{ "SPDXID":"SPDXRef-DOCUMENT", "name":"jgit-0.5.13.0-2.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/jgit-0.5.13.0-2.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-ant-lib-1.10.12-8dd2e293-e680-4e2a-8dd5-9d6a1f87e8e0-0045ad70-47e0-45e4-a2d1-4a9104e08216", "name":"ant-lib", "checksums":[ { "algorithm":"SHA256", "checksumValue":"4d77fd9718c3675db116ee6724f14118a26d87a40fc089c9cd9b3ef2ea08fef5" } ], "description":"Core part of Apache Ant that can be used as a library.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/ant-lib@1.10.12-1.oe2409?arch=noarch&epoch=0&upstream=ant-1.10.12-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.ant/ant-nodeps@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/ant/ant@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/ant/ant-launcher@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/apache/ant@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.ant/ant@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.ant/ant-bootstrap@1.10.12", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.ant/ant-launcher@1.10.12", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://ant.apache.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Core part of ant", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.10.12-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-apache-commons-compress-1.21-dac97b21-03a8-4db1-afc2-1ed98dbe0dc1-3d02a151-67d5-4423-b6e7-79f18bba47a8", "name":"apache-commons-compress", "checksums":[ { "algorithm":"SHA256", "checksumValue":"b915ad5721d5086f543a7c2a5f99f401eae8dd20e47c2daa814760445b652932" } ], "description":"The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/apache-commons-compress@1.21-1.oe2409?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/commons-compress/commons-compress@1.21", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/commons/commons-compress@1.21", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.commons/commons-compress@1.21", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://commons.apache.org/proper/commons-compress/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Java API for working with compressed files and archivers", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.21-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-apache-sshd-2.9.2-c2dba2e3-1fe1-49c5-990b-235ccae7d34b-6d6e8bb0-b6bc-4e5e-9f2a-3e225e69a6e0", "name":"apache-sshd", "checksums":[ { "algorithm":"SHA256", "checksumValue":"04cbe32ca6b12520ca8b573313d31b72ab9d0a563653826f0d5f7bca355deda8" } ], "description":"Apache SSHD is a 100% pure java library to support the SSH protocols on both\nthe client and server side.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/apache-sshd@2.9.2-3.oe2409?arch=noarch&epoch=1&upstream=apache-sshd-2.9.2-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-common@2.9.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-core@2.9.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-osgi@2.9.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-putty@2.9.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-scp@2.9.2", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.sshd/sshd-sftp@2.9.2", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://mina.apache.org/sshd-project", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Apache SSHD", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:2.9.2-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-args4j-2.33-b6412658-8024-441f-9ebd-73a7c3880b1f-971e8f49-cc36-4ee0-845f-17885e46f62e", "name":"args4j", "checksums":[ { "algorithm":"SHA256", "checksumValue":"01ad8f8ae51428dd5cc2eeda8260e2150c60c83f4f86f120197ea7e0a1de1493" } ], "description":"Args4j is a small Java class library that makes it easy to parse command line options/arguments in\nyour CUI application.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/args4j@2.33-6.oe2409?arch=noarch&epoch=0&upstream=args4j-2.33-6.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/args4j/args4j@2.33", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/args4j/args4j-tools@2.33", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://args4j.kohsuke.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Java command line arguments parser", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.33-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-6d19d97a-8338-436d-8af1-5019e43a5427", "name":"bash", "checksums":[ { "algorithm":"SHA256", "checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39" } ], "description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/bash", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"It is the Bourne Again Shell", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.2.21-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-bouncycastle-1.67-b1f6de95-02c9-4336-ac52-962288bc0ef7-dc571fa9-35ee-4335-98c1-87faf3d43f92", "name":"bouncycastle", "checksums":[ { "algorithm":"SHA256", "checksumValue":"c0fdb478f6f5db7295dd5e2783988dfb10524b5f45745e4dd95042fe6cab2a20" } ], "description":"The package is organised so that it contains a light-weight API suitable for\nuse in any environment (including the newly released J2ME) with the additional\ninfrastructure to conform the algorithms to the JCE framework.