "role": "contributor",
            "type": "person",
            "email": "robert@broofa.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/mime-db",
        "version": "1.52.0",
        "keywords": [
          "mime",
          "db",
          "type",
          "types",
          "database",
          "charset",
          "charsets"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Media Type Database",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/mime-db/1.52.0",
        "dependencies": [
          {
            "purl": "pkg:npm/bluebird",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.7.2"
          },
          {
            "purl": "pkg:npm/co",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.6.0"
          },
          {
            "purl": "pkg:npm/cogent",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/csv-parse",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.16.3"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/gnode",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.1.2"
          },
          {
            "purl": "pkg:npm/media-typer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/raw-body",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.5.0"
          },
          {
            "purl": "pkg:npm/stream-to-array",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/mime-db",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "12c5cd5cfa1d4f45af207db1715d4b70",
    "sha1": "192a69685a32f1ccc5df8a54ea0f117c48bd87f1",
    "sha256": "d03e37b915a050af548d543f4e45ff5de06ec767c19e745f18c431d9dc26b5bf",
    "sha512": "",
    "sha1_git": "32c14b846848a5627421f0fb4fb3108ad5183d76",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/mime-types-2.1.35/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/mime-types@2.1.35?uuid=94f09f7e-b863-4f37-95c6-b1aea7dc9105",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1149,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "mime-types",
        "purl": "pkg:npm/mime-types@2.1.35",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "https://searchbeam.jit.su",
            "name": "Jeremiah Senkpiel",
            "role": "contributor",
            "type": "person",
            "email": "fishrock123@rocketmail.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/mime-types",
        "version": "2.1.35",
        "keywords": [
          "mime",
          "types"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "The ultimate javascript content-type utility.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/mime-types/2.1.35",
        "dependencies": [
          {
            "purl": "pkg:npm/mime-db",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.52.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/mime-types",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "7ad9a6119e3173ea667f1409fefba992",
    "sha1": "ee2c9eae301358bf7d646b5b7ede6c28fed4bf96",
    "sha256": "5053cc10259c3913ab6b6c8f13170a619c0d1836c1d9081238329a559fafeb3a",
    "sha512": "",
    "sha1_git": "bbef6964509e73f95e5b390b3923f919c72b6528",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.0.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/ms@2.0.0?uuid=e5ebd937-a718-4987-8e2d-d26d248f0352"
    ],
    "tag": "",
    "extension": ".json",
    "size": 704,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "ms",
        "purl": "pkg:npm/ms@2.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "https://github.com/zeit/ms",
        "version": "2.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Tiny milisecond conversion utility",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/ms/2.0.0",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.19.0"
          },
          {
            "purl": "pkg:npm/expect.js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.1"
          },
          {
            "purl": "pkg:npm/husky",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.13.3"
          },
          {
            "purl": "pkg:npm/lint-staged",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.4.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.4.1"
          }
        ],
        "download_url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/ms",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "cbd55880a650b56c3d5acddbbdbee9bc",
    "sha1": "4d354da7ece1c7d5689b8104f3b6f3dcbac7790e",
    "sha256": "30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c",
    "sha512": "",
    "sha1_git": "6a31c81fac435ac31d4a802a275128f6a49c4c0c",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/ms-2.1.3/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/ms@2.1.3?uuid=237fc36f-e30d-488d-afc4-f657068218dc"
    ],
    "tag": "",
    "extension": ".json",
    "size": 732,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "ms",
        "purl": "pkg:npm/ms@2.1.3",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "https://github.com/vercel/ms",
        "version": "2.1.3",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Tiny millisecond conversion utility",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/ms/2.1.3",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.18.2"
          },
          {
            "purl": "pkg:npm/expect.js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.1"
          },
          {
            "purl": "pkg:npm/husky",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.14.3"
          },
          {
            "purl": "pkg:npm/lint-staged",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.0.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.1"
          },
          {
            "purl": "pkg:npm/prettier",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.0.5"
          }
        ],
        "download_url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/ms",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "a682078f64a677ddad1f50307a14b678",
    "sha1": "c290eb97736177176d071da4ac855ab995685c97",
    "sha256": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40",
    "sha512": "",
    "sha1_git": "49971890df8e2b9a4a5f4909fbd6678b862d8a50",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/negotiator-0.6.3/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/negotiator@0.6.3?uuid=84fab394-e00c-4dda-a4d3-2464bb139c79"
    ],
    "tag": "",
    "extension": ".json",
    "size": 993,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "negotiator",
        "purl": "pkg:npm/negotiator@0.6.3",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "Federico Romero",
            "role": "contributor",
            "type": "person",
            "email": "federico.romero@outboxlabs.com"
          },
          {
            "url": "http://blog.izs.me/",
            "name": "Isaac Z. Schlueter",
            "role": "contributor",
            "type": "person",
            "email": "i@izs.me"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/negotiator",
        "version": "0.6.3",
        "keywords": [
          "http",
          "content negotiation",
          "accept",
          "accept-language",
          "accept-encoding",
          "accept-charset"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "HTTP content negotiation",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/negotiator/0.6.3",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.1.3"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/negotiator",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5d2bc8ae77831203c6d0ce3a17e599cf",
    "sha1": "3c1b22e6ecae04b514912326957e6a205b015098",
    "sha256": "8672e91f7395ce51ec789d883d7f7d872a40847bb83a6a3f89c3d1ded39e55d9",
    "sha512": "",
    "sha1_git": "297635f6d34177956186df7c6a7e502ebb576da2",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/object-inspect-1.13.4/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/object-inspect@1.13.4?uuid=e729e70e-206c-4695-bcb6-b917a6942e63"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2841,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "object-inspect",
