{"bom":{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","components":[],"metadata":{"component":{"bom-ref":"dfcd457ff0b35452","name":"src-licenses","type":"file","version":"1.0.0"},"lifecycles":[{"phase":"pre-build"}],"properties":[{"name":"bomlens:sbom-tool-degraded","value":"disk-space"},{"name":"bomlens:excluded-paths","value":"**/test/**, **/tests/**, **/spec/**, **/fixtures/**, **/testdata/**, **/__tests__/**, **/e2e/**, **/example/**, **/examples/**, **/sample/**, **/samples/**, **/bench/**, **/benches/**, **/benchmark/**, **/benchmarks/**, **/demo/**, **/demos/**, **/playground/**, **/.github/workflows/**, **/gradle/wrapper/**"},{"name":"bomlens:suggest-identify-vendored","value":"true"},{"name":"bomlens:undeclared-fields","value":"unknown-to-author"}],"timestamp":"2026-10-14T23:09:07Z","tools":{"components":[{"author":"anchore","name":"syft","type":"application","version":"1.54.1"},{"name":"BomLens","publisher":"SK Telecom","type":"application","version":"1.13.4"}]}},"serialNumber":"urn:uuid:bb1b3a16-f8b8-4089-967d-b7ff59e20017","specVersion":"1.6","version":1,"compositions":[{"aggregate":"incomplete"}]},"security":{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a13cad-8e8b-7e1d-9399-393da0044f0a","CreatedAt":"2026-10-14T23:09:29.611927374Z","ArtifactName":"src-licenses_1.0.0_bom.json","ArtifactType":"cyclonedx","Results":[],"UncheckedComponents":{"Count":0,"Components":[]}},"scancode":{"headers":[{"tool_name":"scancode-toolkit","tool_version":"32.5.0","options":{"input":["/src"],"--ignore":["node_modules","vendor","bower_components",".venv","venv","virtualenv","site-packages","dist","build","target","out",".next",".nuxt","__pycache__",".gradle",".git",".hg",".svn",".tox",".mypy_cache",".pytest_cache",".ruff_cache",".idea",".vscode","src-licenses_1.0.0"],"--json-pp":"/tmp/bomlens-scancode.W5RAlE","--license":true,"--only-findings":false,"--strip-root":true},"notice":"Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download.","start_timestamp":"2026-10-14T230910.026686","end_timestamp":"2026-10-14T230914.129673","output_format_version":"4.1.0","duration":4.103004217147827,"message":null,"errors":[],"warnings":[],"extra_data":{"system_environment":{"operating_system":"linux","cpu_architecture":"64","platform":"Linux-6.8.0-100-generic-aarch64-with-glibc2.41","platform_version":"#100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:39:21 UTC 2026","python_version":"3.12.14 (main, Sep 19 2026, 01:11:14) [GCC 14.2.0]"},"spdx_license_list_version":"3.27","files_count":4}}],"license_detections":[{"identifier":"apache_2_0-a4859331-ff93-1b3b-d793-1af3837f4ea7","license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","detection_count":1,"reference_matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/src/apache_mod.py","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-apache_2_0-d904d6f07f8d33445270a849a3be98d8904d568a","rule_url":null},{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/src/apache_mod.py","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":8,"match_coverage":100,"rule_relevance":100,"rule_identifier":"apache-2.0_151.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_151.RULE"}]},{"identifier":"bsd_new-d9171e23-9f98-24d4-0ae6-5e68143c607d","license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","detection_count":1,"reference_matches":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/src/bsd3_mod.go","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-bsd_new-44d09f027ab49aa105944dc76ae54041ea2a76e4","rule_url":null},{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/src/bsd3_mod.go","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":3,"match_coverage":100,"rule_relevance":100,"rule_identifier":"bsd-new_10.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/bsd-new_10.RULE"}]},{"identifier":"gpl_3_0-d3130f1c-5e3f-0603-a2ee-ddadfbdf8d9e","license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","detection_count":1,"reference_matches":[{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/src/gpl_mod.c","start_line":1,"end_line":1,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0_623.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0_623.RULE"},{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/src/gpl_mod.c","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0.RULE"}]},{"identifier":"mit_and_other_permissive-86693ba7-af85-049b-5216-e6c30518099e","license_expression":"mit AND other-permissive","license_expression_spdx":"MIT AND LicenseRef-scancode-other-permissive","detection_count":1,"reference_matches":[{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/src/mit_mod.js","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit-2410ec7d8cecfb84d911cb1c29ba44ab907b8b8f","rule_url":null},{"license_expression":"other-permissive","license_expression_spdx":"LicenseRef-scancode-other-permissive","from_file":"src/src/mit_mod.js","start_line":2,"end_line":2,"matcher":"3-seq","score":10.29,"matched_length":7,"match_coverage":10.29,"rule_relevance":100,"rule_identifier":"other-permissive_352.