the verbatim extracted text of the license, or an empty string if unknown
an SPDX license identifier or LicenseRef, or an empty string if unknown
the name of the package as it appears in package.json
the version of the package, or an empty string if unknown
A best-effort single bundled package's information.
Note
This is roughly informed by SPDX
packagesandhasExtractedLicenseInfos, as making it conformant would vastly complicate the structure.See
https://github.com/spdx/spdx-spec/blob/development/v2.2.1/schemas/spdx-schema.json