{"bom":{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","components":[],"metadata":{"component":{"bom-ref":"dfcd457ff0b35452","name":"license-mix","type":"file","version":"1.0.0"},"lifecycles":[{"phase":"pre-build"}],"properties":[{"name":"bomlens:sbom-tool-degraded","value":"disk-space"},{"name":"bomlens:excluded-paths","value":"**/test/**, **/tests/**, **/spec/**, **/fixtures/**, **/testdata/**, **/__tests__/**, **/e2e/**, **/example/**, **/examples/**, **/sample/**, **/samples/**, **/bench/**, **/benches/**, **/benchmark/**, **/benchmarks/**, **/demo/**, **/demos/**, **/playground/**, **/.github/workflows/**, **/gradle/wrapper/**"},{"name":"bomlens:suggest-identify-vendored","value":"true"},{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T22:54:25Z","tools":{"components":[{"author":"anchore","name":"syft","type":"application","version":"1.54.1"},{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:13567c51-650c-43b9-8efe-19149f513eb8","specVersion":"1.6","version":1,"compositions":[{"aggregate":"incomplete"}]},"security":{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a13ca0-16d6-78f5-ae3e-ad4bb5eb90f5","CreatedAt":"2026-10-14T22:54:46.998589699Z","ArtifactName":"license-mix_1.0.0_bom.json","ArtifactType":"cyclonedx","Results":[],"UncheckedComponents":{"Count":0,"Components":[]}},"scancode":{"headers":[{"tool_name":"scancode-toolkit","tool_version":"32.5.0","options":{"input":["/src"],"--ignore":["node_modules","vendor","bower_components",".venv","venv","virtualenv","site-packages","dist","build","target","out",".next",".nuxt","__pycache__",".gradle",".git",".hg",".svn",".tox",".mypy_cache",".pytest_cache",".ruff_cache",".idea",".vscode","license-mix_1.0.0"],"--json-pp":"/tmp/bomlens-scancode.znN7E3","--license":true,"--only-findings":false,"--strip-root":true},"notice":"Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download.","start_timestamp":"2026-10-14T225427.868187","end_timestamp":"2026-10-14T225431.104779","output_format_version":"4.1.0","duration":3.236605405807495,"message":null,"errors":[],"warnings":[],"extra_data":{"system_environment":{"operating_system":"linux","cpu_architecture":"64","platform":"Linux-6.8.0-100-generic-aarch64-with-glibc2.41","platform_version":"#100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:39:21 UTC 2026","python_version":"3.12.14 (main, Sep 19 2026, 01:11:14) [GCC 14.2.0]"},"spdx_license_list_version":"3.27","files_count":6}}],"license_detections":[{"identifier":"mit_or_apache_2_0__and_unknown_license_reference-35070b6a-82f1-f2fc-e736-c181fed48a79","license_expression":"(mit OR apache-2.0) AND unknown-license-reference","license_expression_spdx":"(MIT OR Apache-2.0) AND LicenseRef-scancode-unknown-license-reference","detection_count":1,"reference_matches":[{"license_expression":"mit OR apache-2.0","license_expression_spdx":"MIT OR Apache-2.0","from_file":"src/dual.ts","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":8,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit_or_apache_2_0-4015fbe54181e5123826db2d55b40d63715a0fb7","rule_url":null},{"license_expression":"unknown-license-reference","license_expression_spdx":"LicenseRef-scancode-unknown-license-reference","from_file":"src/dual.ts","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"unknown-license-reference_dual-licensed.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/unknown-license-reference_dual-licensed.RULE"}]},{"identifier":"apache_2_0-1128b32e-e4d0-5c60-69c1-de035db8b0fd","license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","detection_count":1,"reference_matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/apache.py","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-apache_2_0-d904d6f07f8d33445270a849a3be98d8904d568a","rule_url":null},{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/apache.py","start_line":3,"end_line":3,"matcher":"2-aho","score":95,"matched_length":2,"match_coverage":100,"rule_relevance":95,"rule_identifier":"apache-2.0_778.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_778.RULE"}]},{"identifier":"bsd_new-743881b8-f8cb-51ad-0b80-672be7b31a5c","license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","detection_count":1,"reference_matches":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/bsd3.go","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-bsd_new-44d09f027ab49aa105944dc76ae54041ea2a76e4","rule_url":null},{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/bsd3.go","start_line":5,"end_line":5,"matcher":"2-aho","score":90,"matched_length":2,"match_coverage":100,"rule_relevance":90,"rule_identifier":"bsd-new_169.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/bsd-new_169.RULE"}]},{"identifier":"gpl_3_0_and_gpl_1_0_plus-afa04188-8621-6787-6b0a-71b4cbe9dee7","license_expression":"gpl-3.0 AND gpl-1.0-plus","license_expression_spdx":"GPL-3.0-only AND GPL-1.0-or-later","detection_count":1,"reference_matches":[{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/gpl3.c","start_line":1,"end_line":1,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0_623.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0_623.RULE"},{"license_expression":"gpl-1.0-plus","license_expression_spdx":"GPL-1.0-or-later","from_file":"src/gpl3.c","start_line":2,"end_line":2,"matcher":"2-aho","score":50,"matched_length":1,"match_coverage":100,"rule_relevance":50,"rule_identifier":"gpl_bare_word_only.