        "purl": "pkg:npm/object-inspect@1.13.4",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://substack.net",
            "name": "James Halliday",
            "role": "author",
            "type": "person",
            "email": "mail@substack.net"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/inspect-js/object-inspect.git",
        "version": "1.13.4",
        "keywords": [
          "inspect",
          "util.inspect",
          "object",
          "stringify",
          "pretty"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "string representations of objects in node and the browser",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/object-inspect/1.13.4",
        "dependencies": [
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40pkgjs/support",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.6"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/core-js",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.6.12"
          },
          {
            "purl": "pkg:npm/error-cause",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.8"
          },
          {
            "purl": "pkg:npm/es-value-fixtures",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.7.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.4"
          },
          {
            "purl": "pkg:npm/functions-have-names",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.3"
          },
          {
            "purl": "pkg:npm/glob",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=10.3.7"
          },
          {
            "purl": "pkg:npm/globalthis",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.4"
          },
          {
            "purl": "pkg:npm/has-symbols",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/has-tostringtag",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/jackspeak",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=2.1.1"
          },
          {
            "purl": "pkg:npm/make-arrow-function",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.0"
          },
          {
            "purl": "pkg:npm/mock-property",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/safer-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.1.2"
          },
          {
            "purl": "pkg:npm/semver",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^6.3.1"
          },
          {
            "purl": "pkg:npm/string.prototype.repeat",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
        "homepage_url": "https://github.com/inspect-js/object-inspect",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/object-inspect",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "f73862261b324cc311be5257a7adb1ad",
    "sha1": "f59a216249b68601d6e44515c4f9188a2110cc50",
    "sha256": "21c5c63f653705f44a60f5fe93752b231caf6ff07b01805740bd89b71b2d6d8a",
    "sha512": "",
    "sha1_git": "9fd97ff7523f106de04c47adf74aa3a36db8dbbd",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/on-finished-2.4.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/on-finished@2.4.1?uuid=e6e5d07e-195a-4c4e-8d28-a6c61084e645"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1057,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "on-finished",
        "purl": "pkg:npm/on-finished@2.4.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/on-finished",
        "version": "2.4.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Execute a callback when a request closes, finishes, or errors",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/on-finished/2.4.1",
        "dependencies": [
          {
            "purl": "pkg:npm/ee-first",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.1.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/on-finished",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "436846dd0f4348ac2ee93c9c5eb291e4",
    "sha1": "777e9cd400b42dee1199eacfb325876caeaff3cc",
    "sha256": "c812eca4b0dee2317cb446124cb27ae8e5b993c8fdd0144886b629ef6ef53fc1",
    "sha512": "",
    "sha1_git": "644cd814b9d745714e4d16753de8bc8856e201e4",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/parseurl-1.3.3/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/parseurl@1.3.3?uuid=e5d3b846-f601-4b39-b340-c214b644f969"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1180,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "parseurl",
        "purl": "pkg:npm/parseurl@1.3.3",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/pillarjs/parseurl",
        "version": "1.3.3",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "parse a url with memoization",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/parseurl/1.3.3",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.16.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "12.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.17.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.0"
          },
          {
            "purl": "pkg:npm/fast-url-parser",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.3"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.1.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/parseurl",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5b1493bd775444f0994d0b1063db1900",
    "sha1": "646dc756ff16c464fcb63e17b2cd5ee4ad4f8b66",
    "sha256": "98c7b953c844cac7c0be2d5abc6559c6fd3a6075fd159b04c0f1bf46145bfed2",
    "sha512": "",
    "sha1_git": "6b443ca7a84aa09444101a104dd8f8946dc9fa58",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/path-to-regexp-0.1.7/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/path-to-regexp@0.1.7?uuid=b814c0fb-0d0a-46a8-a575-a9ff38987f68"
    ],
    "tag": "",
    "extension": ".json",
    "size": 554,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "path-to-regexp",
        "purl": "pkg:npm/path-to-regexp@0.1.7",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "git+https://github.com/component/path-to-regexp.git",
        "version": "0.1.7",
        "keywords": [
          "express",
          "regexp"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Express style path to RegExp utility",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/path-to-regexp/0.1.7",
        "dependencies": [
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.17.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.6"
          }
        ],
        "download_url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/path-to-regexp",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "19e58964462995e183c1cd8147a9b8a1",
    "sha1": "ebff0c6723fe9d9817ce3917d350b25e74148b15",
    "sha256": "86272f0b3cd4e2f23aff36f63049a81ff6a10d364b74c6d9ff8cbbac6f7a6638",
    "sha512": "",
    "sha1_git": "d4e51b5743a8a3742825a3418ac3a87e8b3f735f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/proxy-addr-2.0.7/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/proxy-addr@2.0.7?uuid=194635b4-f7b6-48d4-a970-a5de3f94c3c9"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1183,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "proxy-addr",
        "purl": "pkg:npm/proxy-addr@2.0.7",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/proxy-addr",
        "version": "2.0.7",
        "keywords": [
          "ip",
          "proxy",
          "x-forwarded-for"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.10"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Determine address of proxied request",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/proxy-addr/2.0.7",
        "dependencies": [
          {
            "purl": "pkg:npm/forwarded",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.2.0"
          },
          {
            "purl": "pkg:npm/ipaddr.js",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.9.1"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.26.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.23.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.3.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.4.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/proxy-addr",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "9b004d1140b24f5ae3f21fcdba8951fc",
    "sha1": "a04c60d6b2441d6e2a6ebddcab75aa6efc2d1d9c",
