{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"findbugs-0.3.0.1-18.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/findbugs-0.3.0.1-18.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-lang-2.6-2a2a3da0-0104-4825-928f-c2b90cf171d3-2717f4e2-56a5-4f9f-b829-cb835a4660e9",
			"name":"apache-commons-lang",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"09a4a8ba68cb0040059a18d56447ca7fb91784277047a1850fc408a3c42b7462"
				}
			],
			"description":"The standard Java libraries fail to provide enough methods for manipulation of\nits core classes. Apache Commons Lang provides these extra methods.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-lang@2.6-23.oe2409?arch=noarch&epoch=0&upstream=apache-commons-lang-2.6-23.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-lang/commons-lang@2.6",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/lang/lang@2.6",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-lang@2.6",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/lang",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Provides a host of helper utilities for the java.lang API",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6-23.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-33a66793-763c-4347-b1ac-284c9ad18d75",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-9274e135-f9c8-4d20-bf22-fecd26621d56",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-dom4j-2.0.0-73ef9837-69ed-43ab-9859-3936514236da-02f1e0fa-36b3-46a3-b43b-96d377ffe46a",
			"name":"dom4j",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b0b9d47d9bff8f8df883789e9b01d60149bb6118a0c42664d4469f7a20136026"
				}
			],
			"description":"dom4j is an easy to use, open source library for working with XML, XPath and XSLT on the Java platform\nusing the Java Collections Framework and with full support for DOM, SAX and JAXP.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/dom4j@2.0.0-9.oe2409?arch=noarch&epoch=0&upstream=dom4j-2.0.0-9.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/dom4j/dom4j@2.0.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.dom4j/dom4j@2.0.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://dom4j.github.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Flexible XML framework for Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.0.0-9.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-findbugs-bcel-6.0-524a642a-b303-42a0-b3f7-96f5614463ed-10ea92eb-47b8-4592-b338-986bfbe049c5",
			"name":"findbugs-bcel",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f35679864082495e10375d5f241e8ad32e8116ffc89bcba88bf3007f2627946b"
				}
			],
			"description":"This is a Byte Code Engineering Library (BCEL) provided for\nFindBugs 3.0.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/findbugs-bcel@6.0-0.13.20140707svn1547656.oe2409?arch=noarch&epoch=0&upstream=findbugs-bcel-6.0-0.13.20140707svn1547656.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.google.code.findbugs/bcel@6.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.google.code.findbugs/bcel-findbugs@6.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/proper/commons-bcel/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A Library for FindBugs provides Byte Code",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:6.0-0.13.20140707svn1547656.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jFormatString-0-422d494b-6172-48d7-b251-edf568c2908a-9f40c759-e9dd-40c2-ae43-96580f55a6e7",
			"name":"jFormatString",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f6c1450a1b17e9dd4d453b9e6a8167318fe2fb442545af863b4abcdb2805db1f"
				}
			],
			"description":"A checker for Java format string when compile-time.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jFormatString@0-0.31.20131227gitf159b88.oe2409?arch=noarch&epoch=0&upstream=jFormatString-0-0.31.20131227gitf159b88.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.google.code.findbugs/jFormatString@2.0.2",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://code.google.com/p/j-format-string/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A checker for Java format string when compile-time",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0-0.31.20131227gitf159b88.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.422.b05-3ebfbff8-b3ad-4795-99e5-4b3d9634131a-eaa39c99-ac99-4cd5-8ce5-0cec9d2d3f6d",
			"name":"java-1.8.0-openjdk",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eb237eb46e24fb04cab3afeb72535134fb30af3c3de2eaa5cd440bf03cf586c5"
				}
			],
			"description":"The OpenJDK runtime environment 8.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-70fbc905-2ee7-44fe-869c-ff2c65b32350",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-11.0.24.8-0abab5f8-17bd-43f9-be53-e4895fc75691-fed09ff6-6a24-4dda-b683-af74125ee586",
