@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security-runtime/licensing/candidates/runner-image-composition.json

@@ -0,0 +1,1500 @@
+{
+  "schemaVersion": 1,
+  "status": "partial-engineering-composition-not-distribution-or-rights-clearance",
+  "collectedOn": "2026-10-20",
+  "image": "node:22-bookworm-slim@sha256:1b3abbc0bf2421c8733f58c6fd7bbb961a960f37e05ed7369eccd1fbb0edcc84",
+  "registry": {
+    "path": "tools/registry/yara-runner.json",
+    "sha256": "c73e108dedc3739df35c6d7a85ccd4fd54f042788a17a2a04beb8c6959b5c52c"
+  },
+  "method": "Root independently reran the assigned read-only/no-network collector against the cached exact pinned image and matched the worker inventory byte-for-byte as parsed JSON.",
+  "inventory": {
+    "schemaVersion": 1,
+    "imageFilesystem": {
+      "osRelease": "PRETTY_NAME=\"Debian GNU/Linux 12 (bookworm)\"\nNAME=\"Debian GNU/Linux\"\nVERSION_ID=\"12\"\nVERSION=\"12 (bookworm)\"\nVERSION_CODENAME=bookworm\nID=debian\nHOME_URL=\"https://www.debian.org/\"\nSUPPORT_URL=\"https://www.debian.org/support\"\nBUG_REPORT_URL=\"https://bugs.debian.org/\"",
+      "nodeVersion": "v22.23.3",
+      "architecture": "amd64"
+    },
+    "packageQuery": {
+      "command": "dpkg-query -W -f=${Package}\\t${Version}\\t${Source}\\t${source:Package}\\t${source:Version}\\t${Architecture}\\n",
+      "packageCount": 88,
+      "packages": [
+        {
+          "name": "adduser",
+          "version": "3.134",
+          "rawSource": null,
+          "sourcePackage": "adduser",
+          "sourceVersion": "3.134",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "all"
+        },
+        {
+          "name": "apt",
+          "version": "2.6.1",
+          "rawSource": null,
+          "sourcePackage": "apt",
+          "sourceVersion": "2.6.1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "base-files",
+          "version": "12.4+deb12u15",
+          "rawSource": null,
+          "sourcePackage": "base-files",
+          "sourceVersion": "12.4+deb12u15",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "base-passwd",
+          "version": "3.6.1",
+          "rawSource": null,
+          "sourcePackage": "base-passwd",
+          "sourceVersion": "3.6.1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "bash",
+          "version": "5.2.15-2+b13",
+          "rawSource": "bash (5.2.15-2)",
+          "sourcePackage": "bash",
+          "sourceVersion": "5.2.15-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "bsdutils",
+          "version": "1:2.38.1-5+deb12u3",
+          "rawSource": "util-linux (2.38.1-5+deb12u3)",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "coreutils",
+          "version": "9.1-1",
+          "rawSource": null,
+          "sourcePackage": "coreutils",
+          "sourceVersion": "9.1-1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "dash",
+          "version": "0.5.12-2",
+          "rawSource": null,
+          "sourcePackage": "dash",
+          "sourceVersion": "0.5.12-2",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "debconf",
+          "version": "1.5.82",
+          "rawSource": null,
+          "sourcePackage": "debconf",
+          "sourceVersion": "1.5.82",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "all"
+        },
+        {
+          "name": "debian-archive-keyring",
+          "version": "2023.3+deb12u2",
+          "rawSource": null,
+          "sourcePackage": "debian-archive-keyring",
+          "sourceVersion": "2023.3+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "all"
+        },
+        {
+          "name": "debianutils",
+          "version": "5.7-0.5~deb12u1",
+          "rawSource": null,
+          "sourcePackage": "debianutils",
+          "sourceVersion": "5.7-0.5~deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "diffutils",
+          "version": "1:3.8-4",
+          "rawSource": null,
+          "sourcePackage": "diffutils",
+          "sourceVersion": "1:3.8-4",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "dpkg",
+          "version": "1.21.23",
+          "rawSource": null,
+          "sourcePackage": "dpkg",
+          "sourceVersion": "1.21.23",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "e2fsprogs",
+          "version": "1.47.0-2+b2",
+          "rawSource": "e2fsprogs (1.47.0-2)",
+          "sourcePackage": "e2fsprogs",
+          "sourceVersion": "1.47.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "findutils",
+          "version": "4.9.0-4",
+          "rawSource": null,
+          "sourcePackage": "findutils",
+          "sourceVersion": "4.9.0-4",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "gcc-12-base",
+          "version": "12.2.0-14+deb12u1",
+          "rawSource": "gcc-12",
+          "sourcePackage": "gcc-12",
+          "sourceVersion": "12.2.0-14+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "gpgv",
+          "version": "2.2.40-1.1+deb12u2",
+          "rawSource": "gnupg2",
+          "sourcePackage": "gnupg2",
+          "sourceVersion": "2.2.40-1.1+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "grep",
+          "version": "3.8-5",
+          "rawSource": null,
+          "sourcePackage": "grep",
+          "sourceVersion": "3.8-5",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "gzip",
+          "version": "1.12-1",
+          "rawSource": null,
+          "sourcePackage": "gzip",
+          "sourceVersion": "1.12-1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "hostname",
+          "version": "3.23+nmu1",
