{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"apache-poi-0.3.17-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/apache-poi-0.3.17-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-codec-1.11-56cd0c8e-7b73-42e8-966c-9bfe046c948c-2985b96b-f448-42f8-9869-def524c64827",
			"name":"apache-commons-codec",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2e4a3ec1dfe03352812b460ca5e40aebc2b11abe416dfa240b85ebb8ec88787d"
				}
			],
			"description":"Apache Commons Codec (TM) software provides implementations of common\nencoders and decoders such as Base64, Hex, Phonetic and URLs.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-codec@1.11-6.oe2409?arch=noarch&epoch=0&upstream=apache-commons-codec-1.11-6.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-codec/commons-codec@1.11",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/codec/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Apache common encoders and decoders",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.11-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-collections4-4.4-e7070762-a57b-42f2-907b-71f4bd0a52f4-23430a60-f0b4-4f31-bcff-31d8aa095a7a",
			"name":"apache-commons-collections4",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"cbfef5ec5dcba6a33322ce07865cc9fcd92cba9dab1163066e1e3f4c6aeb3c1b"
				}
			],
			"description":"Commons-Collections seek to build upon the JDK classes by providing\nnew interfaces, implementations and utilities.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-collections4@4.4-1.oe2409?arch=noarch&epoch=0&upstream=apache-commons-collections4-4.4-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-collections4@4.4",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/proper/commons-collections/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Extension of the Java Collections Framework",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-curvesapi-1.08-46c176aa-00b3-4d1d-8275-db45eeb4368e-706bf916-8ee8-4f99-95f7-77d118ddbf84",
			"name":"curvesapi",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"68ed52adfe38e9c61da2bdda04fdc544c4952592b52aa489ff1a14d129a4193a"
				}
			],
			"description":"Implementation of various mathematical curves that define themselves\nover a set of control points. The API is written in Java. The curves\nsupported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline,\nLagrange, Natural Cubic Spline, and NURBS.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/curvesapi@1.08-1.oe2409?arch=noarch&epoch=0&upstream=curvesapi-1.08-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.github.virtuald/curvesapi@1.08",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/virtuald/curvesapi",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java implementation of various mathematical curves",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.08-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-a5489c8a-0cae-4ce0-ad3e-d626105e5dd0",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-3cccc26d-8857-4602-9d68-c83aa77e4cf6",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-bc800c6e-cf9d-43b9-b80c-29167670c32d",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xmlbeans-2.6.0-adde8240-caf2-4be4-b164-2a6b142ff427-71597196-ae80-469c-a06a-60f7db599fd9",
			"name":"xmlbeans",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8087d9e12125c28c60361978b33f111099cd5d2fd9f5240e1617bb6274bc0930"
				}
			],
			"description":"XMLBeans is a tool that allows you to access the full power\nof XML in a Java friendly way. It is an XML-Java binding tool.\nThe idea is that you can take advantage the richness and\nfeatures of XML and XML Schema and have these features mapped\nas naturally as possible to the equivalent Java language and\ntyping constructs. XMLBeans uses XML Schema to compile Java\ninterfaces and classes that you can then use to access and\nmodify XML instance data. Using XMLBeans is similar to using\nany other Java interface/class, you will see things like\ngetFoo or setFoo just as you would expect when working with\nJava. While a major use of XMLBeans is to access your XML\ninstance data with strongly typed Java classes there are also\nAPI's that allow you access to the full XML infoset (XMLBeans\nkeeps full XML Infoset fidelity) as well as to allow you to\nreflect into the XML schema itself through an XML Schema\nObject model.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xmlbeans@2.6.0-2.oe2409?arch=noarch&epoch=0&upstream=xmlbeans-2.6.0-2.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.xmlbeans/xmlbeans@2.6.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.xmlbeans/xmlbeans-xmlpublic@2.6.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.xmlbeans/xmlbeans-xpath@2.6.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xmlbeans.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"XML-Java binding tool",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6.0-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-codec-1.11-56cd0c8e-7b73-42e8-966c-9bfe046c948c-2985b96b-f448-42f8-9869-def524c64827"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-collections4-4.4-e7070762-a57b-42f2-907b-71f4bd0a52f4-23430a60-f0b4-4f31-bcff-31d8aa095a7a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-curvesapi-1.08-46c176aa-00b3-4d1d-8275-db45eeb4368e-706bf916-8ee8-4f99-95f7-77d118ddbf84"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-a5489c8a-0cae-4ce0-ad3e-d626105e5dd0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-3cccc26d-8857-4602-9d68-c83aa77e4cf6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-bc800c6e-cf9d-43b9-b80c-29167670c32d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-apache-poi-3.17-43b6ce53-4e78-4a66-9584-1c611320002e",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xmlbeans-2.6.0-adde8240-caf2-4be4-b164-2a6b142ff427-71597196-ae80-469c-a06a-60f7db599fd9"
		}
	]
}