{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"apache-commons-chain-0.1.2-2.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/apache-commons-chain-0.1.2-2.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-beanutils-1.9.4-d4faa924-8fd2-460d-82c0-ca19c04d4359-66c6d0a2-42aa-4b31-9381-54be64b3b86a",
			"name":"apache-commons-beanutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0d199d6ab4d695781e45e8a40715e35d9c46af4493cddfe5d20a7439638643af"
				}
			],
			"description":"The scope of this package is to create a package of Java utility methods\nfor accessing and modifying the properties of arbitrary JavaBeans.  No\ndependencies outside of the JDK are required, so the use of this package\nis very lightweight.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-beanutils@1.9.4-3.oe2409?arch=noarch&epoch=0&upstream=apache-commons-beanutils-1.9.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-beanutils@1.9.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-beanutils-bean-collections@1.9.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-beanutils-core@1.9.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-beanutils/commons-beanutils@1.9.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-beanutils/commons-beanutils-bean-collections@1.9.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-beanutils/commons-beanutils-core@1.9.4",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/beanutils",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java utility methods for accessing and modifying the properties of arbitrary JavaBeans",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.9.4-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-digester-2.1-241b90fd-d640-486c-87e3-10b7d8c247aa-e7774309-a871-41cd-99b0-28fb2a65f225",
			"name":"apache-commons-digester",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"bfeb41eb2ac9ddecb6c7567ae81ce0f4eeffc2eb5809390c0f2e742cb4301463"
				}
			],
			"description":"Many projects read XML configuration files to provide initialization of\nvarious Java objects within the system. There are several ways of doing this,\nand the Digester component was designed to provide a common implementation\nthat can be used in many different projects",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-digester@2.1-1.oe2409?arch=noarch&epoch=0&upstream=apache-commons-digester-2.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-digester/commons-digester@2.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-digester@2.1",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/digester/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"XML to Java object mapping module",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-logging-1.2-74d15c19-1bd0-4ee4-9970-034d32e39600-75d8f733-d7f2-4a73-a284-f8cf6ddb1706",
			"name":"apache-commons-logging",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3ffad6fb6e273b7383142ada623b96fbc21e920e984a4241bee87633ba3a4432"
				}
			],
			"description":"The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-logging@1.2-17.oe2409?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/apache/commons-logging@1.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/apache/commons-logging-api@1.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-logging/commons-logging-api@1.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-logging@1.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-logging-adapters@1.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-logging-api@1.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/apache/commons-logging-adapters@1.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-logging/commons-logging@1.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-logging/commons-logging-adapters@1.2",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/logging",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Apache Commons Logging",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2-17.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-2fa49fc1-0de5-4465-9db3-ab85f49c7dff",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-c90a6013-111c-4f6f-abf0-84cbdec85ef0",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-74360b8a-bccd-420f-aec8-079e0f407a1a",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jboss-jsf-2.1-api-2.1.29.1-c1e51c19-46bb-4de8-8f01-7542043e3f74-3636ca12-f75f-4d49-9f49-4009911d0be3",
			"name":"jboss-jsf-2.1-api",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7c61efb4d2e6b6c8883278ca8052b1e2652f79a61a07a47e8f0bcbeaaeade3df"
				}
			],
			"description":"JavaServer Faces API classes based on Version 2.1 of Specification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jboss-jsf-2.1-api@2.1.29.1-2.oe2409?arch=noarch&epoch=0&upstream=jboss-jsf-2.1-api-2.1.29.1-2.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/javax.faces/jsf-api@2.1.29.1.Final",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.jboss.spec.javax.faces/jboss-jsf-api_2.1_spec@2.1.29.1.Final",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.jboss.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JavaServer Faces 2.1 API",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.1.29.1-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-beanutils-1.9.4-d4faa924-8fd2-460d-82c0-ca19c04d4359-66c6d0a2-42aa-4b31-9381-54be64b3b86a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-digester-2.1-241b90fd-d640-486c-87e3-10b7d8c247aa-e7774309-a871-41cd-99b0-28fb2a65f225"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-logging-1.2-74d15c19-1bd0-4ee4-9970-034d32e39600-75d8f733-d7f2-4a73-a284-f8cf6ddb1706"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-2fa49fc1-0de5-4465-9db3-ab85f49c7dff"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-c90a6013-111c-4f6f-abf0-84cbdec85ef0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-74360b8a-bccd-420f-aec8-079e0f407a1a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-commons-chain-1.2-894dc5a0-2567-41e0-8922-fe626638637a",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jboss-jsf-2.1-api-2.1.29.1-c1e51c19-46bb-4de8-8f01-7542043e3f74-3636ca12-f75f-4d49-9f49-4009911d0be3"
		}
	]
}