+          "rawSource": null,
+          "sourcePackage": "hostname",
+          "sourceVersion": "3.23+nmu1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "init-system-helpers",
+          "version": "1.65.2+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "init-system-helpers",
+          "sourceVersion": "1.65.2+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "all"
+        },
+        {
+          "name": "libacl1",
+          "version": "2.3.1-3",
+          "rawSource": "acl",
+          "sourcePackage": "acl",
+          "sourceVersion": "2.3.1-3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libapt-pkg6.0",
+          "version": "2.6.1",
+          "rawSource": "apt",
+          "sourcePackage": "apt",
+          "sourceVersion": "2.6.1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libattr1",
+          "version": "1:2.5.1-4",
+          "rawSource": "attr",
+          "sourcePackage": "attr",
+          "sourceVersion": "1:2.5.1-4",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libaudit-common",
+          "version": "1:3.0.9-1",
+          "rawSource": "audit",
+          "sourcePackage": "audit",
+          "sourceVersion": "1:3.0.9-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "all"
+        },
+        {
+          "name": "libaudit1",
+          "version": "1:3.0.9-1",
+          "rawSource": "audit",
+          "sourcePackage": "audit",
+          "sourceVersion": "1:3.0.9-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libblkid1",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libbz2-1.0",
+          "version": "1.0.8-5+b1",
+          "rawSource": "bzip2 (1.0.8-5)",
+          "sourcePackage": "bzip2",
+          "sourceVersion": "1.0.8-5",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libc-bin",
+          "version": "2.36-9+deb12u14",
+          "rawSource": "glibc",
+          "sourcePackage": "glibc",
+          "sourceVersion": "2.36-9+deb12u14",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libc6",
+          "version": "2.36-9+deb12u14",
+          "rawSource": "glibc",
+          "sourcePackage": "glibc",
+          "sourceVersion": "2.36-9+deb12u14",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libcap-ng0",
+          "version": "0.8.3-1+b3",
+          "rawSource": "libcap-ng (0.8.3-1)",
+          "sourcePackage": "libcap-ng",
+          "sourceVersion": "0.8.3-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libcap2",
+          "version": "1:2.66-4+deb12u3+b1",
+          "rawSource": "libcap2 (1:2.66-4+deb12u3)",
+          "sourcePackage": "libcap2",
+          "sourceVersion": "1:2.66-4+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libcom-err2",
+          "version": "1.47.0-2+b2",
+          "rawSource": "e2fsprogs (1.47.0-2)",
+          "sourcePackage": "e2fsprogs",
+          "sourceVersion": "1.47.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libcrypt1",
+          "version": "1:4.4.33-2",
+          "rawSource": "libxcrypt",
+          "sourcePackage": "libxcrypt",
+          "sourceVersion": "1:4.4.33-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libdb5.3",
+          "version": "5.3.28+dfsg2-1",
+          "rawSource": "db5.3",
+          "sourcePackage": "db5.3",
+          "sourceVersion": "5.3.28+dfsg2-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libdebconfclient0",
+          "version": "0.270",
+          "rawSource": "cdebconf",
+          "sourcePackage": "cdebconf",
+          "sourceVersion": "0.270",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libext2fs2",
+          "version": "1.47.0-2+b2",
+          "rawSource": "e2fsprogs (1.47.0-2)",
+          "sourcePackage": "e2fsprogs",
+          "sourceVersion": "1.47.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libffi8",
+          "version": "3.4.4-1",
+          "rawSource": "libffi",
+          "sourcePackage": "libffi",
+          "sourceVersion": "3.4.4-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libgcc-s1",
+          "version": "12.2.0-14+deb12u1",
+          "rawSource": "gcc-12",
+          "sourcePackage": "gcc-12",
+          "sourceVersion": "12.2.0-14+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libgcrypt20",
+          "version": "1.10.1-3+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "libgcrypt20",
+          "sourceVersion": "1.10.1-3+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libgmp10",
+          "version": "2:6.2.1+dfsg1-1.1",
+          "rawSource": "gmp",
+          "sourcePackage": "gmp",
+          "sourceVersion": "2:6.2.1+dfsg1-1.1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libgnutls30",
+          "version": "3.7.9-2+deb12u7",
+          "rawSource": "gnutls28",
+          "sourcePackage": "gnutls28",
+          "sourceVersion": "3.7.9-2+deb12u7",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libgpg-error0",
+          "version": "1.46-1",
+          "rawSource": "libgpg-error",
+          "sourcePackage": "libgpg-error",
+          "sourceVersion": "1.46-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libhogweed6",
+          "version": "3.8.1-2",
+          "rawSource": "nettle",
+          "sourcePackage": "nettle",
+          "sourceVersion": "3.8.1-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libidn2-0",
+          "version": "2.3.3-1+b1",
+          "rawSource": "libidn2 (2.3.3-1)",
+          "sourcePackage": "libidn2",
+          "sourceVersion": "2.3.3-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "liblz4-1",
+          "version": "1.9.4-1",
