{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "findbugs-tools-0.3.0.1-18.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T04:42:06.064967212Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/findbugs-tools-0.3.0.1-18.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-findbugs-3.0.1",
      "name": "findbugs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "68e9e5a9e95004aa2707a45295dd0d3dd11dd59316f135b314c1e3eca7e64e44"
        }
      ],
      "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403sp1?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2102f9afd02372fbf770aa366eeda1b3e42e3801@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Find Bugs in Java Programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b213c4060b09e315e20627841177d02473da01eed0e6b95cd39542ed67528419"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403sp1?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-findbugs-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    }
  ]
}