    "sha256": "e490a79f8058cbb7c0e9fd3b9977013102b5cbd8d232259b93bb2ebf85834a51",
    "sha512": "",
    "sha1_git": "24ba8f7db3cf17d87cff4bd53977b5239d459f90",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/qs-6.11.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/qs@6.11.0?uuid=dfc48b38-882b-48ea-ab16-9aa6d9f5a9f8",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2317,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "qs",
        "purl": "pkg:npm/qs@6.11.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://ljharb.codes",
            "name": "Jordan Harband",
            "role": "contributor",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/qs.git",
        "version": "6.11.0",
        "keywords": [
          "querystring",
          "qs",
          "query",
          "url",
          "parse",
          "stringify"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">=0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A querystring parser that supports nesting and arrays, with a depth limit",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/qs/6.11.0",
        "dependencies": [
          {
            "purl": "pkg:npm/side-channel",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.4"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.0.0"
          },
          {
            "purl": "pkg:npm/aud",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/browserify",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^16.5.2"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/for-each",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.3"
          },
          {
            "purl": "pkg:npm/has-symbols",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.3"
          },
          {
            "purl": "pkg:npm/iconv-lite",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.5.1"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/mkdirp",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.5.5"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.0"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.12.2"
          },
          {
            "purl": "pkg:npm/qs-iconv",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.4"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/safer-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.1.2"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.5.3"
          }
        ],
        "download_url": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz",
        "homepage_url": "https://github.com/ljharb/qs",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-hash",
                "end_line": 1,
                "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/bsd-new_10.RULE",
                "from_file": null,
                "start_line": 1,
                "matched_text": "BSD-3-Clause",
                "match_coverage": 100.0,
                "matched_length": 3,
                "rule_relevance": 100,
                "rule_identifier": "bsd-new_10.RULE",
                "license_expression": "bsd-new",
                "license_expression_spdx": "BSD-3-Clause"
              }
            ],
            "identifier": "bsd_new-50fa5753-f24d-ec04-33a1-36bb8ac0492c",
            "license_expression": "bsd-new",
            "license_expression_spdx": "BSD-3-Clause"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/qs",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "bsd-new",
        "extracted_license_statement": "- BSD-3-Clause\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "BSD-3-Clause"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "8293830097b45284f0fa44658785c307",
    "sha1": "52165b2ddfee9d5b878020d2663e838536cd92bb",
    "sha256": "1b9fb6e06c92bf2c8944bf2d0139790972c5b68304999699fd197a7ed63876ee",
    "sha512": "",
    "sha1_git": "2ff42f375b878d370a5444146b43e117c0f4d748",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/range-parser-1.2.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/range-parser@1.2.1?uuid=9144f39b-9f92-4234-8709-ad10e2de098c",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1184,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "range-parser",
        "purl": "pkg:npm/range-parser@1.2.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://tjholowaychuk.com",
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "James Wyatt Cready",
            "role": "contributor",
            "type": "person",
            "email": "wyatt.cready@lanetix.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/range-parser",
        "version": "1.2.1",
        "keywords": [
          "range",
          "parser",
          "http"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Range header field string parser",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/range-parser/1.2.1",
        "dependencies": [
          {
            "purl": "pkg:npm/deep-equal",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.1"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.16.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "12.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.17.2"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.1.4"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          }
        ],
        "download_url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/range-parser",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "89b7cc42d2831a8061361ca29545f837",
    "sha1": "e82a50d4be1c57ded40bf39a5232bf5c6dabb46d",
    "sha256": "d0b5f54eaa59001dc86720a9be1fdf653bad83707d70842332fb3e8847f65a89",
    "sha512": "",
    "sha1_git": "abea6d852e9baa772152be996c4a6ed5b2e8e514",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/raw-body-2.5.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/raw-body@2.5.1?uuid=100497b0-3e6a-42f7-8824-31a8d9472b77"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1324,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "raw-body",
        "purl": "pkg:npm/raw-body@2.5.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "author",
            "type": "person",
            "email": "me@jongleberry.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "Raynos",
            "role": "contributor",
            "type": "person",
            "email": "raynos2@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/stream-utils/raw-body",
        "version": "2.5.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Get and validate the raw body of a readable stream.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/raw-body/2.5.1",
        "dependencies": [
          {
            "purl": "pkg:npm/bytes",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "3.1.2"
          },
          {
            "purl": "pkg:npm/http-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/iconv-lite",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.4.24"
          },
          {
            "purl": "pkg:npm/unpipe",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/bluebird",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.7.2"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/readable-stream",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.7"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          }
        ],
        "download_url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/raw-body",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "8783ab409224eae8fc2de800e4383229",
    "sha1": "606efbfa3c8db64733a6cd1dedbe49835c9df7ff",
    "sha256": "64c58ade381869c66cab0fb8258fe6c16d88031500266cb6cbac3d232eacead7",
    "sha512": "",
    "sha1_git": "50fc90ad4135ee618546821bc3a3ad8f1b88a63d",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-18.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/react@18.2.0?uuid=6e2b5257-c260-4d51-8576-d305944c56de"
    ],
    "tag": "",
    "extension": ".json",
    "size": 999,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "react",
        "purl": "pkg:npm/react@18.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "git+https://github.com/facebook/react.git",
