{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"xmvn-0.3.0.0-25.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/xmvn-0.3.0.0-25.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-maven-3.6.3-20a63b12-c8db-4de3-a28e-079199c8667b-4c1969a1-4927-4c9e-a2c1-55d8c0d351d6",
			"name":"maven",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d403954e7e9ea60e67d3afb34232e52b1664892b33f064da845410df86dfe5fb"
				}
			],
			"description":"Maven is a software project management and comprehension tool. Based on the\nconcept of a project object model (POM), Maven can manage a project's build,\nreporting and documentation from a central piece of information.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/maven@3.6.3-2.oe2409?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://maven.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java project management and project comprehension tool",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.6.3-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xmvn-minimal-3.0.0-cd3cd9b5-1e2a-42c9-a4ee-fbac5a7085de-e1025473-1ed9-4d37-977c-9f09656e85f9",
			"name":"xmvn-minimal",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"4e4d2dad1bcb4e84ad14aabfa50a95eb54db010c5dc0420d370997e96b3c514b"
				}
			],
			"description":"This package provides minimal version of XMvn, but can't use remote repositories.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xmvn-minimal@3.0.0-25.oe2409?arch=noarch&epoch=0&upstream=xmvn-3.0.0-25.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://fedora-java.github.io/xmvn/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A simplified version of xmvn",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:3.0.0-25.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-xmvn-3.0.0-6ad5ef65-8a48-4877-af74-6e84a0c154ec",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-maven-3.6.3-20a63b12-c8db-4de3-a28e-079199c8667b-4c1969a1-4927-4c9e-a2c1-55d8c0d351d6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xmvn-3.0.0-6ad5ef65-8a48-4877-af74-6e84a0c154ec",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xmvn-minimal-3.0.0-cd3cd9b5-1e2a-42c9-a4ee-fbac5a7085de-e1025473-1ed9-4d37-977c-9f09656e85f9"
		}
	]
}