{
  "scope": "Exact-revision upstream source notices; gitHead values read from versioned npm registry metadata, tags verified against source package metadata. Root repository licenses do not replace component-specific attribution.",
  "items": [
    {
      "packages": [
        "@esbuild/linux-x64@0.28.2"
      ],
      "repository": "evanw/esbuild",
      "revision": "609683d892977362a0f99026cb74b96263d728a9",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/evanw/esbuild/609683d892977362a0f99026cb74b96263d728a9/LICENSE.md",
          "http": 200
        }
      ],
      "url": "https://raw.githubusercontent.com/evanw/esbuild/609683d892977362a0f99026cb74b96263d728a9/LICENSE.md",
      "sha256": "b40ec5baec7bb34fa5b1c09521fa3cd52d5fad7adafed74932a2010d3612a681",
      "file": "/notices/site/production-notices.txt",
      "registry_metadata": "https://registry.npmjs.org/@esbuild%2flinux-x64/0.28.2",
      "file_note": "Identical esbuild license appears in the collected notice bundle; see its esbuild section."
    },
    {
      "packages": [
        "pgpass@1.0.5"
      ],
      "repository": "hoegaarden/pgpass",
      "revision": "4230ed5e417ba6044ea7eb80b7c33db9ec301398",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/hoegaarden/pgpass/4230ed5e417ba6044ea7eb80b7c33db9ec301398/LICENSE",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/hoegaarden/pgpass/4230ed5e417ba6044ea7eb80b7c33db9ec301398/LICENSE.md",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/hoegaarden/pgpass/4230ed5e417ba6044ea7eb80b7c33db9ec301398/LICENSE.txt",
          "http": 404
        }
      ],
      "registry_metadata": "https://registry.npmjs.org/pgpass/1.0.5"
    },
    {
      "packages": [
        "pg-types@2.2.0"
      ],
      "repository": "brianc/node-pg-types",
      "revision": "d9d9dfb87eb50914043cbc178c301b7dd3b0c50d",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/brianc/node-pg-types/d9d9dfb87eb50914043cbc178c301b7dd3b0c50d/LICENSE",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/brianc/node-pg-types/d9d9dfb87eb50914043cbc178c301b7dd3b0c50d/LICENSE.md",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/brianc/node-pg-types/d9d9dfb87eb50914043cbc178c301b7dd3b0c50d/LICENSE.txt",
          "http": 404
        }
      ],
      "registry_metadata": "https://registry.npmjs.org/pg-types/2.2.0"
    },
    {
      "packages": [
        "react-remove-scroll-bar@2.3.8"
      ],
      "repository": "theKashey/react-remove-scroll-bar",
      "revision": "b3b1287aad81def2e2ae707274b74531b61ddbaf",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/theKashey/react-remove-scroll-bar/b3b1287aad81def2e2ae707274b74531b61ddbaf/LICENSE",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/theKashey/react-remove-scroll-bar/b3b1287aad81def2e2ae707274b74531b61ddbaf/LICENSE.md",
          "http": 404
        },
        {
          "url": "https://raw.githubusercontent.com/theKashey/react-remove-scroll-bar/b3b1287aad81def2e2ae707274b74531b61ddbaf/LICENSE.txt",
          "http": 404
        }
      ],
      "registry_metadata": "https://registry.npmjs.org/react-remove-scroll-bar/2.3.8"
    },
    {
      "packages": [
        "@img/sharp-libvips-linux-x64@1.3.4"
      ],
      "repository": "lovell/sharp-libvips",
      "revision": "ebb95f8add54eee8bed840e3fb587e4cbec857d7",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/lovell/sharp-libvips/ebb95f8add54eee8bed840e3fb587e4cbec857d7/LICENSE",
          "http": 200
        }
      ],
      "url": "https://raw.githubusercontent.com/lovell/sharp-libvips/ebb95f8add54eee8bed840e3fb587e4cbec857d7/LICENSE",
      "sha256": "b40930bbcf80744c86c46a12bc9da056641d722716c378f5659b9e555ef833e1",
      "file": "/notices/site/upstream/sharp-libvips.txt",
      "registry_metadata": "https://registry.npmjs.org/@img%2fsharp-libvips-linux-x64/1.3.4",
      "file_note": "Repository root Apache-2.0 license covers repository material and is not a substitute for libvips LGPL and component notices.",
      "version_evidence": {
        "url": "https://raw.githubusercontent.com/lovell/sharp-libvips/ebb95f8add54eee8bed840e3fb587e4cbec857d7/npm/linux-x64/package.json",
        "version": "1.3.4"
      }
    },
    {
      "packages": [
        "@next/env@16.4.3",
        "@next/swc-linux-x64-gnu@16.4.3"
      ],
      "repository": "vercel/next.js",
      "revision": "v16.4.3",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/vercel/next.js/v16.4.3/license.md",
          "http": 200
        }
      ],
      "url": "https://raw.githubusercontent.com/vercel/next.js/v16.4.3/license.md",
      "sha256": "ee765244e2d59f5234d474f62e0766fa0c8b99af967fdd4c0cb8dcb0c76ea224",
      "file": "/notices/site/next.txt",
      "registry_metadata": "https://registry.npmjs.org/@next%2fenv/16.4.3",
      "version_evidence": {
        "url": "https://raw.githubusercontent.com/vercel/next.js/v16.4.3/packages/next-env/package.json",
        "name": "@next/env",
        "version": "16.4.3",
        "swc_note": "The same tag contains the platform SWC package; its source manifest uses a 0.0.0 release template."
      }
    },
    {
      "packages": [
        "yuku-analyzer@0.19.0",
        "@yuku-toolchain/types@0.19.0",
        "yuku-ast@0.19.0",
        "yuku-core@0.19.0",
        "@yuku-core/binding-linux-x64-gnu@0.19.0"
      ],
      "repository": "yuku-toolchain/yuku",
      "revision": "v0.19.0",
      "attempts": [
        {
          "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/LICENSE",
          "http": 200
        }
      ],
      "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/LICENSE",
      "sha256": "8ac8d8d1663cc193ccb3fde7494ccb8e41d63de07047c20c6778c24ca09bc37f",
      "file": "/notices/site/upstream/yuku.txt",
      "registry_metadata": "https://registry.npmjs.org/yuku-analyzer/0.19.0",
      "version_evidence": [
        {
          "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/npm/yuku-analyzer/package.json",
          "version": "0.19.0"
        },
        {
          "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/npm/yuku-ast/package.json",
          "version": "0.19.0"
        },
        {
          "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/npm/yuku-core/package.json",
          "version": "0.19.0"
        },
        {
          "url": "https://raw.githubusercontent.com/yuku-toolchain/yuku/v0.19.0/npm/yuku-types/package.json",
          "version": "0.19.0"
        }
      ],
      "binding_evidence": "yuku-core 0.19.0 declares @yuku-core/binding-linux-x64-gnu 0.19.0 as an optional dependency."
    }
  ]
}