        "version": "18.2.0",
        "keywords": [
          "react"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">=0.10.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "React is a JavaScript library for building user interfaces.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/react/18.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/loose-envify",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
        "homepage_url": "https://reactjs.org/",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/facebook/react/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/react",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "8fb832b8e667c8d78ecf4b1f0dac7d61",
    "sha1": "f0f4e8b9e103f241e2c3ab7c0095226ebc53d438",
    "sha256": "74e589ae1dca62bf6f76140b92e60b1c829e8e1b6c9645b39e9d1c0b4008ad80",
    "sha512": "",
    "sha1_git": "3220c1c7afa5f5aa4240ea756db7a6c2b85aa608",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/react-dom-18.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/react-dom@18.2.0?uuid=e68dd036-fa4f-4884-8a4b-47a731e0153e"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1353,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "react-dom",
        "purl": "pkg:npm/react-dom@18.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "git+https://github.com/facebook/react.git",
        "version": "18.2.0",
        "keywords": [
          "react"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "React package for working with the DOM.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/react-dom/18.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/loose-envify",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          },
          {
            "purl": "pkg:npm/scheduler",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^0.23.0"
          },
          {
            "purl": "pkg:npm/react",
            "scope": "peerDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^18.2.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz",
        "homepage_url": "https://reactjs.org/",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/facebook/react/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/react-dom",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "9d99fcf955946582a2f07c34b5dd1c07",
    "sha1": "f04073f0d787cb97c4cb805e0901c96913e76ea1",
    "sha256": "e9dc152383f08758ce59b7f4a941714643d8e40dd72a41785f2f0620cf041b78",
    "sha512": "",
    "sha1_git": "1ce1b601dbba54989524424767ea17ea5d01df48",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safe-buffer-5.2.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/safe-buffer@5.2.1?uuid=90eb1487-6d6e-4204-ba1e-70d78b31599a"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1057,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "safe-buffer",
        "purl": "pkg:npm/safe-buffer@5.2.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "https://feross.org",
            "name": "Feross Aboukhadijeh",
            "role": "author",
            "type": "person",
            "email": "feross@feross.org"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/feross/safe-buffer.git",
        "version": "5.2.1",
        "keywords": [
          "buffer",
          "buffer allocate",
          "node security",
          "safe",
          "safe-buffer",
          "security",
          "uninitialized"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Safer Node.js Buffer API",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/safe-buffer/5.2.1",
        "dependencies": [
          {
            "purl": "pkg:npm/standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "*"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.0.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
        "homepage_url": "https://github.com/feross/safe-buffer",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/feross/safe-buffer/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/safe-buffer",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "b206856c7ef099626bf28cdc5498787a",
    "sha1": "6ce1dddfb8739c577ae2ad84f1aba01427791f57",
    "sha256": "e4018fdbfe625433371f48274fee26f520bbe865e0d8c85bf3aa07424134b90c",
    "sha512": "",
    "sha1_git": "f2869e256477a974a2a5b97a5d1c2e8f875183a8",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/safer-buffer-2.1.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/safer-buffer@2.1.2?uuid=81a31834-1a70-4a36-8af7-a8cecc1ced73"
    ],
    "tag": "",
    "extension": ".json",
    "size": 822,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "safer-buffer",
        "purl": "pkg:npm/safer-buffer@2.1.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "https://github.com/ChALkeR",
            "name": "Nikita Skovoroda",
            "role": "author",
            "type": "person",
            "email": "chalkerx@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ChALkeR/safer-buffer.git",
        "version": "2.1.2",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Modern Buffer API polyfill without footguns",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/safer-buffer/2.1.2",
        "dependencies": [
          {
            "purl": "pkg:npm/standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^11.0.1"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^4.9.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ChALkeR/safer-buffer/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/safer-buffer",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "274d956f400350c9f6cf96d22cdda227",
    "sha1": "5ed0fab8e5cac53e4d072acbd82fca9be08f5e67",
    "sha256": "4247a3a63c45a6a7ced1557fe4dd9d2a163af4915d594b95e5867b69a53edb52",
    "sha512": "",
    "sha1_git": "d452b04aef3bb41ead6816e2b5de24f27279680c",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/scheduler-0.23.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/scheduler@0.23.2?uuid=9575163b-bc62-4bda-8e2c-ef032f46a0cd",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 700,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "scheduler",
        "purl": "pkg:npm/scheduler@0.23.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": "git+https://github.com/facebook/react.git",
        "version": "0.23.2",
        "keywords": [
          "react"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Cooperative scheduler for the browser environment.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/scheduler/0.23.2",
        "dependencies": [
          {
            "purl": "pkg:npm/loose-envify",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
        "homepage_url": "https://reactjs.org/",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/facebook/react/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/scheduler",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "fc596cec5ac8b544aad0a2423b689d30",
    "sha1": "25015fd7e1f0f8e39588ef9a3400516abb906856",
    "sha256": "0893643a24576d727174e639586b8833a53f2a7b4a2199a719b9cfcebe9bae88",
    "sha512": "",
    "sha1_git": "00552f821a65befb9d83a531fe71f74cba9e2b94",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/send-0.18.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/send@0.18.0?uuid=3d845b63-983a-4faf-a36f-d0342a14ac3f",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1571,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "send",
        "purl": "pkg:npm/send@0.18.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "TJ Holowaychuk",
            "role": "author",
            "type": "person",
            "email": "tj@vision-media.ca"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "James Wyatt Cready",
            "role": "contributor",
            "type": "person",
            "email": "jcready@gmail.com"
          },
          {
            "url": null,
            "name": "Jes\u00fas Legan\u00e9s Combarro",
            "role": "contributor",
            "type": "person",
            "email": "piranna@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/pillarjs/send",
        "version": "0.18.0",
        "keywords": [
          "static",
          "file",