+          "rawSource": "lz4",
+          "sourcePackage": "lz4",
+          "sourceVersion": "1.9.4-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "liblzma5",
+          "version": "5.4.1-1+deb12u2",
+          "rawSource": "xz-utils",
+          "sourcePackage": "xz-utils",
+          "sourceVersion": "5.4.1-1+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libmd0",
+          "version": "1.0.4-2",
+          "rawSource": "libmd",
+          "sourcePackage": "libmd",
+          "sourceVersion": "1.0.4-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libmount1",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libnettle8",
+          "version": "3.8.1-2",
+          "rawSource": "nettle",
+          "sourcePackage": "nettle",
+          "sourceVersion": "3.8.1-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libp11-kit0",
+          "version": "0.24.1-2",
+          "rawSource": "p11-kit",
+          "sourcePackage": "p11-kit",
+          "sourceVersion": "0.24.1-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libpam-modules",
+          "version": "1.5.2-6+deb12u2",
+          "rawSource": "pam",
+          "sourcePackage": "pam",
+          "sourceVersion": "1.5.2-6+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libpam-modules-bin",
+          "version": "1.5.2-6+deb12u2",
+          "rawSource": "pam",
+          "sourcePackage": "pam",
+          "sourceVersion": "1.5.2-6+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libpam-runtime",
+          "version": "1.5.2-6+deb12u2",
+          "rawSource": "pam",
+          "sourcePackage": "pam",
+          "sourceVersion": "1.5.2-6+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "all"
+        },
+        {
+          "name": "libpam0g",
+          "version": "1.5.2-6+deb12u2",
+          "rawSource": "pam",
+          "sourcePackage": "pam",
+          "sourceVersion": "1.5.2-6+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libpcre2-8-0",
+          "version": "10.42-1+deb12u2",
+          "rawSource": "pcre2",
+          "sourcePackage": "pcre2",
+          "sourceVersion": "10.42-1+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libseccomp2",
+          "version": "2.5.4-1+deb12u1",
+          "rawSource": "libseccomp",
+          "sourcePackage": "libseccomp",
+          "sourceVersion": "2.5.4-1+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libselinux1",
+          "version": "3.4-1+b6",
+          "rawSource": "libselinux (3.4-1)",
+          "sourcePackage": "libselinux",
+          "sourceVersion": "3.4-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libsemanage-common",
+          "version": "3.4-1",
+          "rawSource": "libsemanage",
+          "sourcePackage": "libsemanage",
+          "sourceVersion": "3.4-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "all"
+        },
+        {
+          "name": "libsemanage2",
+          "version": "3.4-1+b5",
+          "rawSource": "libsemanage (3.4-1)",
+          "sourcePackage": "libsemanage",
+          "sourceVersion": "3.4-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libsepol2",
+          "version": "3.4-2.1",
+          "rawSource": "libsepol",
+          "sourcePackage": "libsepol",
+          "sourceVersion": "3.4-2.1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libsmartcols1",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libss2",
+          "version": "1.47.0-2+b2",
+          "rawSource": "e2fsprogs (1.47.0-2)",
+          "sourcePackage": "e2fsprogs",
+          "sourceVersion": "1.47.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libstdc++6",
+          "version": "12.2.0-14+deb12u1",
+          "rawSource": "gcc-12",
+          "sourcePackage": "gcc-12",
+          "sourceVersion": "12.2.0-14+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libsystemd0",
+          "version": "252.39-1~deb12u2",
+          "rawSource": "systemd",
+          "sourcePackage": "systemd",
+          "sourceVersion": "252.39-1~deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libtasn1-6",
+          "version": "4.19.0-2+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "libtasn1-6",
+          "sourceVersion": "4.19.0-2+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libtinfo6",
+          "version": "6.4-4",
+          "rawSource": "ncurses",
+          "sourcePackage": "ncurses",
+          "sourceVersion": "6.4-4",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libudev1",
+          "version": "252.39-1~deb12u2",
+          "rawSource": "systemd",
+          "sourcePackage": "systemd",
+          "sourceVersion": "252.39-1~deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libunistring2",
+          "version": "1.0-2",
+          "rawSource": "libunistring",
+          "sourcePackage": "libunistring",
+          "sourceVersion": "1.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libuuid1",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libxxhash0",
+          "version": "0.8.1-1",
+          "rawSource": "xxhash",
+          "sourcePackage": "xxhash",
+          "sourceVersion": "0.8.1-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "libzstd1",
+          "version": "1.5.4+dfsg2-5",
+          "rawSource": "libzstd",
+          "sourcePackage": "libzstd",
+          "sourceVersion": "1.5.4+dfsg2-5",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "login",
+          "version": "1:4.13+dfsg1-1+deb12u2",
+          "rawSource": "shadow",
+          "sourcePackage": "shadow",
