{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"tomcat-1.9.0.10-33.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/tomcat-1.9.0.10-33.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-collections-3.2.2-a68c7c35-3fd7-48e0-a689-f5e3f981d41c-3bdbb919-6283-4354-a583-e9fed0fc1e3a",
			"name":"apache-commons-collections",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"32536a2e4c30d86e337f0644d2f88a8e20cdc4c662f3e7c230064680515bfcac"
				}
			],
			"description":"The Java Collections Framework was a major addition in JDK 1.2. It added many powerful\ndata structures that accelerate development of most significant Java applications.\nSince that time it has become the recognised standard for collection handling in Java.\nCommons-Collections seek to build upon the JDK classes by providing new interfaces,\nimplementations and utilities. There are many features, including:\n- Bag interface for collections that have a number of copies of each object\n- BidiMap interface for maps that can be looked up from value to key as well and key to value\n- MapIterator interface to provide simple and quick iteration over maps\n- Transforming decorators that alter each object as it is added to the collection\n- Composite collections that make multiple collections look like one\n- Ordered maps and sets that retain the order elements are added in, including an LRU based map\n- Reference map that allows keys and/or values to be garbage collected under close control\n- Many comparator implementations\n- Many iterator implementations\n- Adapter classes from array and enumerations to collections\n- Utilities to test or create typical set-theory properties of collections such as union,\n  intersection, and closure",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-collections@3.2.2-11.oe2409?arch=noarch&epoch=0&upstream=apache-commons-collections-3.2.2-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-collections/commons-collections@3.2.2",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/collections/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A series of new interfaces,implementations and utilities provided for Java Collections",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.2.2-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-daemon-1.4.0-b6ddbe94-9412-439d-8e64-8b782bf9b1f6-96aaa96f-295c-4dcf-9b37-d38856211bc0",
			"name":"apache-commons-daemon",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b8fd0895785ef5350cb01272f1c72be9540b442b1b16620f1973e021f864a069"
				}
			],
			"description":"The scope of this package is to define an API in line with the current Java Platform APIs to support\nan alternative invocation mechanism which could be used instead of the public static void main(String[]) method.\nThis specification covers the behavior and life cycle of what we define as Java daemons, or, in other words, non interactive Java applications.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-daemon@1.4.0-1.oe2409?arch=aarch64&epoch=0&upstream=apache-commons-daemon-1.4.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-daemon/commons-daemon@1.4.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-daemon@1.4.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/3c59c0bfacff7802339b928161ad8138cc4c5468@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/daemon",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Defines API to support an alternative invocation mechanism",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.4.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-dbcp-1.4-f658ea45-e72d-40e1-b24a-2367a2fabe73-893aca4b-1ed8-4f85-bb8a-6a2bf4a2a92f",
			"name":"apache-commons-dbcp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"960c9b6e51497332f3d9c7e96e426beee12cebefc9ee29dac0b1a191e92bca18"
				}
			],
			"description":"Many Apache projects support interaction with a relational database. Creating a new connection for each user can be\ntime consuming (often requiring multiple seconds of clock time), in order to perform a database transaction that might take milliseconds.\nOpening a connection per user can be unfeasible in a publicly-hosted Internet application where the number of simultaneous users can be very large. Accordingly,\ndevelopers often wish to share a \"pool\" of open connections between all of the application's current users.\nThe number of users actually performing a request at any given time is usually a very small percentage of the total number of active users,\nand during request processing is the only time that a database connection is required. The application itself logs into the DBMS, and handles any user account issues internally.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-dbcp@1.4-26.oe2409?arch=noarch&epoch=0&upstream=apache-commons-dbcp-1.4-26.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-dbcp/commons-dbcp@1.4",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-dbcp@1.4",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/dbcp/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Apache Commons DataBase Pooling Package",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.4-26.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-apache-commons-pool-1.6-c1839b11-3b57-45ac-ab33-06860891e2ad-b07bd33b-1ae8-498d-8a3c-6f28d2228e5c",
			"name":"apache-commons-pool",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1d83667dd2eb11842b806906ed1f1bf0aa5a61619ea9fc29dcccf25317671a19"
