{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "cbi-plugins-0.1.1.5-1.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T13:11:03.911431983Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/cbi-plugins-0.1.1.5-1.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-compress-1.21",
      "name": "apache-commons-compress",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3053abe05b1e9b28dc836127aeab20d772fd43fb6341024e31adb47bc35c2775"
        }
      ],
      "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-compress@1.21-1.oe2403sp3?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-compress/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-compress@1.21",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-compress/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Java API for working with compressed files and archivers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-auto-value-1.4.1",
      "name": "auto-value",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9d6671fd970a0698c5358ac33fd01591ca77c61316d70eaee4ece4bf6eb71e72"
        }
      ],
      "description": "Immutable value-type code generation for Java 1.6+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/auto-value@1.4.1-1.oe2403sp3?arch=noarch&epoch=0&upstream=auto-1.4.1-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.auto.value/auto-value@1.4.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/auto",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Auto Value",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4.1-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-decentxml-1.4",
      "name": "decentxml",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "244b8fbf8b10446d039ca4aa4cba41e814af2c79268620e27324723a5c827308"
        }
      ],
      "description": "XML parser optimized for round-tripping and code reuse with main\nfeatures being:\n * Allows 100% round-tripping, even for weird whitespace between\n   attributes in the start tag or in the end tag\n * Suitable for building editors and filters which want/need to\n   preserve the original file layout as much as possible\n * Error messages have line and column information\n * Easy to reuse individual components\n * XML 1.1 compatible",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/decentxml@1.4-2.oe2403sp3?arch=noarch&epoch=0&upstream=decentxml-1.4-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/de.pdark/decentxml@1.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://bitbucket.org/digulla/decentxml/src/default/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "XML parser optimized for round-tripping and code reuse",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.4-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-guava20-20.0",
      "name": "guava20",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0f6c0c52c54f800d3e178b446d148658aa50d3495da417b19468230fa9dba479"
        }
      ],
      "description": "Guava is a set of core libraries that includes new collection types ,immutable collections,\na graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/guava20@20.0-11.oe2403sp3?arch=noarch&epoch=0&upstream=guava20-20.0-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/guava",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Google Libraries for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20.0-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "name": "httpcomponents-client",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "132c1c4ad59158a1543a594eac7f32b2006a1f9d445f1072144e5ea4e76eb401"
        }
      ],
      "description": "HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by\nhttpcomponents HttpCore,which provides reusable components for\nHTTP state management, HTTP connection management, and client-side\nauthentication. HttpComponents Client is almost equalto Commons\nHttpClient 3.x. Users of Commons HttpClient strongly support it.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/httpcomponents-client@4.5.5-7.oe2403sp3?arch=noarch&epoch=0&upstream=httpcomponents-client-4.5.5-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.5",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hc.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "A library of components for building client side HTTP services",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.5.5-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8b7519f0014fc5f3b02042e0b6846f2d0df2941ba37e257b4cdfe23263402cf9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0943cb6d8ca7710638af2690e12e6964e5dc9d45@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/183b80df170a3c395f3c6556549593da1f07761e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ce772f488c4b96b8fba9b14afcdf0df3b699dd8d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aebaf5cc0cdc2d75ab2049c0cd28f426180742ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fe55f53fb59790b8daf655522afd154fd77e05ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/31dec12f2bf26c06b8f320834ad84b0b3cacd938@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2723c23b2fb08eb5b12143ba432760fea686beff@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b95e5cd3c2cd43dc15c962c2b33c3884bd0c6140@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/503f9d657bfc840a943da2837f1453b8e19f23a4@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a68e47f2e282e275e62bde195618b1db6cdb97e2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6879ab65fa776899e127da9508981ee9d0f8fc0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c14cf4aa4edf857beb47b2e2236dde175c8965ef@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/73bd20645b25e7d091e6f1281b4457f0dc571a10@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/50e4b8940333b68ac946a839dd40cc071b014fbf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/885340121dfd39a4d716833b6ade3d90592c6ef5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/01584134933d19df5200693003aa1fa06cbbfc5f@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cdbb09aded00e689bdb1b8222c2efd73c980fb836bed9081703cc6a653fbac8"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4491f80f13c253ac5ce6003c76defdab9c0725c4@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "72de0d9b024158ef01350b96c203fa3844d13c8d6f6e7f5b377ef5bdf7b2a589"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cd396c3e1e0892ea6b9e84570c6d385b30952c248d076247855a2c65624bbab"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp3?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-tycho-1.3.0",
      "name": "tycho",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07cf0bb0e9cb8269f9d7a8cba0ed219da01470d843268a332c056b794ffb67c0"
        }
      ],
      "description": "Tycho is a set of Maven plugins and extensions for building Eclipse\nplugins and OSGI bundles with Maven. Eclipse plugins and OSGI bundles\nhave their own metadata for expressing dependencies, source folder\nlocations, etc. that are normally found in a Maven POM. Tycho uses\nnative metadata for Eclipse plugins and OSGi bundles and uses the POM\nto configure and drive the build. Tycho supports bundles, fragments,\nfeatures, update site projects and RCP applications. Tycho also knows\nhow to run JUnit test plugins using OSGi runtime and there is also\nsupport for sharing build results using Maven artifact repositories.\nTycho plugins introduce new packaging types and the corresponding\nlifecycle bindings that allow Maven to use OSGi and Eclipse metadata\nduring a Maven build. OSGi rules are used to resolve project\ndependencies and package visibility restrictions are honored by the\nOSGi-aware JDT-based compiler plugin. Tycho will use OSGi metadata and\nOSGi rules to calculate project dependencies dynamically and injects\nthem into the Maven project model at build time. Tycho supports all\nattributes supported by the Eclipse OSGi resolver (Require-Bundle,\nImport-Package, Eclipse-GenericRequire, etc). Tycho will use proper\nclasspath access rules during compilation. Tycho supports all project\ntypes supported by PDE and will use PDE/JDT project metadata where\npossible. One important design goal in Tycho is to make sure there is\nno duplication of metadata between POM and OSGi metadata.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tycho@1.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=tycho-1.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit4@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/target-platform-configuration@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-lib-detector@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-publisher-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-repository-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-testing-harness@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.tools.impl@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.fedoraproject.p2/org.fedoraproject.p2@0.0.1.SNAPSHOT",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-launching@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-artifactcomparator@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-compiler-jdt@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-facade@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.embedder.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.noopsecurity@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.resolver.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.tools.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.osgibooter@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-api@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-maven-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-surefire-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.core.shared@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.testng@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-p2-director-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-pomgenerator-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-source-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-standalone-p2-director@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.maven.repository@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/sisu-equinox-embedder@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-bundles-external@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-compiler-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-embedder-api@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-metadata-model@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-versions-plugin@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.p2.resolver.impl@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-core@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.fedoraproject.p2/xmvn-p2-installer-plugin@0.0.1.SNAPSHOT",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit5@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit47@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/org.eclipse.tycho.surefire.junit@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.tycho/tycho-packaging-plugin@1.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://eclipse.org/tycho",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Plugins and extensions for building Eclipse plugins and OSGI bundles with Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.0-6.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-compress-1.21"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-auto-value-1.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-decentxml-1.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-guava20-20.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-httpcomponents-client-4.5.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-cbi-plugins-1.1.5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tycho-1.3.0"
    }
  ]
}