+          "sourceVersion": "1:4.13+dfsg1-1+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "logsave",
+          "version": "1.47.0-2+b2",
+          "rawSource": "e2fsprogs (1.47.0-2)",
+          "sourcePackage": "e2fsprogs",
+          "sourceVersion": "1.47.0-2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "mawk",
+          "version": "1.3.4.20200120-3.1",
+          "rawSource": null,
+          "sourcePackage": "mawk",
+          "sourceVersion": "1.3.4.20200120-3.1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "mount",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "ncurses-base",
+          "version": "6.4-4",
+          "rawSource": "ncurses",
+          "sourcePackage": "ncurses",
+          "sourceVersion": "6.4-4",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "all"
+        },
+        {
+          "name": "ncurses-bin",
+          "version": "6.4-4",
+          "rawSource": "ncurses",
+          "sourcePackage": "ncurses",
+          "sourceVersion": "6.4-4",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "passwd",
+          "version": "1:4.13+dfsg1-1+deb12u2",
+          "rawSource": "shadow",
+          "sourcePackage": "shadow",
+          "sourceVersion": "1:4.13+dfsg1-1+deb12u2",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "perl-base",
+          "version": "5.36.0-7+deb12u3",
+          "rawSource": "perl",
+          "sourcePackage": "perl",
+          "sourceVersion": "5.36.0-7+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "sed",
+          "version": "4.9-1+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "sed",
+          "sourceVersion": "4.9-1+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "sysvinit-utils",
+          "version": "3.06-4",
+          "rawSource": "sysvinit",
+          "sourcePackage": "sysvinit",
+          "sourceVersion": "3.06-4",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "tar",
+          "version": "1.34+dfsg-1.2+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "tar",
+          "sourceVersion": "1.34+dfsg-1.2+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "tzdata",
+          "version": "2026c-0+deb12u1",
+          "rawSource": null,
+          "sourcePackage": "tzdata",
+          "sourceVersion": "2026c-0+deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "all"
+        },
+        {
+          "name": "usr-is-merged",
+          "version": "37~deb12u1",
+          "rawSource": "usrmerge",
+          "sourcePackage": "usrmerge",
+          "sourceVersion": "37~deb12u1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "all"
+        },
+        {
+          "name": "util-linux",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": null,
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-defaulted-by-debian-policy",
+          "architecture": "amd64"
+        },
+        {
+          "name": "util-linux-extra",
+          "version": "2.38.1-5+deb12u3",
+          "rawSource": "util-linux",
+          "sourcePackage": "util-linux",
+          "sourceVersion": "2.38.1-5+deb12u3",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        },
+        {
+          "name": "zlib1g",
+          "version": "1:1.2.13.dfsg-1",
+          "rawSource": "zlib",
+          "sourcePackage": "zlib",
+          "sourceVersion": "1:1.2.13.dfsg-1",
+          "sourceMapping": "dpkg-query-virtual-fields-confirmed-by-raw-source",
+          "architecture": "amd64"
+        }
+      ],
+      "error": null
+    },
+    "sourceMappingMethod": {
+      "description": "dpkg-query virtual source:Package/source:Version fields provide the source package identity. Debian Policy permits Source to be omitted from binary control data when source name and version equal the binary package.",
+      "dpkgQueryReference": "https://manpages.debian.org/bookworm/dpkg/dpkg-query.1.en.html",
+      "debianPolicyReference": "https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-source",
+      "rawSourceFieldPreserved": true,
+      "defaultedPackageCount": 23,
+      "unresolvedPackageCount": 0
+    },
+    "copyrightAndLicenseFiles": [
+      {
+        "package": "adduser",
+        "version": "3.134",
+        "path": "/usr/share/doc/adduser/copyright",
+        "bytes": 12432,
+        "sha256": "b143053a4862ab354831487b5f8bd31dc9ffdc589d15de9d9c764332a0209796"
+      },
+      {
+        "package": "apt",
+        "version": "2.6.1",
+        "path": "/usr/share/doc/apt/copyright",
+        "bytes": 7668,
+        "sha256": "b4701305243d8d746f4acaafe15d94f946251b05691bd6917fef41dd15e9ee12"
+      },
+      {
+        "package": "base-files",
+        "version": "12.4+deb12u15",
+        "path": "/usr/share/doc/base-files/copyright",
+        "bytes": 1208,
+        "sha256": "fd7e4aae7e7b05f217bcf2d02322825c360e66c52c4c2f1b28d784d6297a1c23"
+      },
+      {
+        "package": "base-passwd",
+        "version": "3.6.1",
+        "path": "/usr/share/doc/base-passwd/copyright",
+        "bytes": 798,
+        "sha256": "0f1cde79bd80a75f9029ae9a8c252b642223027ef36f6989c63a8230aae576a7"
+      },
+      {
+        "package": "bash",
+        "version": "5.2.15-2+b13",
+        "path": "/usr/share/doc/bash/copyright",
+        "bytes": 9764,
+        "sha256": "06319d84c3e5ed096036f6a9310a030c7e84e50dff2b8a6792285c83ec0ada73"
+      },
+      {
+        "package": "bsdutils",
+        "version": "1:2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/bsdutils/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "coreutils",
+        "version": "9.1-1",