			"name":"java-11-openjdk",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"eb3d734775a325f216d7dadbd976b3d5116554edf07d60ece70b58b371d147fc"
				}
			],
			"description":"The OpenJDK runtime environment.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-a8c0ac91-a724-4ea0-84cc-4f75bc19810a",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-b5b74f83-79f4-497a-8f31-c86db0f981a7",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-906ac9c5-626f-4d77-ad1f-2bb2a528324e",
			"name":"javapackages-tools",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d4ca83a58ceeb3acaa84e93fd12bcef39e7030e4208aee369486ac5eb226fc48"
				}
			],
			"description":"The javapackages-tools package contains macros and scripts to support Java packaging.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-tools@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.sun/tools@SYSTEM",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/sun.jdk/jconsole@SYSTEM",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Support for Java packaging with macros and scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jaxen-1.2.0-b50909a5-bda0-4efd-9cc9-152db9bcfbc1-6b77eefc-de20-4821-81af-c6f62f680ae9",
			"name":"jaxen",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9667f0027ae976328babf266f8c349449c84a5f27462b13384117004c08388b7"
				}
			],
			"description":"Jaxen is an open source XPath library written in Java. It is adaptable\nto many different object models and also possible to write adapters that treat non-XML trees",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jaxen@1.2.0-3.oe2409?arch=noarch&epoch=0&upstream=jaxen-1.2.0-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/jaxen/jaxen@1.2.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/jaxen-xpath/jaxen",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An XPath engine written in Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.0-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jcip-annotations-1-a4b1c972-1ebb-47e8-9923-171e5dafeebb-fea90095-7256-421b-bc03-92735dfcf99b",
			"name":"jcip-annotations",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d55401deb8877d38ad06b2b388994ca43f75913263d10703ca3c29a59ef1cb60"
				}
			],
			"description":"This package provides class, field, and method level annotations for describing\nthread-safety policies. These annotations are relatively unintrusive and beneficial\nto both users and maintainers. Users can see immediately whether a class is\nthread-safe, and maintainers can see immediately whether thread-safety guarantees\nmust be preserved.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jcip-annotations@1-26.20060626.oe2409?arch=noarch&epoch=0&upstream=jcip-annotations-1-26.20060626.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/net.jcip/jcip-annotations@1.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.jcip.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java Concurrency in Practice",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1-26.20060626.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jsr-305-3.0.2-6b7a50cb-a701-43af-9acb-aa0005c6df81-f0d0ef57-0ac7-41ee-9b2d-8dfac0f04288",
			"name":"jsr-305",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f5035bf804c479b8b176917187534df9fa99515f26750294e850c50fbcd194de"
				}
			],
			"description":"This package contains reference implementations, test cases, and other\ndocuments for Java Specification Request 305: Annotations for Software Defect\nDetection.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jsr-305@3.0.2-2.oe2409?arch=noarch&epoch=0&upstream=jsr-305-3.0.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.jsr-305/ri@3.0.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://code.google.com/p/jsr-305",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Correctness annotations for Java code",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.0.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-junit-4.13.2-8f3e7e85-c79a-4c59-a0fa-3d0907690413-1a9159ec-854e-4e52-a7bd-522bbf623a81",
			"name":"junit",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"06d6f386dec8cabf6b2e77997292a279254e96233a7535a2c8eba247dc473a2f"
				}
			],
			"description":"JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/junit@4.13.2-2.oe2409?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/junit/junit@4.13.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/junit/junit-dep@4.13.2",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.junit.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A Java package for unit testing frameworks",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:4.13.2-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-objectweb-asm-8.0.1-308c9ab4-acd4-4f58-a1e9-92cf05d3bc67-350b2f3a-6ba6-4a72-a029-87c78565c086",
