{ "SPDXID":"SPDXRef-DOCUMENT", "name":"maven-source-plugin-0.3.0.1-6.oe2409.aarch64.rpm", "spdxVersion":"SPDX-2.2", "creationInfo":{ "created":"2024-09-30T03:30:07.5589037Z", "creators":"[openeuler_creator]" }, "dataLicense":"CC0-1.0", "documentNamespace":"https://repo.openeuler.org/security/data/sbom/maven-source-plugin-0.3.0.1-6.oe2409.aarch64.rpm", "packages":[ { "SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-3fca759e-0e7c-464d-b6a1-457f096cd04b", "name":"java-1.8.0-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1" } ], "description":"The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0", "referenceType":"checksum" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 8", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:1.8.0.422.b05-11.oe2409" }, { "SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1b85e99a-7470-4c61-86b6-e9ea6453d95b", "name":"java-11-openjdk-headless", "checksums":[ { "algorithm":"SHA256", "checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0" } ], "description":"The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"EXTERNAL_MANAGER", "referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0", "referenceType":"checksum" } ], "filesAnalyzed":false, "homepage":"http://openjdk.java.net/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"OpenJDK Headless Runtime Environment 11", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:11.0.24.8-3.oe2409" }, { "SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-e3769f01-99d5-42f5-9173-de64b96f23e1", "name":"javapackages-filesystem", "checksums":[ { "algorithm":"SHA256", "checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887" } ], "description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://github.com/fedora-java/javapackages", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Filesystem layout for java packages", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:5.3.0-6.oe2409" }, { "SPDXID":"SPDXRef-rpm-maven-archiver-3.5.2-d95761d0-2ce2-4f0a-b1a1-4395ab795bae-e62d09ef-7622-48c9-8f30-e9e6ec81fea3", "name":"maven-archiver", "checksums":[ { "algorithm":"SHA256", "checksumValue":"459f31068b5cabc1d2e2730f97f0436c8f14015b586e0776f3378e073fcb3e3d" } ], "description":"Provides utility methods for creating JARs and other archive files from a Maven project.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/maven-archiver@3.5.2-1.oe2409?arch=noarch&epoch=0&upstream=maven-archiver-3.5.2-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-archiver@3.5.2", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://maven.apache.org/shared/maven-archiver/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Maven Archiver", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.5.2-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-maven-lib-3.6.3-05e71b8c-4693-46a8-a35e-e9461f2d9266-cc304c86-e749-4620-a64b-a68995ec8310", "name":"maven-lib", "checksums":[ { "algorithm":"SHA256", "checksumValue":"1dcdb3fe9a8706ab0f7be5ddeccd2c6b20794191c8165765f08a879df865140b" } ], "description":"Core part of Apache Maven that can be used as a library.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/maven-lib@3.6.3-2.oe2409?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-model-builder@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-artifact@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-core@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-embedder@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-settings@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-settings-builder@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-aether-provider@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-builder-support@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-compat@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-model@3.6.3", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.apache.maven/maven-plugin-api@3.6.3", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://maven.apache.org/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Core part of Maven", "supplier":"Organization: http://openeuler.org", "versionInfo":"1:3.6.3-2.oe2409" }, { "SPDXID":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8-05eb8611-cc54-4b13-b20b-882af2fa8da4", "name":"plexus-archiver", "checksums":[ { "algorithm":"SHA256", "checksumValue":"fbc1ddfca8484385df5d53e62ee363af85f0dff425c66c3961eb3eabe9e6bff8" } ], "description":"The Plexus project provides a full software stack for creating and executing\nsoftware projects. It provides a number of pre-built components for common\ntasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more.\nHowever, Plexus is also able to reuse your existing components written for\nother IoC frameworks such as Spring, Avalon and Pico Container unmodified,\nas well as allowing you to reuse your existing code inside the Plexus\nContainer.\n\nPlexus comes with an application server that can run your applications, making\nit trivial to build a standalone executable distribution with common features\nsuch as service execution if needed. However, Plexus applications can be run\nin any environment by embedding the container in an existing application,\nincluding Java EE applications or web applications.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/plexus-archiver@4.2.7-1.oe2409?arch=noarch&epoch=0&upstream=plexus-archiver-4.2.7-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"http://codehaus-plexus.github.io/plexus-archiver", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Plexus Archiver Components", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:4.2.7-1.oe2409" }, { "SPDXID":"SPDXRef-rpm-plexus-utils-3.3.0-4665133d-6ccd-44f5-95f2-f771c46ed5ff-45d8cffa-c86f-42b8-8edc-f5255765bb70", "name":"plexus-utils", "checksums":[ { "algorithm":"SHA256", "checksumValue":"f5117959799b54fd7562a7dfeaadbdac9176b085dd6318a9dcc9c23767e7c288" } ], "description":"A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.", "downloadLocation":"NOASSERTION", "externalRefs":[ { "referenceCategory":"PACKAGE_MANAGER", "referenceLocator":"pkg:rpm/plexus-utils@3.3.0-1.oe2409?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2409.src.rpm", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "referenceType":"purl" }, { "referenceCategory":"PROVIDE_MANAGER", "referenceLocator":"pkg:maven/plexus/plexus-utils@3.3.0", "referenceType":"purl" } ], "filesAnalyzed":false, "homepage":"https://codehaus-plexus.github.io/plexus-utils/", "sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2", "summary":"Plexus Common Utilities", "supplier":"Organization: http://openeuler.org", "versionInfo":"0:3.3.0-1.oe2409" } ], "relationships":[ { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-3fca759e-0e7c-464d-b6a1-457f096cd04b" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-1b85e99a-7470-4c61-86b6-e9ea6453d95b" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-e3769f01-99d5-42f5-9173-de64b96f23e1" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-maven-archiver-3.5.2-d95761d0-2ce2-4f0a-b1a1-4395ab795bae-e62d09ef-7622-48c9-8f30-e9e6ec81fea3" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-maven-lib-3.6.3-05e71b8c-4693-46a8-a35e-e9461f2d9266-cc304c86-e749-4620-a64b-a68995ec8310" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8-05eb8611-cc54-4b13-b20b-882af2fa8da4" }, { "spdxElementId":"SPDXRef-rpm-maven-source-plugin-3.0.1-bce74646-1a42-49aa-a4f4-537ce4f13db8", "relationshipType":"DEPENDS_ON", "relatedSpdxElement":"SPDXRef-rpm-plexus-utils-3.3.0-4665133d-6ccd-44f5-95f2-f771c46ed5ff-45d8cffa-c86f-42b8-8edc-f5255765bb70" } ] }