+        "path": "/usr/share/doc/coreutils/copyright",
+        "bytes": 5552,
+        "sha256": "24e86c5ca53d6bfd8e0c47988160daa62d10a74997fe11f651e1d9533c78bff6"
+      },
+      {
+        "package": "dash",
+        "version": "0.5.12-2",
+        "path": "/usr/share/doc/dash/copyright",
+        "bytes": 3878,
+        "sha256": "d98c53f281321baad38164aa9ae6e368a9253be6ec51bd26a759b5e72b326f4a"
+      },
+      {
+        "package": "debconf",
+        "version": "1.5.82",
+        "path": "/usr/share/doc/debconf/copyright",
+        "bytes": 2764,
+        "sha256": "57163c71bd8a5289660892827dd0dfaa7fef47f89deedc9dc6711ced7d0a28d7"
+      },
+      {
+        "package": "debian-archive-keyring",
+        "version": "2023.3+deb12u2",
+        "path": "/usr/share/doc/debian-archive-keyring/copyright",
+        "bytes": 1243,
+        "sha256": "b32aecaae84643700a33bc9ee83fa9b36938d35aa7b61b5042092eca77ddb732"
+      },
+      {
+        "package": "debianutils",
+        "version": "5.7-0.5~deb12u1",
+        "path": "/usr/share/doc/debianutils/copyright",
+        "bytes": 9055,
+        "sha256": "fd2d797e208bcfb713510e47a89867191180943e1167d44c2acd8ff1b88e5c10"
+      },
+      {
+        "package": "diffutils",
+        "version": "1:3.8-4",
+        "path": "/usr/share/doc/diffutils/copyright",
+        "bytes": 16112,
+        "sha256": "8654d7cc7cdae1f31bb67a3ce5bf35d512c0bdfffd071df757edc54153cc7930"
+      },
+      {
+        "package": "dpkg",
+        "version": "1.21.23",
+        "path": "/usr/share/doc/dpkg/copyright",
+        "bytes": 7943,
+        "sha256": "7442bdadcd44e818fddd786057db07639cc68225c389c7c240d3bb3984b05173"
+      },
+      {
+        "package": "e2fsprogs",
+        "version": "1.47.0-2+b2",
+        "path": "/usr/share/doc/e2fsprogs/copyright",
+        "bytes": 15209,
+        "sha256": "1ca415a294c0e56958c4f795b3f1f69ea3479bca53d7811f5cdd020a258949db"
+      },
+      {
+        "package": "findutils",
+        "version": "4.9.0-4",
+        "path": "/usr/share/doc/findutils/copyright",
+        "bytes": 24782,
+        "sha256": "8fbcc77ed31f480a85654e9b6d1d25cbb95b62e9dc5159ae1565bca684c3e1dc"
+      },
+      {
+        "package": "gcc-12-base",
+        "version": "12.2.0-14+deb12u1",
+        "path": "/usr/share/doc/gcc-12-base/copyright",
+        "bytes": 68194,
+        "sha256": "da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
+      },
+      {
+        "package": "gpgv",
+        "version": "2.2.40-1.1+deb12u2",
+        "path": "/usr/share/doc/gpgv/copyright",
+        "bytes": 10555,
+        "sha256": "84dab06b5c1baf3a7a45c3cdc5f98fb121234e98fdd6266c3f773d54fcdc4f54"
+      },
+      {
+        "package": "grep",
+        "version": "3.8-5",
+        "path": "/usr/share/doc/grep/copyright",
+        "bytes": 1807,
+        "sha256": "42d9b4d610396b1e8d1303dcb9487af3f5a2d2709623cf03a04cf76acdf6c5e3"
+      },
+      {
+        "package": "gzip",
+        "version": "1.12-1",
+        "path": "/usr/share/doc/gzip/copyright",
+        "bytes": 2895,
+        "sha256": "1ca5dd5098fe2e1c0f0d05196f5b3da8b414a807702e6ca8b536eb5fd3059130"
+      },
+      {
+        "package": "hostname",
+        "version": "3.23+nmu1",
+        "path": "/usr/share/doc/hostname/copyright",
+        "bytes": 1273,
+        "sha256": "94189fc5a9a7b7224d96e1a0cfdfe9be0df2018b04bf21d591627ab96b30cad1"
+      },
+      {
+        "package": "init-system-helpers",
+        "version": "1.65.2+deb12u1",
+        "path": "/usr/share/doc/init-system-helpers/copyright",
+        "bytes": 3133,
+        "sha256": "7534601cc4fa513804d16490359f5831e7b6a1212da3bbf948bebdd4c8799783"
+      },
+      {
+        "package": "libacl1",
+        "version": "2.3.1-3",
+        "path": "/usr/share/doc/libacl1/copyright",
+        "bytes": 2048,
+        "sha256": "9a2dfb4a5abc7e84be2cc41f1089be665519c9409549296f6c19de57ab1d37c2"
+      },
+      {
+        "package": "libapt-pkg6.0",
+        "version": "2.6.1",
+        "path": "/usr/share/doc/libapt-pkg6.0/copyright",
+        "bytes": 7668,
+        "sha256": "b4701305243d8d746f4acaafe15d94f946251b05691bd6917fef41dd15e9ee12"
+      },
+      {
+        "package": "libattr1",
+        "version": "1:2.5.1-4",
+        "path": "/usr/share/doc/libattr1/copyright",
+        "bytes": 1947,
+        "sha256": "0cbec745d85ea775450b2d54fac55277197f429e52d611f72852ed420450620e"
+      },
+      {
+        "package": "libaudit-common",
+        "version": "1:3.0.9-1",
+        "path": "/usr/share/doc/libaudit-common/copyright",
+        "bytes": 1596,
+        "sha256": "6c7011e93f643b112c4cc3622131e28a30477afad6c4f5efe466b13aa7f603cc"
+      },
+      {
+        "package": "libaudit1",
+        "version": "1:3.0.9-1",
+        "path": "/usr/share/doc/libaudit1/copyright",
+        "bytes": 1596,
+        "sha256": "6c7011e93f643b112c4cc3622131e28a30477afad6c4f5efe466b13aa7f603cc"
+      },
+      {
+        "package": "libblkid1",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/libblkid1/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "libbz2-1.0",
+        "version": "1.0.8-5+b1",
+        "path": "/usr/share/doc/libbz2-1.0/copyright",
+        "bytes": 2228,
+        "sha256": "832ed535ff3c3d025a8d2348eb1b697b89addcf2eaadbc17650262040b9145e2"
+      },
+      {
+        "package": "libc-bin",
+        "version": "2.36-9+deb12u14",
+        "path": "/usr/share/doc/libc-bin/copyright",
+        "bytes": 25467,
+        "sha256": "40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"