          "server"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Better streaming static file server with Range and conditional-GET support",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/send/0.18.0",
        "dependencies": [
          {
            "purl": "pkg:npm/debug",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.6.9"
          },
          {
            "purl": "pkg:npm/depd",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/destroy",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.2.0"
          },
          {
            "purl": "pkg:npm/encodeurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.2"
          },
          {
            "purl": "pkg:npm/escape-html",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.3"
          },
          {
            "purl": "pkg:npm/etag",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.8.1"
          },
          {
            "purl": "pkg:npm/fresh",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.5.2"
          },
          {
            "purl": "pkg:npm/http-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.0"
          },
          {
            "purl": "pkg:npm/mime",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "1.6.0"
          },
          {
            "purl": "pkg:npm/ms",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.1.3"
          },
          {
            "purl": "pkg:npm/on-finished",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/range-parser",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.2.1"
          },
          {
            "purl": "pkg:npm/statuses",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "2.0.1"
          },
          {
            "purl": "pkg:npm/after",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.8.2"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.2.2"
          }
        ],
        "download_url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/send",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "331e9be93662fd4127e84beed1b3c82c",
    "sha1": "dc3c65d7eb895741faec3aa7419be8b7ed7f3c5d",
    "sha256": "b7df451530d0b58ee3aed7f355d2afdf04860f55c32d0d0bb1ceb65b85189b22",
    "sha512": "",
    "sha1_git": "7f269d515c8bf4d94510578600a9bf9fc9f43fd3",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/serve-static-1.15.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/serve-static@1.15.0?uuid=5e84a4f3-b7c3-472d-ac31-d451f96edf26"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1141,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "serve-static",
        "purl": "pkg:npm/serve-static@1.15.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/expressjs/serve-static",
        "version": "1.15.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Serve static files",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/serve-static/1.15.0",
        "dependencies": [
          {
            "purl": "pkg:npm/encodeurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.2"
          },
          {
            "purl": "pkg:npm/escape-html",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.0.3"
          },
          {
            "purl": "pkg:npm/parseurl",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~1.3.3"
          },
          {
            "purl": "pkg:npm/send",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.18.0"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.4"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.2.2"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/safe-buffer",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.2.1"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.2.2"
          }
        ],
        "download_url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/serve-static",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "c72c82df31ad86a65e2e48c33c03988b",
    "sha1": "eed66f41a584415a2bfde1842522c4aff72d98c5",
    "sha256": "9a5793ee291365aa13c0da4148f7150b5fab012d03a6fbd8ac456463c745bd18",
    "sha512": "",
    "sha1_git": "9d935f5d8b3b562d6dd2e7adc21f03c35743e9de",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/setprototypeof-1.2.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/setprototypeof@1.2.0?uuid=3cec1760-96cc-4517-a252-a8f0c08cdc21",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1264,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "setprototypeof",
        "purl": "pkg:npm/setprototypeof@1.2.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Wes Todd",
            "role": "author",
            "type": "person",
            "email": null
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/wesleytodd/setprototypeof.git",
        "version": "1.2.0",
        "keywords": [
          "polyfill",
          "object",
          "setprototypeof"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "A small polyfill for Object.setprototypeof",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/setprototypeof/1.2.0",
        "dependencies": [
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^6.1.4"
          },
          {
            "purl": "pkg:npm/standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^13.0.2"
          }
        ],
        "download_url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
        "homepage_url": "https://github.com/wesleytodd/setprototypeof",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/wesleytodd/setprototypeof/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "ISC",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-isc-9931cb7ad33c2eb18f322c94660b670a84186baa",
                "license_expression": "isc",
                "license_expression_spdx": "ISC"
              }
            ],
            "identifier": "isc-6c4320cc-eb5b-3792-8c56-b8565fff1119",
            "license_expression": "isc",
            "license_expression_spdx": "ISC"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/setprototypeof",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "isc",
        "extracted_license_statement": "- ISC\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "ISC"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "3c0480d60c15fe4fe27ae36205d1f949",
    "sha1": "cbf2d7ae54256a7ab84245eb6d72c56f6a015453",
    "sha256": "5b39ddf23d2c12a751cb4af2ce12dd5c87314350be7526fff69b4a3ff2a2d538",
    "sha512": "",
    "sha1_git": "f20915bea42e4016313176f9e8c1a154f457db3d",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-1.1.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/side-channel@1.1.0?uuid=e64766ef-23e9-49b4-9f33-ac338010edaf"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2361,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "side-channel",
        "purl": "pkg:npm/side-channel@1.1.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/side-channel.git",
        "version": "1.1.0",
        "keywords": [
          "weakmap",
          "map",
          "side",
          "channel",
          "metadata"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/side-channel/1.1.0",
        "dependencies": [
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.13.3"
          },
          {
            "purl": "pkg:npm/side-channel-list",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.0"
          },
          {
            "purl": "pkg:npm/side-channel-map",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/side-channel-weakmap",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
        "homepage_url": "https://github.com/ljharb/side-channel#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/side-channel/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/side-channel",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "1741cf73e526fba665a09037dec1d02c",
    "sha1": "ca10dba255c81fa003499be7fca61829ec3c331e",
    "sha256": "b33b18efda612f3149f2e5102b305cb77bc5067eae372fb1c83f74c263b5b18e",
    "sha512": "",
    "sha1_git": "30fa42cd86682a8ddf0b3b6817236ca94d7463d3",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-list-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/side-channel-list@1.0.1?uuid=96db4c47-475d-40b1-8572-5f0c1a5fcff4"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2258,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "side-channel-list",
