{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cbi-plugins-0.1.1.5-1.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T04:42:06.064967212Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/cbi-plugins-0.1.1.5-1.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-compress-1.21",
      "name": "apache-commons-compress",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "aab33a5c0dc74e112e357da86411762c8b13fcef3a778645463195f3a877517a"
        }
      ],
      "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-compress@1.21-1.oe2403sp1?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-compress/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-compress@1.21",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-compress/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Java API for working with compressed files and archivers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-auto-value-1.4.1",
      "name": "auto-value",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5550764b83bde0210c36d7adb86b0274d1a4df44fb433986831674c753ea1c0d"
        }
      ],
      "description": "Immutable value-type code generation for Java 1.6+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/auto-value@1.4.1-1.oe2403sp1?arch=noarch&epoch=0&upstream=auto-1.4.1-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.auto.value/auto-value@1.4.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/auto",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Auto Value",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4.1-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-decentxml-1.4",
      "name": "decentxml",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe71c2bbce65c32d36f64a7a197cb56274b8a4f642091d694adac0cc744785f1"
        }
      ],
      "description": "XML parser optimized for round-tripping and code reuse with main\nfeatures being:\n * Allows 100% round-tripping, even for weird whitespace between\n   attributes in the start tag or in the end tag\n * Suitable for building editors and filters which want/need to\n   preserve the original file layout as much as possible\n * Error messages have line and column information\n * Easy to reuse individual components\n * XML 1.1 compatible",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/decentxml@1.4-2.oe2403sp1?arch=noarch&epoch=0&upstream=decentxml-1.4-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/de.pdark/decentxml@1.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://bitbucket.org/digulla/decentxml/src/default/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "XML parser optimized for round-tripping and code reuse",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-guava20-20.0",
      "name": "guava20",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b28f353f8af08bbe90eafbea43b1b8d8ffd49ad1719de8000afb843657684ee2"
        }
      ],
      "description": "Guava is a set of core libraries that includes new collection types ,immutable collections,\na graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/guava20@20.0-11.oe2403sp1?arch=noarch&epoch=0&upstream=guava20-20.0-11.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/guava",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Google Libraries for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20.0-11.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "name": "httpcomponents-client",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ea267736ec270ddd91c3c49e11957f1b7a494392821440aa31dd36faf2c2d2ca"
        }
      ],
      "description": "HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by\nhttpcomponents HttpCore,which provides reusable components for\nHTTP state management, HTTP connection management, and client-side\nauthentication. HttpComponents Client is almost equalto Commons\nHttpClient 3.x. Users of Commons HttpClient strongly support it.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/httpcomponents-client@4.5.5-7.oe2403sp1?arch=noarch&epoch=0&upstream=httpcomponents-client-4.5.5-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.5",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hc.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "A library of components for building client side HTTP services",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.5.5-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "87109c5baf3d4c355806eae7d948532ef81719a9d4841fa6c72e88fb6258e449"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-1.oe2403sp1?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2454b625480c97e8f7c8f198715ee32ef46914db@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e24a4286365b68dff8fd5e89d498775dd767fb5a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7b7d9ad0e1384e94a377ab66cf57f8aca63f9c07@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/948dc91798beb7a619ed27ad4805d94119e0fd1e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7d97be660c4b5de3235b14fd9ed3cc6132744d14@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8fa375128933e2cc0bada36afe925a85660e10aa@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/90d3841a0d9b3564c70d16fd43d9622150b11bda@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9e62062f990c5c786e3309859d72a32a6f88e9e1@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3e4d81502e567a31e69cfbe01c82753de526d691@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/db1daa292c8ca919244b50ebd6237049eec50bfb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7c7a646026df268833a1ceeaf7625c4177d36477@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/898b0f4556f142f13c6c9ec19ff29fdc9a0985fd@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d72820d4728998cc9ccab1798eab7c0a198428f1@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/72688f7c22f83e56431d4f633f31dc6e85be418a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/84042ca362fc1398551bb8a10c7aa0daad12a8f6@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4d1df716356a63763605c7b348b8e66c139bb133@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/648f4485731af3571c78cd3c4c6f6844020ce9ed@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.432.b06-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "50832a0f26cd3b2041c070379900c11caf056ed36e86313379cb692ec38a95f4"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403sp1?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/76081ae25c7ea6082038290184b2b74a70cd522b@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.25.9-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "12e6d89eb9dc38eb2644daa5ea21cc178d2a918353fb12c67a3a3de888ca2c55"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp1?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e171acd63309a5dbfff63cd0ec41da8c5e3cd682ea085c7dd6a7dd142395f880"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp1?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-tycho-1.3.0",
      "name": "tycho",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "acd2340d534a57c210c04585310ecb73e2742eea7aa0c11ee1ca7562121f1c8f"
        }
      ],
      "description": "Tycho is a set of Maven plugins and extensions for building Eclipse\nplugins and OSGI bundles with Maven. Eclipse plugins and OSGI bundles\nhave their own metadata for expressing dependencies, source folder\nlocations, etc. that are normally found in a Maven POM. Tycho uses\nnative metadata for Eclipse plugins and OSGi bundles and uses the POM\nto configure and drive the build. Tycho supports bundles, fragments,\nfeatures, update site projects and RCP applications. Tycho also knows\nhow to run JUnit test plugins using OSGi runtime and there is also\nsupport for sharing build results using Maven artifact repositories.\nTycho plugins introduce new packaging types and the corresponding\nlifecycle bindings that allow Maven to use OSGi and Eclipse metadata\nduring a Maven build. OSGi rules are used to resolve project\ndependencies and package visibility restrictions are honored by the\nOSGi-aware JDT-based compiler plugin. Tycho will use OSGi metadata and\nOSGi rules to calculate project dependencies dynamically and injects\nthem into the Maven project model at build time. Tycho supports all\nattributes supported by the Eclipse OSGi resolver (Require-Bundle,\nImport-Package, Eclipse-GenericRequire, etc). Tycho will use proper\nclasspath access rules during compilation. Tycho supports all project\ntypes supported by PDE and will use PDE/JDT project metadata where\npossible. One important design goal in Tycho is to make sure there is\nno duplication of metadata between POM and OSGi metadata.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tycho@1.3.0-6.oe2403sp1?arch=noarch&epoch=0&upstream=tycho-1.3.0-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.resolver.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit4@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-compiler-jdt@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-lib-detector@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-surefire-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.core.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit47@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-compiler-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-testing-harness@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.embedder.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.maven.repository@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-artifactcomparator@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-bundles-external@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-director-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-source-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.noopsecurity@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.tools.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-standalone-p2-director@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-versions-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.fedoraproject.p2/org.fedoraproject.p2@0.0.1.SNAPSHOT",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-repository-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.testng@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-api@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-embedder@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-embedder-api@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-maven-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.resolver.impl@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/target-platform-configuration@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-metadata-model@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-facade@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-publisher-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-pomgenerator-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.fedoraproject.p2/xmvn-p2-installer-plugin@0.0.1.SNAPSHOT",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.tools.impl@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit5@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.osgibooter@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-launching@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-core@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-packaging-plugin@1.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://eclipse.org/tycho",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Plugins and extensions for building Eclipse plugins and OSGI bundles with Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.0-6.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-compress-1.21"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-auto-value-1.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-decentxml-1.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-guava20-20.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-httpcomponents-client-4.5.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tycho-1.3.0"
    }
  ]
}
