{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "shrinkwrap-descriptors-metadata-parser-0.2.0.0-2.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T03:52:34.12042879Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/shrinkwrap-descriptors-metadata-parser-0.2.0.0-2.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-io-2.15.1",
      "name": "apache-commons-io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "84608e95820e9b80fd62ae36c37f727b464605b8f0c9d54986846abca662e413"
        }
      ],
      "description": "Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with\nutility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-io@2.15.1-1.oe2403sp1?arch=noarch&epoch=1&upstream=apache-commons-io-2.15.1-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-io/commons-io@2.15.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-io@2.15.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-io",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "A library of utilities for developing IO functionality.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:2.15.1-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-lang3-3.14.0",
      "name": "apache-commons-lang3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "101d914a507547b5eb7a03d41ff00609f068de46e6f1747234e69b91415e6e12"
        }
      ],
      "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nLang provides a host of helper utilities for the java.lang API,\nnotably String manipulation methods, basic numerical methods, object\nreflection, concurrency, creation and serialization and System\nproperties. Additionally it contains basic enhancements to\njava.util.Date and a series of utilities dedicated to help with\nbuilding methods, such as hashCode, toString and equals.\nNote that Lang 3.0 (and subsequent versions) use a different\npackage (org.apache.commons.lang3) than the previous\nversions (org.apache.commons.lang), allowing it to be used at the same\ntime as an earlier version.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-lang3@3.14.0-1.oe2403sp1?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.14.0-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-lang3@3.14.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/lang",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Apache Commons Lang version 3.0",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.14.0-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-logging-1.2",
      "name": "apache-commons-logging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "50c387468fa61d000a8b67e85c8469b5f91af3ad3ff3e072e3198a5b29305694"
        }
      ],
      "description": "The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-logging@1.2-17.oe2403sp1?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-adapters@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/logging",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Apache Commons Logging",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-codemodel-2.6",
      "name": "codemodel",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "631d60d8d70191a1c904a3467ec127095c6d8d8b8662924b520759374a844651"
        }
      ],
      "description": "CodeModel is a Java library for code generators; it provides a way to\ngenerate Java programs in a way much nicer than PrintStream.println().\nThis project is a spin-off from the JAXB RI for its schema compiler\nto generate Java source files.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/codemodel@2.6-1.oe2403sp1?arch=noarch&epoch=0&upstream=codemodel-2.6-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun.codemodel/codemodel@2.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun.codemodel/codemodel-annotation-compiler@2.6",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://codemodel.java.net",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Java library for code generators",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.6-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-dtd-parser-1.4",
      "name": "glassfish-dtd-parser",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "639d2ca4fbaa9fbdf151e1607c03f3823f73b7f62ddbc60d4d8413e95d0f2836"
        }
      ],
      "description": "Library for parsing XML DTDs.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-dtd-parser@1.4-1.oe2403sp1?arch=noarch&epoch=0&upstream=glassfish-dtd-parser-1.4-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/javaee/jaxb-dtd-parser",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Library for parsing XML DTDs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7d44ea9baf9b67e122f3deff08d1403ddeeca4393a0f98434b8975c313aa933e"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-1.oe2403sp1?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9285233eef679757243c590431a9c46f693da46e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3009892dc45c635d13c30a6a68c31ce813cde477@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/71b060e0ac913c2eb9fa0f5f140e2e961fa879a7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6e5b4ce090403ea55b4830ad0de6c8cf7e740184@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/26eb6670662becad8111d1d7d53dd3d0ff5510e2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e89d82d8e97f099afd81886c1baa6b0053427bf5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/eed8f1d6301855aad99e6eb02bee85035f7d5914@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cb0cb6ad76a1b4a54ce0627cc3970a0e285de113@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e64caf136cc9f336ad35ad3362bfbb10230b5502@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/018f3f102846be9b51aa7ab605a19ec4d2a8a4be@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9dc74f284fa6bf8b1742ca97877c86988cd3a6ce@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e17ac5ab0bbfa632635a9b4d23895431dec63367@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1e4c015746febf305f53a71222c0b0f63906de09@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6b4a666fbd6447b4b84548e9e1b12a1471b0a4a2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2c6ca587755b883d97dfcdfe32bb025b6e4b2e49@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/39aca2be73723f870adcc7000de99d15af28c7fc@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3349c9f3785ec77da36a557f2b77b2ac27e89907@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.432.b06-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "038b77f1e6dd1883806d9928a266b04501f0c17394a4b2870d442da62e5b752d"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403sp1?