{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"libthrift-java-0.0.14.0-6.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/libthrift-java-0.0.14.0-6.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-lang-2.6-2a2a3da0-0104-4825-928f-c2b90cf171d3-4b9ac1c0-a05d-4875-801c-269b18d1385e",
			"name":"apache-commons-lang",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"09a4a8ba68cb0040059a18d56447ca7fb91784277047a1850fc408a3c42b7462"
				}
			],
			"description":"The standard Java libraries fail to provide enough methods for manipulation of\nits core classes. Apache Commons Lang provides these extra methods.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-lang@2.6-23.oe2409?arch=noarch&epoch=0&upstream=apache-commons-lang-2.6-23.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-lang/commons-lang@2.6",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/lang/lang@2.6",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-lang@2.6",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/lang",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Provides a host of helper utilities for the java.lang API",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.6-23.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-httpcomponents-client-4.5.5-fdbfeade-b304-41e9-9b69-f62b1e823994-c5b3891e-4f03-41ca-b2a0-e7d8017a6b4a",
			"name":"httpcomponents-client",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7ec8bb496eb7bebc834ddef45407ccbaeb77bea8f8a7518c48b89f68feb8afe6"
				}
			],
			"description":"HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by\nhttpcomponents HttpCore,which provides reusable components for\nHTTP state management, HTTP connection management, and client-side\nauthentication. HttpComponents Client is almost equalto Commons\nHttpClient 3.x. Users of Commons HttpClient strongly support it.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/httpcomponents-client@4.5.5-7.oe2409?arch=noarch&epoch=0&upstream=httpcomponents-client-4.5.5-7.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.httpcomponents/httpclient@4.5.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.httpcomponents/httpmime@4.5.5",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://hc.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A library of components for building client side HTTP services",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.5.5-7.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-httpcomponents-core-4.4.16-d72ec12b-4b74-411b-9ee9-406e883be903-6f13be91-5abd-437a-997a-47cdb6f4ab7b",
			"name":"httpcomponents-core",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5d8191380aa74adce20a0b57252480f2baccf833d6802193785feeee4cb03aca"
				}
			],
			"description":"HttpCore is a set of low level HTTP transport components that can be\nused to build custom client and server side HTTP services with a\nminimal footprint. HttpCore supports two I/O models: blocking I/O\nmodel based on the classic Java I/O and non-blocking, event driven I/O\nmodel based on Java NIO.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/httpcomponents-core@4.4.16-1.oe2409?arch=noarch&epoch=0&upstream=httpcomponents-core-4.4.16-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://hc.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Set of low level Java HTTP transport components for HTTP services",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.4.16-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-ca949479-3146-4397-a4b5-f6385215c335",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1e9f1a21-d4cb-4f42-86f4-cc63c68cef70",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-17c4512a-9696-46c8-a821-6a490ec3eac7",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-1b15d13a-6815-49b5-a3c4-e95fb3e299ee",
			"name":"javapackages-tools",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d4ca83a58ceeb3acaa84e93fd12bcef39e7030e4208aee369486ac5eb226fc48"
				}
			],
			"description":"The javapackages-tools package contains macros and scripts to support Java packaging.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-tools@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.sun/tools@SYSTEM",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/sun.jdk/jconsole@SYSTEM",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Support for Java packaging with macros and scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-05702959-285d-4096-8dce-76c23ef5a867",
			"name":"slf4j",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ba6f8d3a47ce9334d7fd149e27138e1c3a50add751a127aaaad2923e24da7e2d"
				}
			],
			"description":"The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/slf4j@1.7.25-8.oe2409?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.slf4j/slf4j-api@1.7.25",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.slf4j/slf4j-nop@1.7.25",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.slf4j/slf4j-simple@1.7.25",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.slf4j.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Simple Logging Facade for Java(SLF4J)",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.7.25-8.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-lang-2.6-2a2a3da0-0104-4825-928f-c2b90cf171d3-4b9ac1c0-a05d-4875-801c-269b18d1385e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-httpcomponents-client-4.5.5-fdbfeade-b304-41e9-9b69-f62b1e823994-c5b3891e-4f03-41ca-b2a0-e7d8017a6b4a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-httpcomponents-core-4.4.16-d72ec12b-4b74-411b-9ee9-406e883be903-6f13be91-5abd-437a-997a-47cdb6f4ab7b"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-ca949479-3146-4397-a4b5-f6385215c335"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1e9f1a21-d4cb-4f42-86f4-cc63c68cef70"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-17c4512a-9696-46c8-a821-6a490ec3eac7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-1b15d13a-6815-49b5-a3c4-e95fb3e299ee"
		},
		{
			"spdxElementId":"SPDXRef-rpm-libthrift-java-0.14.0-6ae90b1c-3876-421f-9056-96eddcf5208c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-slf4j-1.7.25-7a925666-9164-47aa-a4df-855235357e06-05702959-285d-4096-8dce-76c23ef5a867"
		}
	]
}