				}
			],
			"description":"Apache Commons Pool package is used to create and maintain an object pooling package to be\ndistributed under the ASF license. The package supports a variety of pool implementations,\nbut encourages support of an interface that makes these implementations interchangeable.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/apache-commons-pool@1.6-19.oe2409?arch=noarch&epoch=0&upstream=apache-commons-pool-1.6-19.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/commons-pool/commons-pool@1.6",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.commons/commons-pool@1.6",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://commons.apache.org/pool/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Apache Commons Pool",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.6-19.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f8fc89f5-a154-45b5-a700-c7dc40540e23",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-chkconfig-1.30-f028afc9-ac3e-41fe-a65c-b6b7416536b2-5c89f4ec-0866-4c23-a51e-9604c00e0c57",
			"name":"chkconfig",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4f889b28004a3dbc300edff677c4f61bf662fd91d4c70d9d4f73324acaac28e6"
				}
			],
			"description":"Chkconfig is a basic system utility.  It updates and queries runlevel\ninformation for system services.  Chkconfig manipulates the numerous\nsymbolic links in /etc/rc.d, to relieve system administrators of some\nof the drudgery of manually editing the symbolic links.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/chkconfig@1.30-1.oe2409?arch=aarch64&epoch=0&upstream=chkconfig-1.30-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-sysv/chkconfig",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A system tool for maintaining the /etc/rc*.d hierarchy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.30-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-4050acbb-438c-4ba8-a275-9633350a2df4",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-ecj-4.12-adc5c15c-ea33-42bc-8c44-f1a455f00702-734d4f0f-af91-4ca5-8039-0d763a3f1cca",
			"name":"ecj",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ed5c2b6fc9e2e7d46bc39d4a3d90580c64f8f236fe60d2dcd68e1aa338166c96"
				}
			],
			"description":"ECJ is the the Eclipse Compiler for Java.  It is also known as the JDT Core batch compiler.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/ecj@4.12-1.oe2409?arch=noarch&epoch=1&upstream=ecj-4.12-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.jdt.core.compiler/ecj@3.18.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.jdt/core@3.18.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.jdt/ecj@3.18.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.tycho/org.eclipse.jdt.compiler.apt@3.18.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.tycho/org.eclipse.jdt.core@3.18.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse/java10api@10",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse/java9api@10",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.eclipse.org",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"the Eclipse Compiler for Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:4.12-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-8e6dbfd5-068a-40bc-b12e-d945db756112",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-fe657624-0f16-4f68-b3d5-6c811a6c8254",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-fbe21aa4-cb81-4ae6-af74-aa842fea97f8",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-902e00e9-b429-4b53-bed6-1aa7748bc7ff",
			"name":"javapackages-tools",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d4ca83a58ceeb3acaa84e93fd12bcef39e7030e4208aee369486ac5eb226fc48"
				}
			],
			"description":"The javapackages-tools package contains macros and scripts to support Java packaging.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-tools@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.sun/tools@SYSTEM",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/sun.jdk/jconsole@SYSTEM",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Support for Java packaging with macros and scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libtcnative-1-0-1.2.39-d1022dc0-072c-4f71-93bf-871ca74361a6-5ca51916-fb52-4794-876a-6154cb9a9c8c",
			"name":"libtcnative-1-0",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ee49ff0e533557c0ae682f037ca36fc7a2b1b0eea3a9125f05b11de36fe747a9"
				}
			],
			"description":"Tomcat can use the Apache Portable Runtime to provide superior\nscalability, performance, and better integration with native server\ntechnologies. The Apache Portable Runtime is a highly portable library\nthat is at the heart of Apache HTTP Server 2.x. APR has many uses,\nincluding access to advanced IO functionality (such as sendfile, epoll\nand OpenSSL), OS level functionality (random number generation, system\nstatus, etc), and native process handling (shared memory, NT pipes and\nUnix sockets).\nThese features allows making Tomcat a general purpose webserver, will\nenable much better integration with other native web technologies, and\noverall make Java much more viable as a full fledged webserver platform\nrather than simply a backend focused technology.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libtcnative-1-0@1.2.39-1.oe2409?arch=aarch64&epoch=0&upstream=libtcnative-1-0-1.2.39-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://tomcat.apache.org/tomcat-7.0-doc/apr.html",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"JNI wrappers for Apache Portable Runtime for Tomcat",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.39-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-procps-ng-4.0.4-37eb9cdb-6efb-49f5-ae08-fb3ca2515a40-7be7ea4e-00d1-4622-b5cc-f705f2ff5e2d",