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c33a4bf289476520c2afa8ed9b47f606b6f850be@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.25.9-3.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c451f6641e4fbfa08c57fddd961e1e59dcae8119ea6998d9a4cdc1c89cc4e7f5"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp1?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e579c8ec1c984400c6eb381d783321c700b235424a63db2ffbf129f403482d50"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp1?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-qdox-2.0.3",
      "name": "qdox",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7e93a562b9117ab34e93d657085241a79dc5b3d89bc7f96d09321451d5355368"
        }
      ],
      "description": "QDox is used by documentation tools and active code generators.It provides parser for\nfully extracting class/interface/method definitions.It is a high speed, small footprint parser.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/qdox@2.0.3-1.oe2403sp1?arch=noarch&epoch=0&upstream=qdox-2.0.3-1.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.thoughtworks.qdox/qdox@2.0.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/qdox/qdox@2.0.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/paul-hammant/qdox",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "High speed and small footprint parser",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.3-1.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-saxon-9.4.0.9",
      "name": "saxon",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b7393bfc3fff06857226d2b7dd989173600a8072a4f7a39b1b8c320e240cd7c1"
        }
      ],
      "description": "Saxon HE is Saxonica's non-schema-aware implementation of the XPath 2.0,\nXSLT 2.0, and XQuery 1.0 specifications aligned with the W3C Candidate\nRecommendation published on 3 November 2005. It is a complete and\nconformant implementation, providing all the mandatory features of\nthose specifications and nearly all the optional features.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/saxon@9.4.0.9-2.oe2403sp1?arch=noarch&epoch=0&upstream=saxon-9.4.0.9-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sf.saxon/Saxon-HE@9.4.0.9",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sf.saxon/saxon@9.4.0.9",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://saxon.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "Java XPath, XSLT 2.0 and XQuery implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.0.9-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-shrinkwrap-descriptors-2.0.0",
      "name": "shrinkwrap-descriptors",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "87635901fabd1b8589838414ec7f42ba2245ad0290e307c2e6ffa144c9082d0e"
        }
      ],
      "description": "ShrinkWrap sub-project for creating Archive Descriptors\nThis package contains the ShrinkWrap Descriptors API Base.\nAPI Base for Client View of the ShrinkWrap Descriptors Project.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shrinkwrap-descriptors@2.0.0-2.oe2403sp1?arch=noarch&epoch=0&upstream=shrinkwrap-descriptors-2.0.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.shrinkwrap.descriptors/shrinkwrap-descriptors-api-base@2.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://arquillian.org/modules/descriptors-shrinkwrap/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "ShrinkWrap sub-project for creating Archive Descriptors",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.0-2.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-shrinkwrap-descriptors-impl-base-2.0.0",
      "name": "shrinkwrap-descriptors-impl-base",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6123c829a02fd17bedf1c1267c9f8e19b3457e1abe2f4e359dba5fc7a1dbf9f4"
        }
      ],
      "description": "Implementation of the ShrinkWrap Descriptors Project.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shrinkwrap-descriptors-impl-base@2.0.0-2.oe2403sp1?arch=noarch&epoch=0&upstream=shrinkwrap-descriptors-2.0.0-2.oe2403sp1.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.shrinkwrap.descriptors/shrinkwrap-descriptors-impl-base@2.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://arquillian.org/modules/descriptors-shrinkwrap/",
      "sourceInfo": "acquired package info from repodata DB: repodata/d7de307a9e6063fb4be58eea55b491d96524f1609636dd9a9c19f058ffcd9181-primary.sqlite.bz2",
      "summary": "ShrinkWrap Descriptors Implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.0-2.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-io-2.15.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang3-3.14.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-logging-1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-codemodel-2.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-dtd-parser-1.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-qdox-2.0.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-saxon-9.4.0.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shrinkwrap-descriptors-2.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shrinkwrap-descriptors-metadata-parser-2.0.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shrinkwrap-descriptors-impl-base-2.0.0"
    }
  ]
}