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/bouncycastle@1.67-2.oe2409?arch=noarch&epoch=0&upstream=bouncycastle-1.67-2.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpg-jdk16@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bctls-jdk15on@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpkix-jdk15@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcmail-jdk15on@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpg-jdk15@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcprov-jdk15@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bctls-jdk15@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bctls-jdk16@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcmail-jdk15@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcmail-jdk16@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcpkix-jdk16@1.67", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.bouncycastle/bcprov-jdk16@1.67", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.bouncycastle.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A Java implementation of cryptographic algorithms", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.67-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-19e897be-f6e9-4c66-b742-e33978490bd0", "name":"coreutils", "checksums":[ { "algorithm":"SHA256", "checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702" } ], "description":"These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.gnu.org/software/coreutils/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A set of basic GNU tools commonly used in shell scripts", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:9.5-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-ed25519-java-0.3.0-d016240b-5ad3-4298-8475-01b12767c4e5-091f949e-1e94-482b-b4b0-9402423c9a0a", "name":"ed25519-java", "checksums":[ { "algorithm":"SHA256", "checksumValue":"9b106d62af1f697d40d30674b42bfc20cf66534a5dba72a378b461a00cf380b9" } ], "description":"This is an implementation of EdDSA in Java. Structurally, it\nis based on the ref10 implementation in SUPERCOP (see\nhttp://ed25519.cr.yp.to/software.html).\nThere are two internal implementations:\n* A port of the radix-2^51 operations in ref10\n - fast and constant-time, but only useful for Ed25519.\n* A generic version using BigIntegers for calculation\n - a bit slower and not constant-time, but compatible\n with any EdDSA parameter specification.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/ed25519-java@0.3.0-4.oe2409?arch=noarch&epoch=0&upstream=ed25519-java-0.3.0-4.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/net.i2p.crypto/eddsa@0.3.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/str4d/ed25519-java", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Implementation of EdDSA (Ed25519) in Java", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.3.0-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-google-gson-2.8.2-61b6519a-85e5-4811-9117-092981b1b974-b6013de2-835c-465b-9ca5-4fb736696f64", "name":"google-gson", "checksums":[ { "algorithm":"SHA256", "checksumValue":"1eac6ddd99854771495711cff86fe9be8a0f86abc923dd2578b8cc3073237f9e" } ], "description":"Gson is a Java library that can be used to convert a Java object into its JSON representation.\nIt can also be used to convert a JSON string into an equivalent Java object. Gson can work with\narbitrary Java objects including pre-existing objects that you do not have source-code of.\nThere are a few open-source projects that can convert Java objects to JSON. However, most of them\nrequire that you place Java annotations in your classes; something that you can not do if you do\nnot have access to the source-code. Most also do not fully support the use of Java Generics.\nGson considers both of these as very important design goals.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/google-gson@2.8.2-4.oe2409?arch=noarch&epoch=0&upstream=google-gson-2.8.2-4.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/com.google.code.gson/gson@2.8.2", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/google/gson", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A Java library that can be used to convert Java Objects into their JSON representation", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:2.8.2-4.oe2409" }, { "SPDXID":"SPDXRef-rpm-httpcomponents-client-4.5.5-fdbfeade-b304-41e9-9b69-f62b1e823994-1fd3798a-b622-4681-bca7-db391355d5b6", "name":"httpcomponents-client", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7ec8bb496eb7bebc834ddef45407ccbaeb77bea8f8a7518c48b89f68feb8afe6" } ], "description":"HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by\nhttpcomponents HttpCore,which provides reusable components for\nHTTP state management, HTTP connection management, and client-side\nauthentication. HttpComponents Client is almost equalto Commons\nHttpClient 3.x. Users of Commons HttpClient strongly support it.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/httpcomponents-client@4.5.5-7.oe2409?arch=noarch&epoch=0&upstream=httpcomponents-client-4.5.5-7.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.httpcomponents/httpclient@4.5.5", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.httpcomponents/httpmime@4.5.5", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://hc.apache.