{"bom":{"annotations":[{"annotator":{"component":{"authors":[{"name":"OWASP Foundation"}],"bom-ref":"pkg:npm/@cdxgen/cdxgen@13.3.0","group":"@cdxgen","name":"cdxgen","publisher":"OWASP Foundation","purl":"pkg:npm/%40cdxgen/cdxgen@13.3.0","type":"application","version":"13.3.0"}},"bom-ref":"metadata-annotations","subjects":["pkg:npm/npm-nolock@1.0.0"],"text":"This Software Bill-of-Materials (SBOM) document was created on Wednesday, October 14, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'npm-nolock' with version '1.0.0'.","timestamp":"2026-10-14T22:55:38Z"}],"bomFormat":"CycloneDX","components":[{"bom-ref":"pkg:npm/debug@4.3.1","copyright":"Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>","description":"small debugging utility","evidence":{"identity":[{"concludedValue":"package-lock.json","confidence":1,"field":"purl","methods":[{"confidence":1,"technique":"manifest-analysis","value":"package-lock.json"}]}]},"externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/debug/-/debug-4.3.1.tgz"}],"group":"","hashes":[{"alg":"SHA-512","content":"76813076f9b83c278ae0add140dd990b60585016b1c0b0110aa666323b45f1ae7527645bd31a559681519c2383c2a8e9c270286a8e297a537c97744976fde045"}],"licenses":[{"license":{"id":"MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}],"url":"https://opensource.org/licenses/MIT"}}],"name":"debug","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:npm:artifactIntegrity","value":"sha512-doEwdvm4PCeK4K3RQN2ZC2BYUBaxwLARCqZmMjtF8a51J2Rb0xpVloFRnCODwqjpwnAoao4pelN8l3RJdv3gRQ=="},{"name":"cdx:npm:artifactShasum","value":"f0d229c505e0c6d8c49ac553d1b13dc183f6b2ee"},{"name":"cdx:npm:lastModifiedTime","value":"2025-09-13T17:25:19.913Z"},{"name":"cdx:npm:maintainerOverlapCount","value":"8"},{"name":"cdx:npm:maintainerOverlapRatio","value":"1.00"},{"name":"cdx:npm:maintainerSet","value":"qix, i.am.qix@gmail.com, thebigredgeek, rhyneandrew@gmail.com, tootallnate, nathan@tootallnate.net, tjholowaychuk, tj@vision-media.ca"},{"name":"cdx:npm:maintainerSetCount","value":"8"},{"name":"cdx:npm:packageCreatedTime","value":"2011-11-29T01:11:23.618Z"},{"name":"cdx:npm:priorMaintainerSet","value":"qix, i.am.qix@gmail.com, thebigredgeek, rhyneandrew@gmail.com, tootallnate, nathan@tootallnate.net, tjholowaychuk, tj@vision-media.ca"},{"name":"cdx:npm:priorMaintainerSetCount","value":"8"},{"name":"cdx:npm:priorPublishTime","value":"2020-09-19T08:36:29.497Z"},{"name":"cdx:npm:priorPublisher","value":"qix"},{"name":"cdx:npm:priorVersion","value":"4.3.0"},{"name":"cdx:npm:publishTime","value":"2020-11-19T12:23:08.941Z"},{"name":"cdx:npm:publisher","value":"qix"},{"name":"cdx:npm:publisherEmail","value":"i.am.qix@gmail.com"},{"name":"cdx:npm:releaseCadenceCompressionRatio","value":"8.85"},{"name":"cdx:npm:releaseGapBaselineDays","value":"6.91"},{"name":"cdx:npm:releaseGapDays","value":"61.16"},{"name":"cdx:npm:releaseGapSampleSize","value":"65"},{"name":"cdx:npm:versionCount","value":"78"},{"name":"internal:LocalNodeModulesPath","value":"node_modules/debug"},{"name":"internal:ResolvedUrl","value":"https://registry.npmjs.org/debug/-/debug-4.3.1.tgz"},{"name":"internal:SrcFile","value":"package-lock.json"},{"name":"bomlens:copyrightSource","value":"installed license file"},{"name":"bomlens:licenseClass","value":"permissive"},{"name":"bomlens:licenseConflict","value":"compatible"},{"name":"bomlens:licenseConflict:why","value":"Both are permissive; keep the notices."