{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"plexus-archiver-0.4.2.7-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/plexus-archiver-0.4.2.7-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-compress-1.21-dac97b21-03a8-4db1-afc2-1ed98dbe0dc1-ecd9c655-d529-42a7-bee3-03c47a8c1f30",
			"name":"apache-commons-compress",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b915ad5721d5086f543a7c2a5f99f401eae8dd20e47c2daa814760445b652932"
				}
			],
			"description":"The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-compress@1.21-1.oe2409?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-compress/commons-compress@1.21",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons/commons-compress@1.21",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-compress@1.21",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/proper/commons-compress/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java API for working with compressed files and archivers",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-dain-snappy-0.4-057cf4ae-b7ac-464a-bcba-20706925fe33-299493f7-d75f-44ae-9c43-274164d976e8",
			"name":"dain-snappy",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7472c0060a65615db56ed62eeec688d713d53347f0e315f06bdd10f07473eb02"
				}
			],
			"description":"This is a rewrite (port) of Snappy writen in pure Java. This compression code produces a\nbyte-for-byte exact copy of the output created by the original C++ code, and extremely fast.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/dain-snappy@0.4-7.oe2409?arch=noarch&epoch=0&upstream=dain-snappy-0.4-7.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.iq80.snappy/snappy@0.4",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/dain/snappy",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Port of Snappy to Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:0.4-7.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-bb7872ec-08f6-47c0-9c6c-68c61861888e",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-87d2ed0d-d2d8-4bde-9e03-3d20f939a27f",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-f44fe2eb-2b8e-4465-8f40-b7d1f43a6055",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-plexus-io-3.2.0-b4b84b11-0b63-46fe-ac38-72cdeeea81bd-1b651b58-c9d1-4c0f-87c3-1621a40d595a",
			"name":"plexus-io",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"bb9b2c778ba3bb50cdff8d0a19d547302719ddbf7e839e3011217dbc7caacdb0"
				}
			],
			"description":"Plexus IO is a set of plexus components, which are designed for use in I/O operations.\nThese I/O operations are doing nothing spectacular. For example,\nCommons IO is a much more powerful library in the same area.\nHowever, the implementation as a plexus component allows reuse in Maven.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/plexus-io@3.2.0-1.oe2409?arch=noarch&epoch=0&upstream=plexus-io-3.2.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.codehaus.plexus/plexus-io@3.2.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://codehaus-plexus.github.io/plexus-io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Use in I/O operations",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.2.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-plexus-utils-3.3.0-4665133d-6ccd-44f5-95f2-f771c46ed5ff-2d5dee1d-9b61-444e-af8d-63380b62bf6f",
			"name":"plexus-utils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f5117959799b54fd7562a7dfeaadbdac9176b085dd6318a9dcc9c23767e7c288"
				}
			],
			"description":"A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/plexus-utils@3.3.0-1.oe2409?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/plexus/plexus-utils@3.3.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://codehaus-plexus.github.io/plexus-utils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Plexus Common Utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.3.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xz-java-1.9-6fbe0d40-c56d-46e8-9d19-3959c0b6dfde-d1a3c404-2a0c-4d1c-8bf8-f8362c2f0f2b",
			"name":"xz-java",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a30d9d17b4682c960374d4fc85deef9935b137ca6517ef99be02df79dc203da5"
				}
			],
			"description":"This aims to be a complete implementation of XZ data compression in pure Java. Single-threaded \\\nstreamed compression and decompression and random access decompression have been fully implemented.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xz-java@1.9-1.oe2409?arch=noarch&epoch=0&upstream=xz-java-1.9-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.tukaani/xz@1.9",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tukaani.org/xz/java.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A complete implementation of XZ data compression in pure Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.9-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-compress-1.21-dac97b21-03a8-4db1-afc2-1ed98dbe0dc1-ecd9c655-d529-42a7-bee3-03c47a8c1f30"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-dain-snappy-0.4-057cf4ae-b7ac-464a-bcba-20706925fe33-299493f7-d75f-44ae-9c43-274164d976e8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-bb7872ec-08f6-47c0-9c6c-68c61861888e"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-87d2ed0d-d2d8-4bde-9e03-3d20f939a27f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-f44fe2eb-2b8e-4465-8f40-b7d1f43a6055"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-plexus-io-3.2.0-b4b84b11-0b63-46fe-ac38-72cdeeea81bd-1b651b58-c9d1-4c0f-87c3-1621a40d595a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-plexus-utils-3.3.0-4665133d-6ccd-44f5-95f2-f771c46ed5ff-2d5dee1d-9b61-444e-af8d-63380b62bf6f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-plexus-archiver-4.2.7-25b98677-04ed-475f-9d51-a6afd27776f8",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xz-java-1.9-6fbe0d40-c56d-46e8-9d19-3959c0b6dfde-d1a3c404-2a0c-4d1c-8bf8-f8362c2f0f2b"
		}
	]
}