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl_bare_word_only.RULE"}]},{"identifier":"isc-51bb075c-78b3-0939-3704-e8d7d0e77cf9","license_expression":"isc","license_expression_spdx":"ISC","detection_count":1,"reference_matches":[{"license_expression":"isc","license_expression_spdx":"ISC","from_file":"src/isc.rb","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-isc-d28a028ece756c95f836d249e70205b26f484a77","rule_url":null}]},{"identifier":"mit-167b871c-daa8-c40c-cc43-d34218c27058","license_expression":"mit","license_expression_spdx":"MIT","detection_count":1,"reference_matches":[{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/mit.js","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit-2410ec7d8cecfb84d911cb1c29ba44ab907b8b8f","rule_url":null},{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/mit.js","start_line":3,"end_line":3,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"mit_126.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_126.RULE"}]}],"files":[{"path":"apache.py","type":"file","detected_license_expression":"apache-2.0","detected_license_expression_spdx":"Apache-2.0","license_detections":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/apache.py","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649","rule_url":null},{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/apache.py","start_line":3,"end_line":3,"matcher":"2-aho","score":95,"matched_length":2,"match_coverage":100,"rule_relevance":95,"rule_identifier":"apache-2.0_778.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_778.RULE"}],"identifier":"apache_2_0-1128b32e-e4d0-5c60-69c1-de035db8b0fd"}],"license_clues":[],"percentage_of_license_text":72.73,"scan_errors":[]},{"path":"bsd3.go","type":"file","detected_license_expression":"bsd-new","detected_license_expression_spdx":"BSD-3-Clause","license_detections":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","matches":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/bsd3.go","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-bsd_new-917808d7d4a74c55ef668cd756b4ee70c22a8c40","rule_url":null},{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/bsd3.go","start_line":5,"end_line":5,"matcher":"2-aho","score":90,"matched_length":2,"match_coverage":100,"rule_relevance":90,"rule_identifier":"bsd-new_169.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/bsd-new_169.RULE"}],"identifier":"bsd_new-743881b8-f8cb-51ad-0b80-672be7b31a5c"}],"license_clues":[],"percentage_of_license_text":57.14,"scan_errors":[]},{"path":"dual.ts","type":"file","detected_license_expression":"(mit OR apache-2.0) AND unknown-license-reference","detected_license_expression_spdx":"(MIT OR Apache-2.0) AND LicenseRef-scancode-unknown-license-reference","license_detections":[{"license_expression":"(mit OR apache-2.0) AND unknown-license-reference","license_expression_spdx":"(MIT OR Apache-2.0) AND LicenseRef-scancode-unknown-license-reference","matches":[{"license_expression":"mit OR apache-2.0","license_expression_spdx":"MIT OR Apache-2.0","from_file":"src/dual.ts","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":8,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit_or_apache_2_0-3d1f65ad83bd2147d96ffe199532c3bd6fa58a1f","rule_url":null},{"license_expression":"unknown-license-reference","license_expression_spdx":"LicenseRef-scancode-unknown-license-reference","from_file":"src/dual.ts","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"unknown-license-reference_dual-licensed.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/unknown-license-reference_dual-licensed.RULE"}],"identifier":"mit_or_apache_2_0__and_unknown_license_reference-35070b6a-82f1-f2fc-e736-c181fed48a79"}],"license_clues":[],"percentage_of_license_text":71.43,"scan_errors":[]},{"path":"gpl3.c","type":"file","detected_license_expression":"gpl-3.0 AND gpl-1.0-plus","detected_license_expression_spdx":"GPL-3.0-only AND GPL-1.0-or-later","license_detections":[{"license_expression":"gpl-3.0 AND gpl-1.0-plus","license_expression_spdx":"GPL-3.0-only AND GPL-1.0-or-later","matches":[{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/gpl3.c","start_line":1,"end_line":1,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0_623.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0_623.RULE"},{"license_expression":"gpl-1.0-plus","license_expression_spdx":"GPL-1.0-or-later","from_file":"src/gpl3.c","start_line":2,"end_line":2,"matcher":"2-aho","score":50,"matched_length":1,"match_coverage":100,"rule_relevance":50,"rule_identifier":"gpl_bare_word_only.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl_bare_word_only.RULE"}],"identifier":"gpl_3_0_and_gpl_1_0_plus-afa04188-8621-6787-6b0a-71b4cbe9dee7"}],"license_clues":[],"percentage_of_license_text":66.67,"scan_errors":[]},{"path":"isc.rb","type":"file","detected_license_expression":"isc","detected_license_expression_spdx":"ISC","license_detections":[{"license_expression":"isc","license_expression_spdx":"ISC","matches":[{"license_expression":"isc","license_expression_spdx":"ISC","from_file":"src/isc.rb","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-isc-721d70826f2a6cfb13a224d17fa04e05d479ad8b","rule_url":null}],"identifier":"isc-51bb075c-78b3-0939-3704-e8d7d0e77cf9"}],"license_clues":[],"percentage_of_license_text":44.44,"scan_errors":[]},{"path":"mit.js","type":"file","detected_license_expression":"mit","detected_license_expression_spdx":"MIT","license_detections":[{"license_expression":"mit","license_expression_spdx":"MIT","matches":[{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/mit.js","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7","rule_url":null},{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/mit.js","start_line":3,"end_line":3,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"mit_126.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_126.RULE"}],"identifier":"mit-167b871c-daa8-c40c-cc43-d34218c27058"}],"license_clues":[],"percentage_of_license_text":60,"scan_errors":[]}]}}