{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"xom-0.1.3.7-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/xom-0.1.3.7-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-4b254e20-1469-44ca-9c79-9ef844c644f9",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-7ad0b99d-06e2-4bc9-a431-c38009a3149c",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-5312c1a0-4ab7-4bfd-8f48-d3f703cbea36",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jaxen-1.2.0-b50909a5-bda0-4efd-9cc9-152db9bcfbc1-183b738e-4daa-46a0-9ec0-ceb2cd868b0d",
			"name":"jaxen",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"9667f0027ae976328babf266f8c349449c84a5f27462b13384117004c08388b7"
				}
			],
			"description":"Jaxen is an open source XPath library written in Java. It is adaptable\nto many different object models and also possible to write adapters that treat non-XML trees",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jaxen@1.2.0-3.oe2409?arch=noarch&epoch=0&upstream=jaxen-1.2.0-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/jaxen/jaxen@1.2.0",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/jaxen-xpath/jaxen",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An XPath engine written in Java",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.2.0-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72-c7668b45-f49f-4163-a5d0-14a5d4cedbc7",
			"name":"xalan-j2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"3dc6c16fa416884bed9fb5d1af5ecb2f8a82f8ee413eca80465d2aaf33e7426a"
				}
			],
			"description":"Xalan is an XSLT processor for transforming XML documents into HTML,\ntext, or other XML document types. It implements the W3C Recommendations\nfor XSL Transformations (XSLT) and the XML Path Language (XPath). It can\nbe used from the command line, in an applet or a servlet, or as a module\nin other program.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xalan-j2@2.7.2-1.oe2409?arch=noarch&epoch=0&upstream=xalan-j2-2.7.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xalan/serializer@2.7.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xalan/xalan@2.7.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/3248df32068b545a6c6ff275c28d324165b6e1a9@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xalan.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java XSLT processor",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.7.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xerces-j2-2.12.2-d34c2b92-46ae-4c30-8b0c-508a475b5f49-7007083e-6df0-4721-a0a9-3bc0a114acc4",
			"name":"xerces-j2",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d5d0e7c7235776d916b9b8abb985aba955ecd18315251c1a712f24466fd67214"
				}
			],
			"description":"Welcome to the future! Xerces2 is the next generation of high\nperformance, fully compliant XML parsers in the Apache Xerces family.\nThis new version of Xerces introduces the Xerces Native Interface (XNI),\na complete framework for building parser components and configurations\nthat is extremely modular and easy to program.\n\nThe Apache Xerces2 parser is the reference implementation of XNI but\nother parser components, configurations, and parsers can be written\nusing the Xerces Native Interface. For complete design and\nimplementation documents, refer to the XNI Manual.\n\nXerces 2 is a fully conforming XML Schema processor. For more\ninformation, refer to the XML Schema page.\n\nXerces 2 also provides a partial implementation of Document Object Model\nLevel 3 Core, Load and Save and Abstract Schemas [deprecated] Working\nDrafts. For more information, refer to the DOM Level 3 Implementation\npage.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xerces-j2@2.12.2-1.oe2409?arch=noarch&epoch=0&upstream=xerces-j2-2.12.2-1.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/apache/xerces-j2@2.11.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xerces/xerces@2.11.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xerces/xercesImpl@2.11.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xerces/xmlParserAPIs@2.11.0",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/69e63f6408cd61452b97748739555188e16d0d39@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xerces.apache.org/xerces2-j/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java XML parser",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.12.2-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-xml-commons-apis-1.4.01-7103bf6a-d745-4981-93b8-42d02ed2679f-7bc55f62-0092-4932-95e1-d78a4e6e2e66",
			"name":"xml-commons-apis",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a7b69a492e6a8f57943cf16deb20bf467bb0be854b83bdf00b4ca20d5d1701ad"
				}
			],
			"description":"xml-commons-apis is designed to organize and have common packaging for the various externally-defined \\\nstandards code relating to XML - things like the DOM, SAX, and JAXP interfaces.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/xml-commons-apis@1.4.01-29.oe2409?arch=noarch&epoch=0&upstream=xml-commons-apis-1.4.01-29.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xerces/dom3-xml-apis@1.3.04",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xml-apis/xml-apis@2.0.2",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/xml-apis/xml-apis-ext@1.3.04",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://xml.apache.org/commons/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"APIs for XML related code",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.4.01-29.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-4b254e20-1469-44ca-9c79-9ef844c644f9"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-7ad0b99d-06e2-4bc9-a431-c38009a3149c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-5312c1a0-4ab7-4bfd-8f48-d3f703cbea36"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jaxen-1.2.0-b50909a5-bda0-4efd-9cc9-152db9bcfbc1-183b738e-4daa-46a0-9ec0-ceb2cd868b0d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xalan-j2-2.7.2-7f6ab75f-78a2-4c23-bfc5-746f6d095a72-c7668b45-f49f-4163-a5d0-14a5d4cedbc7"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xerces-j2-2.12.2-d34c2b92-46ae-4c30-8b0c-508a475b5f49-7007083e-6df0-4721-a0a9-3bc0a114acc4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-xom-1.3.7-64e1bb8e-5456-4c61-acf3-6da43bbc9e5b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-xml-commons-apis-1.4.01-7103bf6a-d745-4981-93b8-42d02ed2679f-7bc55f62-0092-4932-95e1-d78a4e6e2e66"
		}
	]
}