        "purl": "pkg:npm/side-channel-list@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/side-channel-list.git",
        "version": "1.0.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Store information about any JS value in a side channel, using a linked list",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/side-channel-list/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.13.4"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.18.2"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^22.2.2"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.2"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.8.1"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^8.57.1"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.5"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
        "homepage_url": "https://github.com/ljharb/side-channel-list#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/side-channel-list/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/side-channel-list",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "e38801a5f0dcb9a16f7fcd8332c93a2e",
    "sha1": "5ac3ca0b70af7d5b7c3aba36e212d2e73038cd80",
    "sha256": "90f0c08c6c17f4a3fa3dd61873223957b89da4201f01dc0c8b95b0b9e6a2a59a",
    "sha512": "",
    "sha1_git": "bc4c08ca01c1b763d44103526bd08f26e8c9c820",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-map-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/side-channel-map@1.0.1?uuid=e0f08e11-096f-4863-abc4-1de39d47a593",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2336,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "side-channel-map",
        "purl": "pkg:npm/side-channel-map@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/side-channel-map.git",
        "version": "1.0.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Store information about any JS value in a side channel, using a Map",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/side-channel-map/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/call-bound",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/get-intrinsic",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.2.5"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.13.3"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/get-intrinsic",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.3"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/evalmd",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.0.19"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
        "homepage_url": "https://github.com/ljharb/side-channel-map#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/side-channel-map/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/side-channel-map",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "7e4608c17f398f2aa008416e3cc0b67b",
    "sha1": "ab10f444db9aa7420125e321884ca7d765854b2f",
    "sha256": "914a8bd732b82523d95bb697eec3e6d95badc5eb13b196fb0772e59354a3ab25",
    "sha512": "",
    "sha1_git": "18e80805905c32cf286aa286e1a0c8f8248ec574",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/side-channel-weakmap-1.0.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/side-channel-weakmap@1.0.2?uuid=ffa9b3a6-79b6-439d-a7b4-d5b774170ecf",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 2447,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "side-channel-weakmap",
        "purl": "pkg:npm/side-channel-weakmap@1.0.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Jordan Harband",
            "role": "author",
            "type": "person",
            "email": "ljharb@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git+https://github.com/ljharb/side-channel-weakmap.git",
        "version": "1.0.2",
        "keywords": [
          "weakmap",
          "map",
          "side",
          "channel",
          "metadata"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/side-channel-weakmap/1.0.2",
        "dependencies": [
          {
            "purl": "pkg:npm/call-bound",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.2"
          },
          {
            "purl": "pkg:npm/es-errors",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.3.0"
          },
          {
            "purl": "pkg:npm/get-intrinsic",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.2.5"
          },
          {
            "purl": "pkg:npm/object-inspect",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.13.3"
          },
          {
            "purl": "pkg:npm/side-channel-map",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "^1.0.1"
          },
          {
            "purl": "pkg:npm/%40arethetypeswrong/cli",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.17.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/eslint-config",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^21.1.1"
          },
          {
            "purl": "pkg:npm/%40ljharb/tsconfig",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.2.2"
          },
          {
            "purl": "pkg:npm/%40types/call-bind",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.0.5"
          },
          {
            "purl": "pkg:npm/%40types/get-intrinsic",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.2.3"
          },
          {
            "purl": "pkg:npm/%40types/object-inspect",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^1.13.0"
          },
          {
            "purl": "pkg:npm/%40types/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.6.5"
          },
          {
            "purl": "pkg:npm/auto-changelog",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.5.0"
          },
          {
            "purl": "pkg:npm/eclint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.8.1"
          },
          {
            "purl": "pkg:npm/encoding",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.1.13"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "=8.8.0"
          },
          {
            "purl": "pkg:npm/in-publish",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.1"
          },
          {
            "purl": "pkg:npm/npmignore",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^0.3.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^10.3.2"
          },
          {
            "purl": "pkg:npm/safe-publish-latest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^2.0.0"
          },
          {
            "purl": "pkg:npm/tape",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "^5.9.0"
          },
          {
            "purl": "pkg:npm/typescript",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "next"
          }
        ],
        "download_url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
        "homepage_url": "https://github.com/ljharb/side-channel-weakmap#readme",
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "https://github.com/ljharb/side-channel-weakmap/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/side-channel-weakmap",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "b5664feae256ddff681e245c7ce95f06",
    "sha1": "cdb337908d19d32a79dc189c7bce63981babc35e",
    "sha256": "8c11f0a1c6cfa549588d991a5cb1b04d62953277ed29f47463d415d5946388a8",
    "sha512": "",
    "sha1_git": "9ef6583335d8670f8f86c7508cd047c6ae224a68",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/statuses-2.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/statuses@2.0.1?uuid=8ce7dec0-4d3d-49cb-ac1e-004385272f9d",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1440,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "statuses",
        "purl": "pkg:npm/statuses@2.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/statuses",
        "version": "2.0.1",
        "keywords": [
          "http",
          "status",
