Finding information using component name and version only

A use case I am following is looking up complete licenses information, including attributions in clearlydefined from a SPDX file, which has only a list of component names, their versions and SPDX license identifier.

For this purpose, I have no information regarding the origin of the component (maven,npm, etc.). So my hope is to perform a "brute force" search through the api, which could be something like this:

```
definitions?matchCasing=false&pattern=spring-data&version=1.0
```

Ideally this will return a single item. However knowing that this has a maven release and github source, I will be getting at least 2 results in this case, from which both should offer rather similar data belonging to the same component (cant we link these!).

It is not uncommon to find similar names and versions for different libraries in different languages. At this point further filtering might be required, which currently has to be done on the users side.

What do you think about this proposal?

_{Basem Vaseghi , Daimler TSS GmbH, [Impressum](https://github.com/Daimler/daimler-foss/blob/master/LEGAL_IMPRINT.md)}