[
  {
    "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@%40MAVEN.DEPLOY.VERSION%40",
    "type": "maven",
    "namespace": "org.apache.tomcat",
    "name": "tomcat-servlet-api",
    "version": "@MAVEN.DEPLOY.VERSION@",
    "qualifiers": "",
    "subpath": "",
    "tag": "",
    "primary_language": "Java",
    "description": "jakarta.servlet package",
    "notes": "",
    "release_date": null,
    "parties": [],
    "keywords": [],
    "homepage_url": "https://tomcat.apache.org/",
    "download_url": "",
    "bug_tracking_url": "",
    "code_view_url": "",
    "vcs_url": "",
    "repository_homepage_url": "https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-servlet-api/@MAVEN.DEPLOY.VERSION@/",
    "repository_download_url": "https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-servlet-api/@MAVEN.DEPLOY.VERSION@/tomcat-servlet-api-@MAVEN.DEPLOY.VERSION@.jar",
    "api_data_url": "https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-servlet-api/@MAVEN.DEPLOY.VERSION@/tomcat-servlet-api-@MAVEN.DEPLOY.VERSION@.pom",
    "size": null,
    "md5": "",
    "sha1": "",
    "sha256": "",
    "sha512": "",
    "copyright": "",
    "holder": "",
    "declared_license_expression": "(apache-2.0 AND cddl-1.0) AND epl-2.0 AND apache-2.0 AND cddl-1.0",
    "declared_license_expression_spdx": "(Apache-2.0 AND CDDL-1.0) AND EPL-2.0 AND Apache-2.0 AND CDDL-1.0",
    "license_detections": [
      {
        "matches": [
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 3,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_and_cddl-1.0_1.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 2,
            "matched_text": "  Apache License, Version 2.0 and\n          Common Development And Distribution License (CDDL) Version 1.0 and",
            "match_coverage": 100.0,
            "matched_length": 15,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_and_cddl-1.0_1.RULE",
            "license_expression": "apache-2.0 AND cddl-1.0",
            "license_expression_spdx": "Apache-2.0 AND CDDL-1.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 4,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/epl-2.0_7.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 4,
            "matched_text": "          Eclipse Public License - v 2.0",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "epl-2.0_7.RULE",
            "license_expression": "epl-2.0",
            "license_expression_spdx": "EPL-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 6,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_1317.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 5,
            "matched_text": "url: |\n  http://www.apache.org/licenses/LICENSE-2.0.txt and",
            "match_coverage": 100.0,
            "matched_length": 10,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_1317.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 7,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/cddl-1.0_7.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 7,
            "matched_text": "          http://www.opensource.org/licenses/cddl1.txt and",
            "match_coverage": 100.0,
            "matched_length": 7,
            "rule_relevance": 100,
            "rule_identifier": "cddl-1.0_7.RULE",
            "license_expression": "cddl-1.0",
            "license_expression_spdx": "CDDL-1.0"
          },
          {
            "score": 90.0,
            "matcher": "2-aho",
            "end_line": 8,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_epl-2.0_for_epl-2.0.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 8,
            "matched_text": "          https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 90,
            "rule_identifier": "spdx_license_id_epl-2.0_for_epl-2.0.RULE",
            "license_expression": "epl-2.0",
            "license_expression_spdx": "EPL-2.0"
          },
          {
            "score": 90.0,
            "matcher": "2-aho",
            "end_line": 8,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/spdx_license_id_epl-2.0_for_epl-2.0.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 8,
            "matched_text": "          https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt",