          "code"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "HTTP status utility",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/statuses/2.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/csv-parse",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.14.2"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.17.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.22.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.2"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.2.1"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          },
          {
            "purl": "pkg:npm/raw-body",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.4.1"
          },
          {
            "purl": "pkg:npm/stream-to-array",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.3.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/statuses",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "210cda9d522bab0911dff42346dee4be",
    "sha1": "3328d9bfc82e4f981a1acd2f3f78c524bf85333c",
    "sha256": "53bd1b14e481356bf004c0a45f9022d07fbc56bfe849115e141ba302c8818275",
    "sha512": "",
    "sha1_git": "8c3e719b50cdaa58f6a3fa38c84d8faeefdfc00f",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/toidentifier-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/toidentifier@1.0.1?uuid=9bb3729a-081e-490c-9c47-118a0a26d110",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1142,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "toidentifier",
        "purl": "pkg:npm/toidentifier@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://niftylettuce.com/",
            "name": "Nick Baugh",
            "role": "contributor",
            "type": "person",
            "email": "niftylettuce@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/component/toidentifier",
        "version": "1.0.1",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">=0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Convert a string of words to a JavaScript identifier",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/toidentifier/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "7.32.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.25.3"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "11.1.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.3.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "9.1.3"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "15.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/toidentifier",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "fd6e2543a1b015cc443c7a2dcc4e3668",
    "sha1": "e8fe1d02a381b71a33e41588ae26746d34fa4903",
    "sha256": "f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc",
    "sha512": "",
    "sha1_git": "42db1a664264217f0b57017aba9c6d05e3d8f827",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/type-is-1.6.18/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/type-is@1.6.18?uuid=0d538221-235b-4528-b9ae-364025a508e4",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1133,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "type-is",
        "purl": "pkg:npm/type-is@1.6.18",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "contributor",
            "type": "person",
            "email": "doug@somethingdoug.com"
          },
          {
            "url": "http://jongleberry.com",
            "name": "Jonathan Ong",
            "role": "contributor",
            "type": "person",
            "email": "me@jongleberry.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/type-is",
        "version": "1.6.18",
        "keywords": [
          "content",
          "type",
          "checking"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.6"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Infer the content-type of a request.",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/type-is/1.6.18",
        "dependencies": [
          {
            "purl": "pkg:npm/media-typer",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "0.3.0"
          },
          {
            "purl": "pkg:npm/mime-types",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "~2.1.24"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.16.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "12.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.17.2"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.0.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "4.0.0"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "6.1.4"
          },
          {
            "purl": "pkg:npm/nyc",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "14.0.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/type-is",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "ffa244d8a6f745a081a0cdde026879c9",
    "sha1": "28d55c4730fdacf9019317fae0ba93a0b6aebd0b",
    "sha256": "87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63",
    "sha512": "",
    "sha1_git": "97ba5f14b84f4ea397e9795636d2285e77ce18cb",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/unpipe-1.0.0/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/unpipe@1.0.0?uuid=5c7b9b88-feae-45f0-8dc3-29ffd3d045ba"
    ],
    "tag": "",
    "extension": ".json",
    "size": 770,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "unpipe",
        "purl": "pkg:npm/unpipe@1.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/stream-utils/unpipe",
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Unpipe a stream from all destinations",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/unpipe/1.0.0",
        "dependencies": [
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.15"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.2.5"
          },
          {
            "purl": "pkg:npm/readable-stream",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.13"
          }
        ],
        "download_url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/unpipe",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "f8318a554ed98c6a030942e9c14aaac8",
    "sha1": "f67f2d17a18c3ded93c9423903df8e6678f4e416",
    "sha256": "28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11",
    "sha512": "",
    "sha1_git": "a2b73583bd6e39d785dc00256bd162c4fe2564e7",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/utils-merge-1.0.1/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/utils-merge@1.0.1?uuid=78062fa6-5471-442d-9f84-0d4b57e3d633",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 857,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "utils-merge",
        "purl": "pkg:npm/utils-merge@1.0.1",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": "http://www.jaredhanson.net/",
            "name": "Jared Hanson",
            "role": "author",
            "type": "person",
            "email": "jaredhanson@gmail.com"
          }
        ],
        "subpath": null,
        "vcs_url": "git://github.com/jaredhanson/utils-merge.git",
        "version": "1.0.1",
        "keywords": [
          "util"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.4.0"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "merge() utility function",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/utils-merge/1.0.1",
        "dependencies": [
          {
            "purl": "pkg:npm/make-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.3.x"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.x.x"
          },
          {
            "purl": "pkg:npm/chai",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.x.x"
          }
        ],
        "download_url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": "http://github.com/jaredhanson/utils-merge/issues",
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          },
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          },
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-hash",
                "end_line": 1,
                "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_82.RULE",
                "from_file": null,
                "start_line": 1,
                "matched_text": "http://opensource.org/licenses/MIT",
                "match_coverage": 100.0,
                "matched_length": 5,
                "rule_relevance": 100,