}],"purl":"pkg:npm/debug@4.3.1","type":"library","version":"4.3.1"},{"bom-ref":"pkg:npm/minimist@1.2.5","description":"parse argument options","evidence":{"identity":[{"concludedValue":"package-lock.json","confidence":1,"field":"purl","methods":[{"confidence":1,"technique":"manifest-analysis","value":"package-lock.json"}]}]},"externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"}],"group":"","hashes":[{"alg":"SHA-512","content":"14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f"}],"licenses":[{"license":{"id":"MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}],"url":"https://opensource.org/licenses/MIT"}}],"name":"minimist","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:npm:artifactIntegrity","value":"sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw=="},{"name":"cdx:npm:artifactShasum","value":"67d66014b66a6a8aaa0c083c5fd58df4e4e97602"},{"name":"cdx:npm:lastModifiedTime","value":"2026-03-06T07:15:54.567Z"},{"name":"cdx:npm:maintainerOverlapCount","value":"4"},{"name":"cdx:npm:maintainerOverlapRatio","value":"1.00"},{"name":"cdx:npm:maintainerSet","value":"emilbayes, github@tixz.dk, substack, substack@gmail.com"},{"name":"cdx:npm:maintainerSetCount","value":"4"},{"name":"cdx:npm:packageCreatedTime","value":"2013-06-25T08:17:16.343Z"},{"name":"cdx:npm:priorMaintainerSet","value":"emilbayes, github@tixz.dk, substack, substack@gmail.com"},{"name":"cdx:npm:priorMaintainerSetCount","value":"4"},{"name":"cdx:npm:priorPublishTime","value":"2020-03-12T22:15:03.676Z"},{"name":"cdx:npm:priorPublisher","value":"substack"},{"name":"cdx:npm:priorVersion","value":"0.2.1"},{"name":"cdx:npm:publishTime","value":"2020-03-12T22:16:19.463Z"},{"name":"cdx:npm:publisher","value":"substack"},{"name":"cdx:npm:publisherEmail","value":"substack@gmail.com"},{"name":"cdx:npm:releaseCadenceCompressionRatio","value":"0.00"},{"name":"cdx:npm:releaseGapBaselineDays","value":"12.03"},{"name":"cdx:npm:releaseGapDays","value":"0.00"},{"name":"cdx:npm:releaseGapSampleSize","value":"23"},{"name":"cdx:npm:versionCount","value":"31"},{"name":"internal:LocalNodeModulesPath","value":"node_modules/minimist"},{"name":"internal:ResolvedUrl","value":"https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"},{"name":"internal:SrcFile","value":"package-lock.json"},{"name":"bomlens:licenseClass","value":"permissive"},{"name":"bomlens:licenseConflict","value":"compatible"},{"name":"bomlens:licenseConflict:why","value":"Both are permissive; keep the notices."}],"purl":"pkg:npm/minimist@1.2.5","type":"library","version":"1.2.5"},{"bom-ref":"pkg:npm/ms@2.1.2","copyright":"Copyright (c) 2016 Zeit, Inc.","description":"Tiny millisecond conversion utility","evidence":{"identity":[{"concludedValue":"package-lock.json","confidence":1,"field":"purl","methods":[{"confidence":1,"technique":"manifest-analysis","value":"package-lock.json"}]}]},"externalReferences":[{"type":"distribution","url":"https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"}],"group":"","hashes":[{"alg":"SHA-512","content":"b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"}],"licenses":[{"license":{"id":"MIT","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}],"url":"https://opensource.org/licenses/MIT"}}],"name":"ms","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:npm:artifactIntegrity","value":"sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="},{"name":"cdx:npm:artifactShasum","value":"d09d1f357b443f493382a8eb3ccd183872ae6009"},{"name":"cdx:npm:lastModifiedTime","value":"2025-09-08T19:56:54.242Z"},{"name":"cdx:npm:maintainerOverlapCount","value":"4"},{"name":"cdx:npm:maintainerOverlapRatio","value":"0.04"},{"name":"cdx:npm:maintainerSet","value":"alexaltea, alexandro@phi.nz, anatrajkovska, ana.trajkovska2015@gmail.com, andybitz, artzbitz@gmail.com, arunoda, arunoda.susiripala@gmail.com, arzafran, franco@basement.studio, atcastle, atcastle@gmail.com, b3nnyl, ciao@sylin.me, caarlos0, caarlos0@gmail.com, codetheory, thecodetheory@gmail.com, coetry, allenhai03@gmail.com, dav-is, mail@connordav.is, fivepointseven, fivepointseven@icloud.com, guybedford, guybedford