+      },
+      {
+        "package": "libc6",
+        "version": "2.36-9+deb12u14",
+        "path": "/usr/share/doc/libc6/copyright",
+        "bytes": 25467,
+        "sha256": "40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"
+      },
+      {
+        "package": "libcap-ng0",
+        "version": "0.8.3-1+b3",
+        "path": "/usr/share/doc/libcap-ng0/copyright",
+        "bytes": 2035,
+        "sha256": "49b5db19990a3e3cc1a9ed716aed231f6f3c1c217e58f62ae4dc2818c6d3e9cc"
+      },
+      {
+        "package": "libcap2",
+        "version": "1:2.66-4+deb12u3+b1",
+        "path": "/usr/share/doc/libcap2/copyright",
+        "bytes": 4631,
+        "sha256": "e60a5642e12e340060e4e519a65b2eb0330be2917854841c644e36268f607d54"
+      },
+      {
+        "package": "libcom-err2",
+        "version": "1.47.0-2+b2",
+        "path": "/usr/share/doc/libcom-err2/copyright",
+        "bytes": 15209,
+        "sha256": "1ca415a294c0e56958c4f795b3f1f69ea3479bca53d7811f5cdd020a258949db"
+      },
+      {
+        "package": "libcrypt1",
+        "version": "1:4.4.33-2",
+        "path": "/usr/share/doc/libcrypt1/copyright",
+        "bytes": 6010,
+        "sha256": "5a5e7ca0e9f3f9679977e3a3e9ede45ad92885a3297ea78e766979f9866c5a16"
+      },
+      {
+        "package": "libdb5.3",
+        "version": "5.3.28+dfsg2-1",
+        "path": "/usr/share/doc/libdb5.3/copyright",
+        "bytes": 17177,
+        "sha256": "8b53da37d73289d9df7317b3a2dbe16491f1fa9fec8b77b86d69704b40ce2c26"
+      },
+      {
+        "package": "libdebconfclient0",
+        "version": "0.270",
+        "path": "/usr/share/doc/libdebconfclient0/copyright",
+        "bytes": 5856,
+        "sha256": "cf63099896d1c0f6529c41b8d95738e6fea342ffba609187d339c4f38ce36ecc"
+      },
+      {
+        "package": "libext2fs2",
+        "version": "1.47.0-2+b2",
+        "path": "/usr/share/doc/libext2fs2/copyright",
+        "bytes": 15209,
+        "sha256": "1ca415a294c0e56958c4f795b3f1f69ea3479bca53d7811f5cdd020a258949db"
+      },
+      {
+        "package": "libffi8",
+        "version": "3.4.4-1",
+        "path": "/usr/share/doc/libffi8/copyright",
+        "bytes": 10165,
+        "sha256": "f83d2ecba1ea4d99957e81c50bebbd076a128194288a3ec22cc8ccdb77c43087"
+      },
+      {
+        "package": "libgcc-s1",
+        "version": "12.2.0-14+deb12u1",
+        "path": "/usr/share/doc/libgcc-s1/copyright",
+        "bytes": 68194,
+        "sha256": "da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
+      },
+      {
+        "package": "libgcrypt20",
+        "version": "1.10.1-3+deb12u1",
+        "path": "/usr/share/doc/libgcrypt20/copyright",
+        "bytes": 24896,
+        "sha256": "95db2f9da663f2bfe2aabe9c72fce9d6c9ae767b912f397d7823f50bd55a1a7d"
+      },
+      {
+        "package": "libgmp10",
+        "version": "2:6.2.1+dfsg1-1.1",
+        "path": "/usr/share/doc/libgmp10/copyright",
+        "bytes": 4153,
+        "sha256": "7d366aef5ba325150246de1d7820c4c9926cd27ca61a69948492b26cd3b61601"
+      },
+      {
+        "package": "libgnutls30",
+        "version": "3.7.9-2+deb12u7",
+        "path": "/usr/share/doc/libgnutls30/copyright",
+        "bytes": 51588,
+        "sha256": "bb7e5c24b3e27bbba5671dd710d159a0066833bda4caa1d55d8027ffed539337"
+      },
+      {
+        "package": "libgpg-error0",
+        "version": "1.46-1",
+        "path": "/usr/share/doc/libgpg-error0/copyright",
+        "bytes": 4903,
+        "sha256": "8760fd36efa1d7186f8769d4e76a3e678045b94d54465bf6f2db5eb871c7c27f"
+      },
+      {
+        "package": "libhogweed6",
+        "version": "3.8.1-2",
+        "path": "/usr/share/doc/libhogweed6/copyright",
+        "bytes": 24923,
+        "sha256": "ca2ca597320220c00ef6dc0fe5d0d82025548d6d4ba80e85615eb691f9021f93"
+      },
+      {
+        "package": "libidn2-0",
+        "version": "2.3.3-1+b1",
+        "path": "/usr/share/doc/libidn2-0/copyright",
+        "bytes": 5348,
+        "sha256": "41702469f28e8ff406345e3d1dd0c741f11bdfca319264f67036efd6aaa79e4b"
+      },
+      {
+        "package": "liblz4-1",
+        "version": "1.9.4-1",
+        "path": "/usr/share/doc/liblz4-1/copyright",
+        "bytes": 3275,
+        "sha256": "d3be0f43fe14da244f97c451bbae789c0acf868612598a69f5f22a289abeca40"
+      },
+      {
+        "package": "liblzma5",
+        "version": "5.4.1-1+deb12u2",
+        "path": "/usr/share/doc/liblzma5/copyright",
+        "bytes": 15465,
+        "sha256": "a2dc8fac0f496e1c58aff67018cf0c6b88336316afa5642f9335b71642e28aa8"
+      },
+      {
+        "package": "libmd0",
+        "version": "1.0.4-2",
+        "path": "/usr/share/doc/libmd0/copyright",
+        "bytes": 8018,
+        "sha256": "4365ef6255ad553fce69dd4bc0e093472c5d0e41b8ea493a545cc926ce171aa6"
+      },
+      {
+        "package": "libmount1",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/libmount1/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "libnettle8",
+        "version": "3.8.1-2",
+        "path": "/usr/share/doc/libnettle8/copyright",
+        "bytes": 24923,
+        "sha256": "ca2ca597320220c00ef6dc0fe5d0d82025548d6d4ba80e85615eb691f9021f93"
+      },
+      {
+        "package": "libp11-kit0",
+        "version": "0.24.1-2",
+        "path": "/usr/share/doc/libp11-kit0/copyright",
+        "bytes": 8646,
+        "sha256": "ed139379f7c874f0ee75f3ddcc2e01091dd828d84ee1a0bdff6a1c5673ee6e58"
+      },
+      {
+        "package": "libpam-modules-bin",
+        "version": "1.5.2-6+deb12u2",