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/other-permissive_352.RULE"},{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/src/mit_mod.js","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"mit_14.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_14.RULE"}]}],"files":[{"path":"src","type":"directory","detected_license_expression":null,"detected_license_expression_spdx":null,"license_detections":[],"license_clues":[],"percentage_of_license_text":0,"scan_errors":[]},{"path":"src/apache_mod.py","type":"file","detected_license_expression":"apache-2.0","detected_license_expression_spdx":"Apache-2.0","license_detections":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","matches":[{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/src/apache_mod.py","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-apache_2_0-5dcda840588b4f07f49f2c0100924ebca7bc0649","rule_url":null},{"license_expression":"apache-2.0","license_expression_spdx":"Apache-2.0","from_file":"src/src/apache_mod.py","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":8,"match_coverage":100,"rule_relevance":100,"rule_identifier":"apache-2.0_151.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/apache-2.0_151.RULE"}],"identifier":"apache_2_0-a4859331-ff93-1b3b-d793-1af3837f4ea7"}],"license_clues":[],"percentage_of_license_text":66.67,"scan_errors":[]},{"path":"src/bsd3_mod.go","type":"file","detected_license_expression":"bsd-new","detected_license_expression_spdx":"BSD-3-Clause","license_detections":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","matches":[{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/src/bsd3_mod.go","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":6,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-bsd_new-917808d7d4a74c55ef668cd756b4ee70c22a8c40","rule_url":null},{"license_expression":"bsd-new","license_expression_spdx":"BSD-3-Clause","from_file":"src/src/bsd3_mod.go","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":3,"match_coverage":100,"rule_relevance":100,"rule_identifier":"bsd-new_10.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/bsd-new_10.RULE"}],"identifier":"bsd_new-d9171e23-9f98-24d4-0ae6-5e68143c607d"}],"license_clues":[],"percentage_of_license_text":40.91,"scan_errors":[]},{"path":"src/gpl_mod.c","type":"file","detected_license_expression":"gpl-3.0","detected_license_expression_spdx":"GPL-3.0-only","license_detections":[{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","matches":[{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/src/gpl_mod.c","start_line":1,"end_line":1,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0_623.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0_623.RULE"},{"license_expression":"gpl-3.0","license_expression_spdx":"GPL-3.0-only","from_file":"src/src/gpl_mod.c","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":7,"match_coverage":100,"rule_relevance":100,"rule_identifier":"gpl-3.0.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/gpl-3.0.RULE"}],"identifier":"gpl_3_0-d3130f1c-5e3f-0603-a2ee-ddadfbdf8d9e"}],"license_clues":[],"percentage_of_license_text":60.87,"scan_errors":[]},{"path":"src/mit_mod.js","type":"file","detected_license_expression":"mit AND other-permissive","detected_license_expression_spdx":"MIT AND LicenseRef-scancode-other-permissive","license_detections":[{"license_expression":"mit AND other-permissive","license_expression_spdx":"MIT AND LicenseRef-scancode-other-permissive","matches":[{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/src/mit_mod.js","start_line":1,"end_line":1,"matcher":"1-spdx-id","score":100,"matched_length":4,"match_coverage":100,"rule_relevance":100,"rule_identifier":"spdx-license-identifier-mit-f5be3fda2f20a26515ed3dabedb3804346819bf7","rule_url":null},{"license_expression":"other-permissive","license_expression_spdx":"LicenseRef-scancode-other-permissive","from_file":"src/src/mit_mod.js","start_line":2,"end_line":2,"matcher":"3-seq","score":10.29,"matched_length":7,"match_coverage":10.29,"rule_relevance":100,"rule_identifier":"other-permissive_352.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/other-permissive_352.RULE"},{"license_expression":"mit","license_expression_spdx":"MIT","from_file":"src/src/mit_mod.js","start_line":2,"end_line":2,"matcher":"2-aho","score":100,"matched_length":2,"match_coverage":100,"rule_relevance":100,"rule_identifier":"mit_14.RULE","rule_url":"https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/rules/mit_14.RULE"}],"identifier":"mit_and_other_permissive-86693ba7-af85-049b-5216-e6c30518099e"}],"license_clues":[],"percentage_of_license_text":65,"scan_errors":[]}]}}