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A library of components for building client side HTTP services", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:4.5.5-7.oe2409" }, { "SPDXID":"SPDXRef-rpm-httpcomponents-core-4.4.16-d72ec12b-4b74-411b-9ee9-406e883be903-6880a2fd-deb3-419b-bbd9-a172ccafe8c2", "name":"httpcomponents-core", "checksums":[ { "algorithm":"SHA256", "checksumValue":"5d8191380aa74adce20a0b57252480f2baccf833d6802193785feeee4cb03aca" } ], "description":"HttpCore is a set of low level HTTP transport components that can be\nused to build custom client and server side HTTP services with a\nminimal footprint. HttpCore supports two I/O models: blocking I/O\nmodel based on the classic Java I/O and non-blocking, event driven I/O\nmodel based on Java NIO.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/httpcomponents-core@4.4.16-1.oe2409?arch=noarch&epoch=0&upstream=httpcomponents-core-4.4.16-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://hc.apache.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Set of low level Java HTTP transport components for HTTP services", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:4.4.16-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-6be0fa43-829d-432b-b0fe-05e37acac8e6", "name":"java-1.8.0-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1" } ], "description":"The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 8", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:1.8.0.422.b05-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1d32fc93-7504-4e80-a4bd-5d962c79966f", "name":"java-11-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0" } ], "description":"The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 11", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:11.0.24.8-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-javaewah-1.1.6-5dc74fc7-6c8e-4b35-a25b-d24ccc9d0f51-040e94fb-a0c4-4c0f-9942-5a4170ffbe87", "name":"javaewah", "checksums":[ { "algorithm":"SHA256", "checksumValue":"357eb259d806ee368a34d9cbfc774075972e967b75d3af7692bbc5b344f9fa68" } ], "description":"The bit array data structure is implemented in Java as BitSet class.\nUnfortunately, this fails to scale without compression.JavaEWAH is a\nword-aligned compressed variant of the Java bitset class.It uses a\n64-bit run-length encoding (RLE) compression scheme. The goal of\nword-aligned compression is not to achieve the best compression,\nbut rather to improve query processing time. Hence, we try to save\nCPU cycles, maybe at the expense of storage.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javaewah@1.1.6-5.oe2409?arch=noarch&epoch=0&upstream=javaewah-1.1.6-5.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/lemire/javaewah", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"JavaEWAH is a word-aligned compressed variant of the Java bitset class", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.1.6-5.oe2409" }, { "SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-9ad7acc2-2756-4fcc-a624-478376456e8f", "name":"javapackages-filesystem", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887" } ], "description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/fedora-java/javapackages", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filesystem layout for java packages", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.3.0-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-jetty-servlet-9.4.16-bef22238-3d35-4428-bb5e-d76043f9b6a2-cfed3a4d-cd15-4569-b319-a18baf244cdc", "name":"jetty-servlet", "checksums":[ { "algorithm":"SHA256", "checksumValue":"6479ca00bb1a23a7a5bf7abdb2a4eeb0c0b5fedb18a01fcd05699b54934c61f1" } ], "description":"\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains servlet module for Jetty.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/jetty-servlet@9.4.16-6.oe2409?arch=noarch&epoch=0&upstream=jetty-9.4.16-6.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.16.v20190411", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.eclipse.org/jetty/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"servlet module for Jetty", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:9.4.16-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-jsch-0.1.55-2c73b272-4c96-40a1-985e-0b42688ea9ec-f1156b58-6cea-4762-8533-9d4b7893e483", "name":"jsch", "checksums":[ { "algorithm":"SHA256", "checksumValue":"0d5a8f450c5a5c80697987c2e577a55383241fa8ce2f3f821bcc4a990ac1c4e3" } ], "description":"JSch is a pure Java implementation of SSH2. JSch allows you to\nconnect to an sshd server and use port forwarding, X11 forwarding,\nfile transfer, etc., and you can integrate its functionality\ninto your own Java programs. JSch is licensed under BSD style license.