@gmail.com, hharnisc, hharnisc@gmail.com, huvik, lukas@huvar.cz, iamevilrabbit, hello@evilrabb.it, igorklopov, igor@klopov.com, ijjk, jj@jjsweb.site, janicklas-ralph, janicklasralph036@gmail.com, javivelasco, javier.velasco86@gmail.com, joecohens, joecohenr@gmail.com, juancampa, juancampa@gmail.com, leo, leo@zeit.co, lfades, luisito453@gmail.com, lucleray, luc.leray@gmail.com, manovotny, manovotny@gmail.com, marcosnils, marcosnils@gmail.com, matheuss, me@matheus.top, mfix22, mrfix84@gmail.com, mglagola, mark.glagola@gmail.com, msweeneydev, mail@msweeneydev.com, nkzawa, naoyuki.kanezawa@gmail.com, olliv, olli@zeit.co, paco, pvco.coursey@gmail.com, paulogdm, paulogdemitri@gmail.com, quietshu, ds303077135@gmail.com, rabaut, rabautse@gmail.com, ragojose, ragojosefrancisco@gmail.com, rauchg, rauchg@gmail.com, sarupbanskota, sbanskota08@gmail.com, skllcrn, skllcrn@zeit.co, sophearak, t.sophearak@gmail.com, styfle, steven@ceriously.com, timer, timer150@gmail.com, timneutkens, tim@timneutkens.nl, tootallnate, nathan@tootallnate.net, umegaya, iyatomi@gmail.com, williamli, williamli@bbi.io, zeit-bot, team@zeit.co"},{"name":"cdx:npm:maintainerSetCount","value":"98"},{"name":"cdx:npm:maintainerSetPartialDrift","value":"true"},{"name":"cdx:npm:packageCreatedTime","value":"2011-12-21T19:38:08.664Z"},{"name":"cdx:npm:priorMaintainerSet","value":"leo, leo@zeit.co, rauchg, rauchg@gmail.com"},{"name":"cdx:npm:priorMaintainerSetCount","value":"4"},{"name":"cdx:npm:priorPublishTime","value":"2017-11-30T18:30:16.876Z"},{"name":"cdx:npm:priorPublisher","value":"leo"},{"name":"cdx:npm:priorVersion","value":"2.1.1"},{"name":"cdx:npm:publishTime","value":"2019-06-06T17:31:55.859Z"},{"name":"cdx:npm:publisher","value":"styfle"},{"name":"cdx:npm:publisherDrift","value":"true"},{"name":"cdx:npm:publisherEmail","value":"steven@ceriously.com"},{"name":"cdx:npm:releaseCadenceCompressionRatio","value":"6.73"},{"name":"cdx:npm:releaseGapBaselineDays","value":"82.22"},{"name":"cdx:npm:releaseGapDays","value":"552.96"},{"name":"cdx:npm:releaseGapSampleSize","value":"16"},{"name":"cdx:npm:versionCount","value":"32"},{"name":"internal:LocalNodeModulesPath","value":"node_modules/ms"},{"name":"internal:ResolvedUrl","value":"https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"},{"name":"internal:SrcFile","value":"package-lock.json"},{"name":"bomlens:copyrightSource","value":"installed license file"},{"name":"bomlens:licenseClass","value":"permissive"},{"name":"bomlens:licenseConflict","value":"compatible"},{"name":"bomlens:licenseConflict:why","value":"Both are permissive; keep the notices."}],"purl":"pkg:npm/ms@2.1.2","tags":["cloud","icloud"],"type":"library","version":"2.1.2"}],"dependencies":[{"dependsOn":[],"ref":"pkg:npm/minimist@1.2.5"},{"dependsOn":[],"ref":"pkg:npm/ms@2.1.2"},{"dependsOn":["pkg:npm/ms@2.1.2"],"ref":"pkg:npm/debug@4.3.1"},{"dependsOn":["pkg:npm/debug@4.3.1","pkg:npm/minimist@1.2.5"],"ref":"pkg:npm/npm-nolock@1.0.0"}],"metadata":{"component":{"bom-ref":"pkg:npm/npm-nolock@1.0.0","description":"SCA 벤치마크 fixture — package.json만, lockfile 없음. node-lock과 동일 의존성으로 lock 유무 대조.","group":"","licenses":[{"license":{"id":"Apache-2.0","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"cdx:license:foss","value":"true"},{"name":"cdx:license:osiApproved","value":"true"},{"name":"cdx:license:fsfLibre","value":"true"},{"name":"cdx:license:deprecated","value":"false"}],"url":"https://opensource.org/licenses/Apache-2.0"}}],"name":"npm-nolock","properties":[{"name":"cdx:license:category","value":"Permissive"},{"name":"bomlens:source:versionPinning","value":"unpinned"}],"type":"application","version":"1.0.0"},"lifecycles":[{"phase":"pre-build"}],"properties":[{"name":"cdx:bom:componentSrcFiles","value":"package-lock.json"},{"name