{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "findbugs-tools-0.3.0.1-18.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T09:44:25.182336603Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/findbugs-tools-0.3.0.1-18.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-findbugs-3.0.1",
      "name": "findbugs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "393eabf87e9571999190a4ae71f031648d6c304ce7adb06b424253af143f99bc"
        }
      ],
      "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403sp3?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0e64fa4d628b4f26e0903d1d664e87322a0d8848@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "Find Bugs in Java Programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "08c4ef1a7681503a2f6bc087303338aac85e35d35ba0e280083f0d6e20e5cac6"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403sp3?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-findbugs-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    }
  ]
}