			"name":"objectweb-asm",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"39ad5df86d9ce057bb4ef155ef0fa912caa4bcf3784143e863d375f9b93bf3de"
				}
			],
			"description":"ASM is an all purpose Java bytecode manipulation and analysis\nframework.  It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form.  Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/objectweb-asm@8.0.1-1.oe2409?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-util@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-all@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-analysis@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-commons@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-debug-all@8.0.1",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.ow2.asm/asm-tree@8.0.1",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://asm.ow2.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java bytecode manipulation and analysis framework",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:8.0.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-perl-5.38.0-3373dd29-00bf-4751-bc96-5b01fbd1f07c-b5d16914-3406-41d2-a2a4-8da8a99a8fca",
			"name":"perl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1cc1d4df3e2feb90c5250bb3619d63d60b9ec82bb75e180bdeecccce97e37e91"
				}
			],
			"description":"Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/perl@5.38.0-8.oe2409?arch=aarch64&epoch=4&upstream=perl-5.38.0-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.perl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A highly capable, feature-rich programming language",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:5.38.0-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-perl-libs-5.38.0-7fdc2fc9-5bac-4a1d-a41c-6c102fdcce47-1e15f0a7-5733-4905-9937-2443d303279e",
			"name":"perl-libs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"767b285aad322c1f004fa698cf646f37bf052c9caaafecbbdf567655466b12f2"
				}
			],
			"description":"This package is the shared library for perl.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/perl-libs@5.38.0-8.oe2409?arch=aarch64&epoch=4&upstream=perl-5.38.0-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.perl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The libraries for the perl",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:5.38.0-8.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-lang-2.6-2a2a3da0-0104-4825-928f-c2b90cf171d3-2717f4e2-56a5-4f9f-b829-cb835a4660e9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-33a66793-763c-4347-b1ac-284c9ad18d75"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-9274e135-f9c8-4d20-bf22-fecd26621d56"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-dom4j-2.0.0-73ef9837-69ed-43ab-9859-3936514236da-02f1e0fa-36b3-46a3-b43b-96d377ffe46a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-findbugs-bcel-6.0-524a642a-b303-42a0-b3f7-96f5614463ed-10ea92eb-47b8-4592-b338-986bfbe049c5"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jFormatString-0-422d494b-6172-48d7-b251-edf568c2908a-9f40c759-e9dd-40c2-ae43-96580f55a6e7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.422.b05-3ebfbff8-b3ad-4795-99e5-4b3d9634131a-eaa39c99-ac99-4cd5-8ce5-0cec9d2d3f6d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-70fbc905-2ee7-44fe-869c-ff2c65b32350"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-11.0.24.8-0abab5f8-17bd-43f9-be53-e4895fc75691-fed09ff6-6a24-4dda-b683-af74125ee586"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-a8c0ac91-a724-4ea0-84cc-4f75bc19810a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-b5b74f83-79f4-497a-8f31-c86db0f981a7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-906ac9c5-626f-4d77-ad1f-2bb2a528324e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jaxen-1.2.0-b50909a5-bda0-4efd-9cc9-152db9bcfbc1-6b77eefc-de20-4821-81af-c6f62f680ae9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jcip-annotations-1-a4b1c972-1ebb-47e8-9923-171e5dafeebb-fea90095-7256-421b-bc03-92735dfcf99b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jsr-305-3.0.2-6b7a50cb-a701-43af-9acb-aa0005c6df81-f0d0ef57-0ac7-41ee-9b2d-8dfac0f04288"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-junit-4.13.2-8f3e7e85-c79a-4c59-a0fa-3d0907690413-1a9159ec-854e-4e52-a7bd-522bbf623a81"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-objectweb-asm-8.0.1-308c9ab4-acd4-4f58-a1e9-92cf05d3bc67-350b2f3a-6ba6-4a72-a029-87c78565c086"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-perl-5.38.0-3373dd29-00bf-4751-bc96-5b01fbd1f07c-b5d16914-3406-41d2-a2a4-8da8a99a8fca"
		},
		{
			"spdxElementId":"SPDXRef-rpm-findbugs-3.0.1-3a812b2d-6c51-4233-a89c-9dc095f251f0",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-perl-libs-5.38.0-7fdc2fc9-5bac-4a1d-a41c-6c102fdcce47-1e15f0a7-5733-4905-9937-2443d303279e"
		}
	]
}