                "rule_identifier": "mit_82.RULE",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-ed4b10a1-dee4-8c47-62ce-3459c82174bc",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/utils-merge",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n- type: MIT\n  url: http://opensource.org/licenses/MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "0230ade39b9c19f5fcc29ed02dff4afe",
    "sha1": "a03473329c34092ea6a88cc11c409a4ecf8bad33",
    "sha256": "6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8",
    "sha512": "",
    "sha1_git": "e36b0781c1909d7893646e532bf617fdcb73d3c0",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/npm/vary-1.1.2/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:npm/vary@1.1.2?uuid=a42b1ada-4727-475e-8a1e-15f5bb6bfd5f"
    ],
    "tag": "",
    "extension": ".json",
    "size": 1215,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "vary",
        "purl": "pkg:npm/vary@1.1.2",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [
          {
            "url": null,
            "name": "Douglas Christopher Wilson",
            "role": "author",
            "type": "person",
            "email": "doug@somethingdoug.com"
          }
        ],
        "subpath": null,
        "vcs_url": "https://github.com/jshttp/vary",
        "version": "1.1.2",
        "keywords": [
          "http",
          "res",
          "vary"
        ],
        "copyright": null,
        "namespace": null,
        "extra_data": {
          "engines": {
            "node": ">= 0.8"
          }
        },
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Manipulate the HTTP Vary header",
        "notice_text": null,
        "api_data_url": "https://registry.npmjs.org/vary/1.1.2",
        "dependencies": [
          {
            "purl": "pkg:npm/beautify-benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.2.4"
          },
          {
            "purl": "pkg:npm/benchmark",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.1.4"
          },
          {
            "purl": "pkg:npm/eslint",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.19.0"
          },
          {
            "purl": "pkg:npm/eslint-config-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "10.2.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-import",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.7.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-markdown",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.0.0-beta.6"
          },
          {
            "purl": "pkg:npm/eslint-plugin-node",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "5.1.1"
          },
          {
            "purl": "pkg:npm/eslint-plugin-promise",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.0"
          },
          {
            "purl": "pkg:npm/eslint-plugin-standard",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.0.1"
          },
          {
            "purl": "pkg:npm/istanbul",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "0.4.5"
          },
          {
            "purl": "pkg:npm/mocha",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.5.3"
          },
          {
            "purl": "pkg:npm/supertest",
            "scope": "devDependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.1.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [
          {
            "matches": [
              {
                "score": 100.0,
                "matcher": "1-spdx-id",
                "end_line": 1,
                "rule_url": null,
                "from_file": null,
                "start_line": 1,
                "matched_text": "MIT",
                "match_coverage": 100.0,
                "matched_length": 1,
                "rule_relevance": 100,
                "rule_identifier": "spdx-license-identifier-mit-5da48780aba670b0860c46d899ed42a0f243ff06",
                "license_expression": "mit",
                "license_expression_spdx": "MIT"
              }
            ],
            "identifier": "mit-a822f434-d61f-f2b1-c792-8b8cb9e7b9bf",
            "license_expression": "mit",
            "license_expression_spdx": "MIT"
          }
        ],
        "repository_download_url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
        "repository_homepage_url": "https://www.npmjs.com/package/vary",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": "mit",
        "extracted_license_statement": "- MIT\n",
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": "MIT"
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "3577fc17c1b964af7cfe2c17c73f84f3",
    "sha1": "82f740e2254b786f7a3a39a762d4d0fc6ec7b008",
    "sha256": "73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa",
    "sha512": "",
    "sha1_git": "028f72a93c5153af4163764face616d0ccb7a7b8",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/package.json",
    "type": "file",
    "name": "package.json",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".json",
    "size": 449,
    "mime_type": "application/json",
    "file_type": "JSON data",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "acme-demo-app",
        "purl": "pkg:npm/acme-demo-app@1.0.0",
        "sha1": null,
        "size": null,
        "type": "npm",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": null,
        "extra_data": {},
        "is_private": true,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Demo application used for CuratorPro customer presentations.",
        "notice_text": null,
        "api_data_url": null,
        "dependencies": [
          {
            "purl": "pkg:npm/express",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "4.18.2"
          },
          {
            "purl": "pkg:npm/jquery",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "3.3.1"
          },
          {
            "purl": "pkg:npm/lodash",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "4.17.20"
          },
          {
            "purl": "pkg:npm/react",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "18.2.0"
          },
          {
            "purl": "pkg:npm/react-dom",
            "scope": "dependencies",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": "18.2.0"
          }
        ],
        "download_url": "https://registry.npmjs.org/acme-demo-app/-/acme-demo-app-1.0.0.tgz",
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "npm_package_json",
        "file_references": [],
        "source_packages": [],
        "bug_tracking_url": null,
        "primary_language": "JavaScript",
        "license_detections": [],
        "repository_download_url": null,
        "repository_homepage_url": null,
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "513cbe654f36299b3d086d3637d9f2c6",
    "sha1": "f937d074eb8628e61b1269486c6c803dfc92699e",
    "sha256": "d513a5f3742366302c53aedb7c5d3a18d6a42599683430c725b2314cbafbde1d",
    "sha512": "",
    "sha1_git": "4ce24b36ab5cf7b1d7fb9938cfcdf78282b6e6a9",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 850,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "acme-demo-app",
        "purl": "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?type=war",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": "com.acme.demo",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {
          "type": "war"
        },
        "description": null,
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.14.1"
          },
          {
            "purl": "pkg:maven/com.mysql/mysql-connector-j@8.0.28",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.0.28"
          },
          {
            "purl": "pkg:maven/org.mozilla/rhino@1.7.14",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.7.14"
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.war",
        "repository_homepage_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5498fbff00bc4e48fab14f311534bc82",
    "sha1": "b0e737c3ad26a9a0b2d51077e96d214dcd96b906",
    "sha256": "2a9d8c11d81d6972376cc45fae8d573e2906289c522e29f805c0e7edada77f24",
    "sha512": "",
    "sha1_git": "b463df3d66c7d2513b5bc969db5d9c68f080f20b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  }
]