+        "path": "/usr/share/doc/libpam-modules-bin/copyright",
+        "bytes": 9477,
+        "sha256": "9596b9028339d66c285422237728d6170e1e29d0b0d9adf0e9f1bda82e2391ce"
+      },
+      {
+        "package": "libpam-modules",
+        "version": "1.5.2-6+deb12u2",
+        "path": "/usr/share/doc/libpam-modules/copyright",
+        "bytes": 9477,
+        "sha256": "9596b9028339d66c285422237728d6170e1e29d0b0d9adf0e9f1bda82e2391ce"
+      },
+      {
+        "package": "libpam-runtime",
+        "version": "1.5.2-6+deb12u2",
+        "path": "/usr/share/doc/libpam-runtime/copyright",
+        "bytes": 9477,
+        "sha256": "9596b9028339d66c285422237728d6170e1e29d0b0d9adf0e9f1bda82e2391ce"
+      },
+      {
+        "package": "libpam0g",
+        "version": "1.5.2-6+deb12u2",
+        "path": "/usr/share/doc/libpam0g/copyright",
+        "bytes": 9477,
+        "sha256": "9596b9028339d66c285422237728d6170e1e29d0b0d9adf0e9f1bda82e2391ce"
+      },
+      {
+        "package": "libpcre2-8-0",
+        "version": "10.42-1+deb12u2",
+        "path": "/usr/share/doc/libpcre2-8-0/copyright",
+        "bytes": 6626,
+        "sha256": "030511beb4d9d620ad09914c369c36ec0528dcf301d1923cc643c948ee7c6a38"
+      },
+      {
+        "package": "libseccomp2",
+        "version": "2.5.4-1+deb12u1",
+        "path": "/usr/share/doc/libseccomp2/copyright",
+        "bytes": 1429,
+        "sha256": "6da0653a365b80ab31478dbfe9e7c358e80d58b6d2b52b4e16b4dbb42d7d9f5c"
+      },
+      {
+        "package": "libselinux1",
+        "version": "3.4-1+b6",
+        "path": "/usr/share/doc/libselinux1/copyright",
+        "bytes": 3131,
+        "sha256": "641806738b0c6a3d03168c2649e6b94205198bb66cd557e6bae3a20b71c9bb0b"
+      },
+      {
+        "package": "libsemanage-common",
+        "version": "3.4-1",
+        "path": "/usr/share/doc/libsemanage-common/copyright",
+        "bytes": 1830,
+        "sha256": "e00e6a86c598f9e24ced0180a70a5f2f2e45e133d93adf2b17ce8a06ce4b1b51"
+      },
+      {
+        "package": "libsemanage2",
+        "version": "3.4-1+b5",
+        "path": "/usr/share/doc/libsemanage2/copyright",
+        "bytes": 1830,
+        "sha256": "e00e6a86c598f9e24ced0180a70a5f2f2e45e133d93adf2b17ce8a06ce4b1b51"
+      },
+      {
+        "package": "libsepol2",
+        "version": "3.4-2.1",
+        "path": "/usr/share/doc/libsepol2/copyright",
+        "bytes": 3750,
+        "sha256": "78d2a34606a0302057ec499a3b3c07bcbc43ca334064ce4c80891a0f69c8f6c6"
+      },
+      {
+        "package": "libsmartcols1",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/libsmartcols1/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "libss2",
+        "version": "1.47.0-2+b2",
+        "path": "/usr/share/doc/libss2/copyright",
+        "bytes": 15209,
+        "sha256": "1ca415a294c0e56958c4f795b3f1f69ea3479bca53d7811f5cdd020a258949db"
+      },
+      {
+        "package": "libstdc++6",
+        "version": "12.2.0-14+deb12u1",
+        "path": "/usr/share/doc/libstdc++6/copyright",
+        "bytes": 68194,
+        "sha256": "da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"
+      },
+      {
+        "package": "libsystemd0",
+        "version": "252.39-1~deb12u2",
+        "path": "/usr/share/doc/libsystemd0/copyright",
+        "bytes": 12776,
+        "sha256": "a7d06854714a1ca99f6dbd1a1641dde5bcf28635be149f6554449618f8f427f3"
+      },
+      {
+        "package": "libtasn1-6",
+        "version": "4.19.0-2+deb12u1",
+        "path": "/usr/share/doc/libtasn1-6/copyright",
+        "bytes": 3451,
+        "sha256": "572ad60ad184d8f52c6dc66d83a61a68f137db560b3452ce00588c9ecf128a65"
+      },
+      {
+        "package": "libtinfo6",
+        "version": "6.4-4",
+        "path": "/usr/share/doc/libtinfo6/copyright",
+        "bytes": 4670,
+        "sha256": "f0974fb41778e23c94111ff90da0546de8971f8270c58877283d372e6bd7f17e"
+      },
+      {
+        "package": "libudev1",
+        "version": "252.39-1~deb12u2",
+        "path": "/usr/share/doc/libudev1/copyright",
+        "bytes": 12776,
+        "sha256": "a7d06854714a1ca99f6dbd1a1641dde5bcf28635be149f6554449618f8f427f3"
+      },
+      {
+        "package": "libunistring2",
+        "version": "1.0-2",
+        "path": "/usr/share/doc/libunistring2/copyright",
+        "bytes": 6068,
+        "sha256": "0035f89e5317f3cec389383e8727788521b0fde3e75cea881fa0e92e1d48cb57"
+      },
+      {
+        "package": "libuuid1",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/libuuid1/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "libxxhash0",
+        "version": "0.8.1-1",
+        "path": "/usr/share/doc/libxxhash0/copyright",
+        "bytes": 2579,
+        "sha256": "a123c93b07e781919ae996276ac02bb1c8b19dfde88176cd1240ab277c14a4ce"
+      },
+      {
+        "package": "libzstd1",
+        "version": "1.5.4+dfsg2-5",
+        "path": "/usr/share/doc/libzstd1/copyright",
+        "bytes": 5389,
+        "sha256": "35e85e8e9bbb71492c5f5dddf39ed65b68775a02ad8d710c25d097b497f06c49"
+      },
+      {
+        "package": "login",
+        "version": "1:4.13+dfsg1-1+deb12u2",
+        "path": "/usr/share/doc/login/copyright",
+        "bytes": 7044,
+        "sha256": "a4c3e5b19700dd3cc5961663d204bd7150f65f913314682aede5931548c436d5"
+      },
+      {
+        "package": "logsave",
+        "version": "1.47.0-2+b2",
+        "path": "/usr/share/doc/logsave/copyright",
+        "bytes": 15209,
+        "sha256": "1ca415a294c0e56958c4f795b3f1f69ea3479bca53d7811f5cdd020a258949db"
