[
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-api-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-api/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?uuid=64441493-6f3e-4f89-ad69-5304eceb720b",
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 14045,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-api",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Apache Log4j API\nThe Apache Log4j API",
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/log4j-api-2.14.1.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api-java9",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.osgi/org.osgi.core",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.felix/org.apache.felix.framework",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.eclipse.tycho/org.eclipse.osgi",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.maven/maven-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-lang3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.vintage/junit-vintage-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-migrationsupport",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.assertj/assertj-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/log4j-api-2.14.1.jar",
        "repository_homepage_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.14.1/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "ba7a8e29a29ac6ba900a55cfb38e5007",
    "sha1": "9199a73770616b1ca0b00f576db3231aaab4876a",
    "sha256": "909fa83ac088e70c8ba0dfb0fbd5b3027d03262edaafcca1250cc6aec46f0ad4",
    "sha512": "",
    "sha1_git": "6e31895f6284a47c671917dab8e689fd3b89e35b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/_dependencies/maven/org.apache.logging.log4j_log4j-core-2.14.1/META-INF/maven/org.apache.logging.log4j/log4j-core/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685",
      "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?uuid=60bfa1f9-a460-41c4-88f7-cd87cfd6d5b7"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 23214,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "log4j-core",
        "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "2.14.1",
        "keywords": [],
        "copyright": null,
        "namespace": "org.apache.logging.log4j",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {},
        "description": "Apache Log4j Core\nThe Apache Log4j Implementation",
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.lmax/disruptor",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.conversantmedia/disruptor",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jctools/jctools-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "${woodstox.version}"
          },
          {
            "purl": "pkg:maven/org.fusesource.jansi/jansi",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.sun.mail/javax.mail",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.kafka/kafka-clients",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.zeromq/jeromq",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-compress",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-csv",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.slf4j/slf4j-api",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.vintage/junit-vintage-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.mockito/mockito-core",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.mockito/mockito-junit-jupiter",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-core-java9",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.osgi/org.osgi.core",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": false,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jboss.spec.javax.jms/jboss-jms-api_1.1_spec",
            "scope": "provided",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": true,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-api",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.tukaani/xz",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.jmdns/jmdns@3.5.3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "3.5.3"
          },
          {
            "purl": "pkg:maven/log4j/log4j@1.2.17",
            "scope": "test",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.2.17"
          },
          {
            "purl": "pkg:maven/org.slf4j/slf4j-ext",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hamcrest/hamcrest-all",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hsqldb/hsqldb",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.h2database/h2",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.springframework/spring-test",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.activemq/activemq-broker",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-logging/commons-logging",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/ch.qos.logback/logback-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/ch.qos.logback/logback-classic",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.eclipse.tycho/org.eclipse.osgi",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.felix/org.apache.felix.framework",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.plexus/plexus-utils",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.maven/maven-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/net.javacrumbs.json-unit/json-unit",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.xmlunit/xmlunit-core",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.xmlunit/xmlunit-matchers",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-io/commons-io",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/commons-codec/commons-codec",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache.commons/commons-lang3",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.apache-extras.beanshell/bsh",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.groovy/groovy-jsr223",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.codehaus.groovy/groovy-dateutil",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.github.tomakehurst/wiremock",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          },
          {
            "purl": "pkg:maven/org.hdrhistogram/HdrHistogram",
            "scope": "test",
            "is_direct": true,
            "is_pinned": false,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": null
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.jar",
        "repository_homepage_url": "https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.14.1/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "20f7ceaf4ef3995ad374f44eb1ab0f14",
    "sha1": "f66708526155233e7351a79358a2942090b8736f",
    "sha256": "8a598b05bfa324efc2f45e825b3aa9813d291054eca3808a8013c6cf7b06fd6a",
    "sha512": "",
    "sha1_git": "ac769ddb60df6cb66ccda0c44e0cdf1d8b7c3eff",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  },
  {
    "path": "demo___customer_pitch-c4152739-a50b-4b5b-9d4d-0561461666d9.zip-extract/pom.xml",
    "type": "file",
    "name": "pom.xml",
    "status": "application-package",
    "for_packages": [
      "pkg:npm/acme-demo-app@1.0.0?uuid=9d5eeb2b-3612-4433-bb68-4e1314334685"
    ],
    "tag": "",
    "extension": ".xml",
    "size": 850,
    "mime_type": "text/xml",
    "file_type": "XML 1.0 document, ASCII text",
    "programming_language": "",
    "detected_license_expression": "",
    "detected_license_expression_spdx": "",
    "license_detections": [],
    "license_clues": [],
    "percentage_of_license_text": null,
    "compliance_alert": "",
    "copyrights": [],
    "holders": [],
    "authors": [],
    "package_data": [
      {
        "md5": null,
        "name": "acme-demo-app",
        "purl": "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?type=war",
        "sha1": null,
        "size": null,
        "type": "maven",
        "holder": null,
        "sha256": null,
        "sha512": null,
        "parties": [],
        "subpath": null,
        "vcs_url": null,
        "version": "1.0.0",
        "keywords": [],
        "copyright": null,
        "namespace": "com.acme.demo",
        "extra_data": {},
        "is_private": false,
        "is_virtual": false,
        "qualifiers": {
          "type": "war"
        },
        "description": null,
        "notice_text": null,
        "api_data_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.pom",
        "dependencies": [
          {
            "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "2.14.1"
          },
          {
            "purl": "pkg:maven/com.mysql/mysql-connector-j@8.0.28",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "8.0.28"
          },
          {
            "purl": "pkg:maven/org.mozilla/rhino@1.7.14",
            "scope": "compile",
            "is_direct": true,
            "is_pinned": true,
            "extra_data": {},
            "is_runtime": false,
            "is_optional": true,
            "resolved_package": {},
            "extracted_requirement": "1.7.14"
          }
        ],
        "download_url": null,
        "homepage_url": null,
        "release_date": null,
        "code_view_url": null,
        "datasource_id": "maven_pom",
        "file_references": [],
        "source_packages": [
          "pkg:maven/com.acme.demo/acme-demo-app@1.0.0?classifier=sources"
        ],
        "bug_tracking_url": null,
        "primary_language": "Java",
        "license_detections": [],
        "repository_download_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/acme-demo-app-1.0.0.war",
        "repository_homepage_url": "https://repo1.maven.org/maven2/com/acme/demo/acme-demo-app/1.0.0/",
        "other_license_detections": [],
        "other_license_expression": null,
        "declared_license_expression": null,
        "extracted_license_statement": null,
        "other_license_expression_spdx": null,
        "declared_license_expression_spdx": null
      }
    ],
    "emails": [],
    "urls": [],
    "md5": "5498fbff00bc4e48fab14f311534bc82",
    "sha1": "b0e737c3ad26a9a0b2d51077e96d214dcd96b906",
    "sha256": "2a9d8c11d81d6972376cc45fae8d573e2906289c522e29f805c0e7edada77f24",
    "sha512": "",
    "sha1_git": "b463df3d66c7d2513b5bc969db5d9c68f080f20b",
    "is_binary": false,
    "is_text": true,
    "is_archive": false,
    "is_media": false,
    "is_legal": false,
    "is_manifest": false,
    "is_readme": false,
    "is_top_level": false,
    "is_key_file": false,
    "extra_data": {}
  }
]