":"cdx:bom:componentTypes","value":"npm"},{"name":"bomlens:prep-step-applied","value":"npm-production-set"},{"name":"bomlens:excluded-paths","value":"**/test/**, **/tests/**, **/spec/**, **/fixtures/**, **/testdata/**, **/__tests__/**, **/e2e/**, **/example/**, **/examples/**, **/sample/**, **/samples/**, **/bench/**, **/benches/**, **/benchmark/**, **/benchmarks/**, **/demo/**, **/demos/**, **/playground/**, **/.github/workflows/**, **/gradle/wrapper/**"},{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T22:55:38Z","tools":{"components":[{"authors":[{"name":"OWASP Foundation"}],"bom-ref":"pkg:npm/@cdxgen/cdxgen@13.3.0","group":"@cdxgen","name":"cdxgen","publisher":"OWASP Foundation","purl":"pkg:npm/%40cdxgen/cdxgen@13.3.0","type":"application","version":"13.3.0"},{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:45ddb342-8805-4721-9b3a-bac8b436a0ce","services":[],"specVersion":"1.6","version":1,"compositions":[{"aggregate":"complete"}]},"security":{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a13ca1-52b9-7a86-b553-e83596692c83","CreatedAt":"2026-10-14T22:56:07.865691831Z","ArtifactName":"npm-nolock_1.0.0_bom.json","ArtifactType":"cyclonedx","Results":[{"Target":"Node.js","Class":"lang-pkgs","Type":"node-pkg","Packages":[{"ID":"debug@4.3.1","Name":"debug","Identifier":{"PURL":"pkg:npm/debug@4.3.1","UID":"7003c0c1c913a4ee","BOMRef":"pkg:npm/debug@4.3.1"},"Version":"4.3.1","Licenses":["MIT"],"DependsOn":["ms@2.1.2"],"Digest":"sha512:76813076f9b83c278ae0add140dd990b60585016b1c0b0110aa666323b45f1ae7527645bd31a559681519c2383c2a8e9c270286a8e297a537c97744976fde045"},{"ID":"minimist@1.2.5","Name":"minimist","Identifier":{"PURL":"pkg:npm/minimist@1.2.5","UID":"100a204f0aa555bd","BOMRef":"pkg:npm/minimist@1.2.5"},"Version":"1.2.5","Licenses":["MIT"],"Digest":"sha512:14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f"},{"ID":"ms@2.1.2","Name":"ms","Identifier":{"PURL":"pkg:npm/ms@2.1.2","UID":"980c6e163d28bdc2","BOMRef":"pkg:npm/ms@2.1.2"},"Version":"2.1.2","Licenses":["MIT"],"Digest":"sha512:b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"}],"Vulnerabilities":[{"VulnerabilityID":"CVE-2021-44906","VendorIDs":["GHSA-xvch-5gv4-984h"],"PkgID":"minimist@1.2.5","PkgName":"minimist","PkgIdentifier":{"PURL":"pkg:npm/minimist@1.2.5","UID":"100a204f0aa555bd","BOMRef":"pkg:npm/minimist@1.2.5"},"InstalledVersion":"1.2.5","FixedVersion":"1.2.6, 0.2.4","Status":"fixed","SeveritySource":"ghsa","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2021-44906","DataSource":{"ID":"ghsa","Name":"GitHub Security Advisory npm","URL":"https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"},"Fingerprint":"sha256:05dd2842db277585aaf5a5616197a9e4af1a4d8a85bf2ea6b6a0e3ee6ab0ab64","Title":"minimist: prototype pollution","Description":"Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).","Severity":"CRITICAL","CweIDs":["CWE-1321"],"VendorSeverity":{"alma":2,"ghsa":4,"nvd":4,"oracle-oval":2,"redhat":2,"rocky":2},"CVSS":{"ghsa":{"V3Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","V3Score":9.8},"nvd":{"V2Vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","V3Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","V2Score":7.5,"V3Score":9.8},"redhat":{"V3Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","V3Score":3.1}},"References":["https://access.redhat.com/errata/RHSA-2023:0321","https://access.redhat.com/security/cve/CVE-2021-44906","https://bugzilla.redhat.com/2066009","https://bugzilla.redhat.com/2130518","https://bugzilla.redhat.com/2134609","https://bugzilla.redhat.com/2140911","https://bugzilla.redhat.com/show_bug.cgi?id=2066009","https://bugzilla.redhat.com/show_bug.cgi?id=2130518","https://bugzilla.redhat.com/show_bug.cgi?id=2134609","https://bugzilla.redhat.com/show_bug.cgi?id=