            "match_coverage": 100.0,
            "matched_length": 3,
            "rule_relevance": 90,
            "rule_identifier": "spdx_license_id_epl-2.0_for_epl-2.0.RULE",
            "license_expression": "epl-2.0",
            "license_expression_spdx": "EPL-2.0"
          },
          {
            "score": 100.0,
            "matcher": "2-aho",
            "end_line": 10,
            "rule_url": "https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_182.RULE",
            "from_file": "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom",
            "start_line": 10,
            "matched_text": "  The Apache License, version 2.0 applies to all files apart from",
            "match_coverage": 100.0,
            "matched_length": 6,
            "rule_relevance": 100,
            "rule_identifier": "apache-2.0_182.RULE",
            "license_expression": "apache-2.0",
            "license_expression_spdx": "Apache-2.0"
          }
        ],
        "identifier": "apache_2_0_and_cddl_1_0__and_epl_2_0_and_apache_2_0_and_cddl_1_0-a6390d88-0066-4497-ff25-8a81ee1893a4",
        "license_expression": "(apache-2.0 AND cddl-1.0) AND epl-2.0 AND apache-2.0 AND cddl-1.0",
        "license_expression_spdx": "(Apache-2.0 AND CDDL-1.0) AND EPL-2.0 AND Apache-2.0 AND CDDL-1.0"
      }
    ],
    "other_license_expression": "",
    "other_license_expression_spdx": "",
    "other_license_detections": [],
    "extracted_license_statement": "- license:\n    name: |\n      Apache License, Version 2.0 and\n              Common Development And Distribution License (CDDL) Version 1.0 and\n              Eclipse Public License - v 2.0\n    url: |\n      http://www.apache.org/licenses/LICENSE-2.0.txt and\n              http://www.opensource.org/licenses/cddl1.txt and\n              https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt\n    comments: |\n      The Apache License, version 2.0 applies to all files apart from\n              javaee_5.xsd,\n              javaee_6.xsd,\n              javaee_7.xsd,\n              javaee_8.xsd,\n              javaee_web_services_1_2.xsd,\n              javaee_web_services_client_1_2.xsd,\n              javaee_web_services_1_3.xsd,\n              javaee_web_services_client_1_3.xsd,\n              javaee_web_services_1_4.xsd,\n              javaee_web_services_client_1_4.xsd,\n              jsp_2_2.xsd,\n              jsp_2_3.xsd,\n              web-app_3_0.xsd,\n              web-common_3_0.xsd,\n              web-fragment_3_0.xsd,\n              web-app_3_1.xsd,\n              web-common_3_1.xsd,\n              web-fragment_3_1.xsd,\n              web-app_4_0.xsd,\n              web-common_4_0.xsd,\n              web-fragment_4_0.xsd,\n              to which the CDDL version 1.0 applies and\n              jakartaee_9.xsd\n              jakartaee_10.xsd\n              jakartaee_11.xsd\n              jakarta_web-services_2_0.xsd\n              jakarta_web-services_client_2_0.xsd\n              jsp_3_0.xsd\n              jsp_3_1.xsd\n              jsp_4_0.xsd\n              web-app_5_0.xsd\n              web-app_6_0.xsd\n              web-app_6_1.xsd\n              web-common_5_0.xsd\n              web-common_6_0.xsd\n              web-common_6_1.xsd\n              web-fragment_5_0.xsd\n              web-fragment_6_0.xsd\n              web-fragment_6_1.xsd\n              web-jsptaglibrary_3_0.xsd\n              web-jsptaglibrary_3_1.xsd\n              web-jsptaglibrary_4_0.xsd\n              to which the EPLv2 applies.\n",
    "compliance_alert": "",
    "notice_text": "",
    "source_packages": [
      "pkg:maven/org.apache.tomcat/tomcat-servlet-api@%40MAVEN.DEPLOY.VERSION%40?classifier=sources"
    ],
    "extra_data": {},
    "package_uid": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@%40MAVEN.DEPLOY.VERSION%40?uuid=fabd17ae-db5a-43c8-b6de-b106b8396c29",
    "is_private": false,
    "is_virtual": false,
    "datasource_ids": [
      "maven_pom"
    ],
    "datafile_paths": [
      "ttomcat-1778514358873.zip-extract/apache-tomcat-11.0.18-src/res/maven/tomcat-servlet-api.pom"
    ],
    "file_references": [],
    "missing_resources": [],
    "modified_resources": [],
    "affected_by_vulnerabilities": []
  }
]