{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "xml-maven-plugin-0.1.0.2-1.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T04:42:06.064967212Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/xml-maven-plugin-0.1.0.2-1.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "87109c5baf3d4c355806eae7d948532ef81719a9d4841fa6c72e88fb6258e449"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-1.oe2403sp1?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2454b625480c97e8f7c8f198715ee32ef46914db@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e24a4286365b68dff8fd5e89d498775dd767fb5a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7b7d9ad0e1384e94a377ab66cf57f8aca63f9c07@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/948dc91798beb7a619ed27ad4805d94119e0fd1e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7d97be660c4b5de3235b14fd9ed3cc6132744d14@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8fa375128933e2cc0bada36afe925a85660e10aa@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/90d3841a0d9b3564c70d16fd43d9622150b11bda@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9e62062f990c5c786e3309859d72a32a6f88e9e1@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3e4d81502e567a31e69cfbe01c82753de526d691@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/db1daa292c8ca919244b50ebd6237049eec50bfb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7c7a646026df268833a1ceeaf7625c4177d36477@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/898b0f4556f142f13c6c9ec19ff29fdc9a0985fd@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d72820d4728998cc9ccab1798eab7c0a198428f1@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/72688f7c22f83e56431d4f633f31dc6e85be418a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/84042ca362fc1398551bb8a10c7aa0daad12a8f6@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4d1df716356a63763605c7b348b8e66c139bb133@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/648f4485731af3571c78cd3c4c6f6844020ce9ed@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.432.b06-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "50832a0f26cd3b2041c070379900c11caf056ed36e86313379cb692ec38a95f4"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403sp1?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/76081ae25c7ea6082038290184b2b74a70cd522b@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.25.9-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "12e6d89eb9dc38eb2644daa5ea21cc178d2a918353fb12c67a3a3de888ca2c55"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp1?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e171acd63309a5dbfff63cd0ec41da8c5e3cd682ea085c7dd6a7dd142395f880"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp1?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-io-3.2.0",
      "name": "plexus-io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eea47c03bb58cf448f48d24cdf7cdbfe542f75981b34feac6fecc94e4fd29b0a"
        }
      ],
      "description": "Plexus IO is a set of plexus components, which are designed for use in I/O operations.\nThese I/O operations are doing nothing spectacular. For example,\nCommons IO is a much more powerful library in the same area.\nHowever, the implementation as a plexus component allows reuse in Maven.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-io@3.2.0-1.oe2403sp1?arch=noarch&epoch=0&upstream=plexus-io-3.2.0-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-io@3.2.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Use in I/O operations",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.0-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-resources-1.0",
      "name": "plexus-resources",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "28de944699f5addb0dfd1d66fe3bccf88e2c450e74a47ea6d5a68dadbc4476a4"
        }
      ],
      "description": "The Plexus project aspire to create end-to-end  tools for\nwriting applications. the container is the core which can be\nembedded or for a full scale application server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-resources@1.0-0.25.a7.oe2403sp1?arch=noarch&epoch=0&upstream=plexus-resources-1.0-0.25.a7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-resources@1.0.alpha.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/codehaus-plexus/plexus-resources",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Plexus Resource Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0-0.25.a7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "efbafe19ce80df504a3843e70a7cafc023efe03b240743f5f1b3c9d19032e5e4"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp1?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-xml-commons-resolver-1.2",
      "name": "xml-commons-resolver",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9b70a06bd20f7920b164fe9dd36645bb085aaaaae9769de80cc02880b3c85bf2"
        }
      ],
      "description": "XML-commons resolver subprojects.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xml-commons-resolver@1.2-27.oe2403sp1?arch=noarch&epoch=0&upstream=xml-commons-resolver-1.2-27.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xml-resolver/xml-resolver@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xerces.apache.org/xml-commons/components/resolver/",
      "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2",
      "summary": "XML-commons resolver subprojects",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-27.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-io-3.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-resources-1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xml-maven-plugin-1.0.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xml-commons-resolver-1.2"
    }
  ]
}