+      },
+      {
+        "package": "mawk",
+        "version": "1.3.4.20200120-3.1",
+        "path": "/usr/share/doc/mawk/copyright",
+        "bytes": 22591,
+        "sha256": "167d04422f2fdf76ab565878c23be8ba0c2ebb2c57a5dac0a5a59ccd27e747a5"
+      },
+      {
+        "package": "mount",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/mount/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "ncurses-base",
+        "version": "6.4-4",
+        "path": "/usr/share/doc/ncurses-base/copyright",
+        "bytes": 4670,
+        "sha256": "f0974fb41778e23c94111ff90da0546de8971f8270c58877283d372e6bd7f17e"
+      },
+      {
+        "package": "ncurses-bin",
+        "version": "6.4-4",
+        "path": "/usr/share/doc/ncurses-bin/copyright",
+        "bytes": 4670,
+        "sha256": "f0974fb41778e23c94111ff90da0546de8971f8270c58877283d372e6bd7f17e"
+      },
+      {
+        "package": "passwd",
+        "version": "1:4.13+dfsg1-1+deb12u2",
+        "path": "/usr/share/doc/passwd/copyright",
+        "bytes": 7044,
+        "sha256": "a4c3e5b19700dd3cc5961663d204bd7150f65f913314682aede5931548c436d5"
+      },
+      {
+        "package": "perl-base",
+        "version": "5.36.0-7+deb12u3",
+        "path": "/usr/share/doc/perl-base/copyright",
+        "bytes": 109772,
+        "sha256": "b52f3ca17b45473cb0da6ec46748949101fcf0dda1fd5d8b306e6c97fd41af4d"
+      },
+      {
+        "package": "sed",
+        "version": "4.9-1+deb12u1",
+        "path": "/usr/share/doc/sed/copyright",
+        "bytes": 8618,
+        "sha256": "719320e425e8e6da53a55e0fcfa2f2ed9b1332cea16abd65321bd651b2a88568"
+      },
+      {
+        "package": "sysvinit-utils",
+        "version": "3.06-4",
+        "path": "/usr/share/doc/sysvinit-utils/copyright",
+        "bytes": 4689,
+        "sha256": "ad7cb339e58a88918a883d553ca236795191f027e158788a8b33f747ff502fb2"
+      },
+      {
+        "package": "tar",
+        "version": "1.34+dfsg-1.2+deb12u1",
+        "path": "/usr/share/doc/tar/copyright",
+        "bytes": 3798,
+        "sha256": "bea61e0c172868e07845cf50423f97f093a9a46de167dbbe333a38be610c8e00"
+      },
+      {
+        "package": "tzdata",
+        "version": "2026c-0+deb12u1",
+        "path": "/usr/share/doc/tzdata/copyright",
+        "bytes": 375,
+        "sha256": "cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"
+      },
+      {
+        "package": "usr-is-merged",
+        "version": "37~deb12u1",
+        "path": "/usr/share/doc/usr-is-merged/copyright",
+        "bytes": 987,
+        "sha256": "9836bfe2ef94505bbf29701e8c90799ab1a5fd966d26d60d019a822cdbf3d61a"
+      },
+      {
+        "package": "util-linux-extra",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/util-linux-extra/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "util-linux",
+        "version": "2.38.1-5+deb12u3",
+        "path": "/usr/share/doc/util-linux/copyright",
+        "bytes": 23237,
+        "sha256": "30539a2df6a89d844f43c727505a3193a60515f8ec6cdede8cc515ed22941d1c"
+      },
+      {
+        "package": "zlib1g",
+        "version": "1:1.2.13.dfsg-1",
+        "path": "/usr/share/doc/zlib1g/copyright",
+        "bytes": 2927,
+        "sha256": "9e5b96d63773a5d177ba264254390f792be07e41748ebd94730981c6cac31cc6"
+      }
+    ],
+    "sourceMappingGaps": [],
+    "nodeBinary": {
+      "path": "/usr/local/bin/node",
+      "version": "v22.23.3",
+      "bytes": 124827920,
+      "sha256": "fde6a4bf8d0562f7751d1a2d6cb9b417c4cfe107bbcb0aa3e9a24e125e348f48"
+    },
+    "nodeLicensePathChecks": [
+      {
+        "path": "/usr/local/include/node/LICENSE",
+        "present": false,
+        "reason": "path absent"
+      },
+      {
+        "path": "/usr/local/include/node/LICENSE.txt",
+        "present": false,
+        "reason": "path absent"
+      },
+      {
+        "path": "/usr/local/include/node/COPYRIGHT",
+        "present": false,
+        "reason": "path absent"
+      },
+      {
+        "path": "/usr/local/share/doc/node/LICENSE",
+        "present": false,
+        "reason": "path absent"
+      },
+      {
+        "path": "/usr/local/share/doc/node/COPYRIGHT",
+        "present": false,
+        "reason": "path absent"
+      },
+      {
+        "path": "/usr/local/lib/node_modules/npm/LICENSE",
+        "present": true
+      }
+    ],
+    "nodeExplicitLicenseFiles": [
+      {
+        "owner": "npm-bundled-tool",
+        "path": "/usr/local/lib/node_modules/npm/LICENSE",
+        "bytes": 9742,
+        "sha256": "7610d223851f421d315df5e77974f1c68a04b97e02060e5bbbcf13d95e3ca257"
+      }
+    ],
+    "limitations": [
+      "This is the package database and installed /usr/share/doc composition of the cached image filesystem.",
+      "It does not establish licenses for files outside the queried Debian package metadata or for language-level transitive dependencies not installed as Debian packages.",
+      "Copyright/license hashes identify installed text files; they are not a legal conclusion or release approval."
+    ]
+  },
+  "releaseRequirements": [
+    "Retrieve and preserve actual notice text, corresponding sources and practical delivery obligations for the final distribution; hashes alone do not deliver notices.",
+    "Complete the non-Debian Node/npm/language dependency and scanner-binary/container SBOM, source and notice review.",
+    "No final distribution composition, source offer, LGPL/combined-work interpretation or rights acceptance is approved by this evidence."
+  ]
+}