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/jsch@0.1.55-1.oe2409?arch=noarch&epoch=0&upstream=jsch-0.1.55-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/com.jcraft/jsch@0.1.55", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.jcraft.com/jsch/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A Pure Java implementation of SSH2", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:0.1.55-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-jzlib-1.1.3-7ac72d38-efad-499b-9377-20a8807aea85-d11a81fe-d858-426f-a0bd-50aa958cf134", "name":"jzlib", "checksums":[ { "algorithm":"SHA256", "checksumValue":"d38de7ddcbb5c4820c1bea0359b8596a76a66270ee554df8dcf449d4b5960312" } ], "description":"The zlib is designed to be a free, general-purpose, legally unencumbered -- that is, not covered\nby any patents -- lossless data-compression library for use on virtually any computer hardware and\noperating system. The zlib was written by Jean-loup Gailly (compression) and Mark Adler (decompression).", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/jzlib@1.1.3-11.oe2409?arch=noarch&epoch=0&upstream=jzlib-1.1.3-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/com.jcraft/jzlib@1.1.3", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.jcraft.com/jzlib/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"A re-implementation of zlib in pure Java", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.1.3-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-osgi-core-7.0.0-93dd7263-3ae9-45de-b502-3cd17f80b568-97a770e4-ac43-403b-9ebc-efb62d7c4faa", "name":"osgi-core", "checksums":[ { "algorithm":"SHA256", "checksumValue":"bb2f771f09ab13dfb89ca11b27ca06c5aa336d54ab3e22d02cfecff7555e02a3" } ], "description":"OSGi Core, Interfaces and Classes for use in compiling bundles.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/osgi-core@7.0.0-1.oe2409?arch=noarch&epoch=0&upstream=osgi-core-7.0.0-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.osgi/osgi.core@7.0.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://www.osgi.org", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OSGi Core API", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:7.0.0-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-9bbda6c8-3068-4238-baad-93ae05871668", "name":"slf4j", "checksums":[ { "algorithm":"SHA256", "checksumValue":"ba6f8d3a47ce9334d7fd149e27138e1c3a50add751a127aaaad2923e24da7e2d" } ], "description":"The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/slf4j@1.7.25-8.oe2409?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-api@1.7.25", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-nop@1.7.25", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.slf4j/slf4j-simple@1.7.25", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://www.slf4j.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Simple Logging Facade for Java(SLF4J)", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:1.7.25-8.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-ant-lib-1.10.12-8dd2e293-e680-4e2a-8dd5-9d6a1f87e8e0-0045ad70-47e0-45e4-a2d1-4a9104e08216" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-apache-commons-compress-1.21-dac97b21-03a8-4db1-afc2-1ed98dbe0dc1-3d02a151-67d5-4423-b6e7-79f18bba47a8" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-apache-sshd-2.9.2-c2dba2e3-1fe1-49c5-990b-235ccae7d34b-6d6e8bb0-b6bc-4e5e-9f2a-3e225e69a6e0" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-args4j-2.33-b6412658-8024-441f-9ebd-73a7c3880b1f-971e8f49-cc36-4ee0-845f-17885e46f62e" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-6d19d97a-8338-436d-8af1-5019e43a5427" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-bouncycastle-1.67-b1f6de95-02c9-4336-ac52-962288bc0ef7-dc571fa9-35ee-4335-98c1-87faf3d43f92" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-19e897be-f6e9-4c66-b742-e33978490bd0" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-ed25519-java-0.3.0-d016240b-5ad3-4298-8475-01b12767c4e5-091f949e-1e94-482b-b4b0-9402423c9a0a" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-google-gson-2.8.2-61b6519a-85e5-4811-9117-092981b1b974-b6013de2-835c-465b-9ca5-4fb736696f64" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-httpcomponents-client-4.5.5-fdbfeade-b304-41e9-9b69-f62b1e823994-1fd3798a-b622-4681-bca7-db391355d5b6" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-httpcomponents-core-4.4.16-d72ec12b-4b74-411b-9ee9-406e883be903-6880a2fd-deb3-419b-bbd9-a172ccafe8c2" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-6be0fa43-829d-432b-b0fe-05e37acac8e6" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1d32fc93-7504-4e80-a4bd-5d962c79966f" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javaewah-1.1.6-5dc74fc7-6c8e-4b35-a25b-d24ccc9d0f51-040e94fb-a0c4-4c0f-9942-5a4170ffbe87" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-9ad7acc2-2756-4fcc-a624-478376456e8f" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-jetty-servlet-9.4.16-bef22238-3d35-4428-bb5e-d76043f9b6a2-cfed3a4d-cd15-4569-b319-a18baf244cdc" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-jsch-0.1.55-2c73b272-4c96-40a1-985e-0b42688ea9ec-f1156b58-6cea-4762-8533-9d4b7893e483" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-jzlib-1.1.3-7ac72d38-efad-499b-9377-20a8807aea85-d11a81fe-d858-426f-a0bd-50aa958cf134" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-osgi-core-7.0.0-93dd7263-3ae9-45de-b502-3cd17f80b568-97a770e4-ac43-403b-9ebc-efb62d7c4faa" }, { "spdxElementId":"SPDXRef-rpm-jgit-5.13.0-bdcd3a3e-5b19-47b9-a37f-374d87b3c1cd", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-9bbda6c8-3068-4238-baad-93ae05871668" } ] }