			"name":"procps-ng",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d364fd0780bc182e872e56f1dd56cd72af42f1fe01a328853348838c8d4c05f3"
				}
			],
			"description":"The procps package contains a set of system utilities that provide\nsystem information. Procps includes ps, free, skill, pkill, pgrep,\nsnice, tload, top, uptime, vmstat, pidof, pmap, slabtop, w, watch\nand pwdx.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/procps-ng@4.0.4-6.oe2409?arch=aarch64&epoch=0&upstream=procps-ng-4.0.4-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sourceforge.net/projects/procps-ng/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utilities that provide system information.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:4.0.4-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-e1d30ed8-1d9a-4689-a1c6-1029dc8e913c",
			"name":"shadow",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0b4e5e30e7e79208c364dc951155b341b6353207412480e6adf95f89d270d9a9"
				}
			],
			"description":"This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/shadow@4.14.3-4.oe2409?arch=aarch64&epoch=2&upstream=shadow-4.14.3-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkg-shadow.alioth.debian.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Tools for managing accounts and shadow password files",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:4.14.3-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-5edb2567-e341-41fb-8ad9-187233a77368",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tomcat-taglibs-standard-1.2.5-7eb9acd0-6300-4295-9941-318f022c5779-755f61ec-ca89-41b6-9e7c-a5a8f92b2245",
			"name":"tomcat-taglibs-standard",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"ba21b3234072418e58da43d12dcd90e245d438cc4521717058888bcac8e663be"
				}
			],
			"description":"An implementation of the JSP Standard Tag Library (JSTL).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tomcat-taglibs-standard@1.2.5-7.oe2409?arch=noarch&epoch=0&upstream=tomcat-taglibs-standard-1.2.5-7.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/javax.servlet/jstl@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.taglibs/taglibs-build-tools@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.taglibs/taglibs-standard-compat@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.taglibs/taglibs-standard-impl@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.taglibs/taglibs-standard-jstlel@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp.jstl@1.2.5",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.eclipse.jetty.orbit/org.apache.taglibs.standard.glassfish@1.2.5",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://tomcat.apache.org/taglibs/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Apache Standard Taglib,Javadoc for tomcat-taglibs-standard",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.5-7.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-collections-3.2.2-a68c7c35-3fd7-48e0-a689-f5e3f981d41c-3bdbb919-6283-4354-a583-e9fed0fc1e3a"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-daemon-1.4.0-b6ddbe94-9412-439d-8e64-8b782bf9b1f6-96aaa96f-295c-4dcf-9b37-d38856211bc0"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-dbcp-1.4-f658ea45-e72d-40e1-b24a-2367a2fabe73-893aca4b-1ed8-4f85-bb8a-6a2bf4a2a92f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-apache-commons-pool-1.6-c1839b11-3b57-45ac-ab33-06860891e2ad-b07bd33b-1ae8-498d-8a3c-6f28d2228e5c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-f8fc89f5-a154-45b5-a700-c7dc40540e23"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-chkconfig-1.30-f028afc9-ac3e-41fe-a65c-b6b7416536b2-5c89f4ec-0866-4c23-a51e-9604c00e0c57"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-4050acbb-438c-4ba8-a275-9633350a2df4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-ecj-4.12-adc5c15c-ea33-42bc-8c44-f1a455f00702-734d4f0f-af91-4ca5-8039-0d763a3f1cca"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-8e6dbfd5-068a-40bc-b12e-d945db756112"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-fe657624-0f16-4f68-b3d5-6c811a6c8254"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-fbe21aa4-cb81-4ae6-af74-aa842fea97f8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-902e00e9-b429-4b53-bed6-1aa7748bc7ff"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libtcnative-1-0-1.2.39-d1022dc0-072c-4f71-93bf-871ca74361a6-5ca51916-fb52-4794-876a-6154cb9a9c8c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-procps-ng-4.0.4-37eb9cdb-6efb-49f5-ae08-fb3ca2515a40-7be7ea4e-00d1-4622-b5cc-f705f2ff5e2d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-shadow-4.14.3-8eb31808-18ef-4ca8-9362-217720683e5b-e1d30ed8-1d9a-4689-a1c6-1029dc8e913c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-5edb2567-e341-41fb-8ad9-187233a77368"
		},
		{
			"spdxElementId":"SPDXRef-rpm-tomcat-9.0.10-ab34d6c4-a955-4da2-bc30-3343ce3346d7",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tomcat-taglibs-standard-1.2.5-7eb9acd0-6300-4295-9941-318f022c5779-755f61ec-ca89-41b6-9e7c-a5a8f92b2245"
		}
	]
}