{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "httpcomponents-client-0.4.5.5-7.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T09:44:25.182336603Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/httpcomponents-client-0.4.5.5-7.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-codec-1.11",
      "name": "apache-commons-codec",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "42e4ca458806e7ba5a67a074e6a4365c11e5a347f0527e70586793f46312cc71"
        }
      ],
      "description": "Apache Commons Codec (TM) software provides implementations of common\nencoders and decoders such as Base64, Hex, Phonetic and URLs.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-codec@1.11-6.oe2403sp3?arch=noarch&epoch=0&upstream=apache-commons-codec-1.11-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-codec/commons-codec@1.11",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/codec/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "Apache common encoders and decoders",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.11-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-logging-1.2",
      "name": "apache-commons-logging",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f7b8de81b47fac13863e62bdbd17ce61d71c3b33e7d7e4a71b7a7558d7673e52"
        }
      ],
      "description": "The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-logging@1.2-17.oe2403sp3?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/logging",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "Apache Commons Logging",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-17.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-httpcomponents-core-4.4.15",
      "name": "httpcomponents-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "687f0f665b9a53b11a4c76bcabbbc4dd52e9497efa29dfb7484d10e653bb86e2"
        }
      ],
      "description": "HttpCore is a set of low level HTTP transport components that can be\nused to build custom client and server side HTTP services with a\nminimal footprint. HttpCore supports two I/O models: blocking I/O\nmodel based on the classic Java I/O and non-blocking, event driven I/O\nmodel based on Java NIO.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/httpcomponents-core@4.4.15-1.oe2403sp3?arch=noarch&epoch=0&upstream=httpcomponents-core-4.4.15-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.15",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hc.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "Set of low level Java HTTP transport components for HTTP services",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.4.15-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2f4c7dc782b98b90e7b78f885e27735af5a15d6709a33bc96ee662815756162c"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2934ecfa017877ee80042c547affd8c89a111ca3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/08bdf528390e5f82149b3f294c00789e14e8228d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ececbf970f89434741377c94bd708812680c8a5d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c22abf5881787bba04dfd56adc20c652e6297fe8@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b65081779d2aaeb04f4d8048b4d9af3ea7a98b78@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/49a13d3f22ddb3793d5d9ec705d677a4f216ec48@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ec9d8abc0112a262c846d5f2e72f3cc060d03bc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3f451bdf9d01e12759306d041083a0669671a37f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cd1fd942cf9bafaab0f7ab4cf2b4ea9f1dec69dc@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5ddc8c2c0fc880475c1e1881f9f94f1cf80bcfa6@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/16bc7736ec155fabde890b8f9cd2b647221ee6a5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/dddf440d947d74bee61ba7f2a22b62aa258cdf70@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b0b00fc00aaff7b428b0e924f1a866cd4258fa04@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/21d9e0b4a1dd66e5caeaf499702d4c2dfa71fc12@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab5cb21d1ebd07ed35d52353777083a96f7d918c@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c31d1df28deee327cf22abc28b476f7b66fb9cf0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6594c89ae4bf6cffe107ac473b3f4d8d68a34b25@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f06c9ea93d2c78f02ec9e94840a65a68a091ddaa9c3cf3aee2e9855b344993dd"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5569f22dce0cbe69136e1cab37ad85881d834972@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dfb724ff01f01907c6f8be065328907a18f04a17d975f2e12de00a1f62a86c14"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-publicsuffix-list-20241002",
      "name": "publicsuffix-list",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a914e8204200e2ebcd84e060d909a54fc8cb01decbef6de76b3b6534d4db7317"
        }
      ],
      "description": "A \"public suffix\" is one under which Internet users can (or historically could)\ndirectly register names. The Public Suffix List is a list of all known public\nsuffixes.The Public Suffix List is an initiative of Mozilla, but is maintained\nas a community resource. It is available for use in any software, but was\noriginally created to meet the needs of browser manufacturers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/publicsuffix-list@20241002-1.oe2403sp3?arch=noarch&epoch=0&upstream=publicsuffix-list-20241002-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://publicsuffix.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1237fc88d0e4da3b551ae22f7823fbad70d531e5e3e6588f120954709a623b3c-primary.sqlite.bz2",
      "summary": "List of domain name suffixes",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20241002-1.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-codec-1.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-logging-1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-httpcomponents-core-4.4.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-publicsuffix-list-20241002"
    }
  ]
}