2140911","https://bugzilla.redhat.com/show_bug.cgi?id=2142808","https://creativecommons.org/licenses/by/4.0/","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3517","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35256","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548","https://errata.almalinux.org/9/ALSA-2023-0321.html","https://errata.rockylinux.org/RLSA-2023:0321","https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip","https://github.com/advisories/GHSA-xvch-5gv4-984h","https://github.com/minimistjs/minimist/commit/34e20b8461118608703d6485326abbb8e35e1703","https://github.com/minimistjs/minimist/commit/bc8ecee43875261f4f17eb20b1243d3ed15e70eb","https://github.com/minimistjs/minimist/commit/c2b981977fa834b223b408cfb860f933c9811e4d","https://github.com/minimistjs/minimist/commit/ef9153fc52b6cea0744b2239921c5dcae4697f11","https://github.com/minimistjs/minimist/commits/v0.2.4","https://github.com/minimistjs/minimist/issues/11","https://github.com/minimistjs/minimist/pull/24","https://github.com/substack/minimist","https://github.com/substack/minimist/blob/master/index.js#L69","https://github.com/substack/minimist/issues/164","https://linux.oracle.com/cve/CVE-2021-44906.html","https://linux.oracle.com/errata/ELSA-2023-0321.html","https://nvd.nist.gov/vuln/detail/CVE-2021-44906","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20240621-0006/","https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-function/20278068#20278068","https://www.cve.org/CVERecord?id=CVE-2021-44906"],"PublishedDate":"2022-03-17T16:15:07.51Z","LastModifiedDate":"2026-10-08T21:17:42.2Z"}]}],"UncheckedComponents":{"Count":0,"Components":[]}},"scancode":{"headers":[{"tool_name":"scancode-toolkit","tool_version":"32.5.0","options":{"input":["/src"],"--ignore":["node_modules","vendor","bower_components",".venv","venv","virtualenv","site-packages","dist","build","target","out",".next",".nuxt","__pycache__",".gradle",".git",".hg",".svn",".tox",".mypy_cache",".pytest_cache",".ruff_cache",".idea",".vscode","npm-nolock_1.0.0"],"--json-pp":"/tmp/bomlens-scancode.cVNIpm","--license":true,"--only-findings":false,"--strip-root":true},"notice":"Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download.","start_timestamp":"2026-10-14T225548.059250","end_timestamp":"2026-10-14T225550.890979","output_format_version":"4.1.0","duration":2.8317501544952393,"message":null,"errors":[],"warnings":[],"extra_data":{"system_environment":{"operating_system":"linux","cpu_architecture":"64","platform":"Linux-6.8.0-100-generic-aarch64-with-glibc2.41","platform_version":"#100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:39:21 UTC 2026","python_version":"3.12.14 (main, Sep 19 2026, 01:11:14) [GCC 14.2.0]"},"spdx_license_list_version":"3.27","files_count":1}}],"license_detections":[{"identifier":"apache_2_0-ec759ae0-ea5a-f138-793e-388520e080c0","license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","detection_count":1,"reference_matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/package.json","start_line":5,"end_line":5,"matcher":"2-aho","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"apache-2.0_65.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_65.RULE"}]}],"files":[{"path":"package.json","type":"file","detected_license_expression":"apache-2.0","detected_license_expression_spdx":"Apache-2.0","license_detections":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/package.json","start_line":5,"end_line":5,"matcher":"2-aho","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"apache-2.0_65.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_65.RULE"}],"identifier":"apache_2_0-ec759ae0-ea5a-f138-793e-388520e080c0"}],"license_clues":[],"percentage_of_license_text":11.43,"scan_errors":[]}]}}