{ "SPDXID": "SPDXRef-DOCUMENT", "name": "maven-jarsigner-plugin-0.1.4-1.oe2403sp3.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-05-14T13:11:03.911431983Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/maven-jarsigner-plugin-0.1.4-1.oe2403sp3.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08", "name": "java-1.8.0-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8b7519f0014fc5f3b02042e0b6846f2d0df2941ba37e257b4cdfe23263402cf9" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/0943cb6d8ca7710638af2690e12e6964e5dc9d45@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/183b80df170a3c395f3c6556549593da1f07761e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ce772f488c4b96b8fba9b14afcdf0df3b699dd8d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/aebaf5cc0cdc2d75ab2049c0cd28f426180742ed@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/fe55f53fb59790b8daf655522afd154fd77e05ed@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/31dec12f2bf26c06b8f320834ad84b0b3cacd938@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2723c23b2fb08eb5b12143ba432760fea686beff@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b95e5cd3c2cd43dc15c962c2b33c3884bd0c6140@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/503f9d657bfc840a943da2837f1453b8e19f23a4@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a68e47f2e282e275e62bde195618b1db6cdb97e2@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6879ab65fa776899e127da9508981ee9d0f8fc0e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/c14cf4aa4edf857beb47b2e2236dde175c8965ef@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/73bd20645b25e7d091e6f1281b4457f0dc571a10@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/50e4b8940333b68ac946a839dd40cc071b014fbf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/885340121dfd39a4d716833b6ade3d90592c6ef5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/01584134933d19df5200693003aa1fa06cbbfc5f@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7", "name": "java-11-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8cdbb09aded00e689bdb1b8222c2efd73c980fb836bed9081703cc6a653fbac8" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4491f80f13c253ac5ce6003c76defdab9c0725c4@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.29.7-1.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "checksums": [ { "algorithm": "SHA256", "checksumValue": "72de0d9b024158ef01350b96c203fa3844d13c8d6f6e7f5b377ef5bdf7b2a589" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-maven-artifact-2.2.1", "name": "maven-artifact", "checksums": [ { "algorithm": "SHA256", "checksumValue": "4f7c0c31ebfb7166c3dc6bd07161f271a4d3492e2a1db7e83fb27d707359461a" } ], "description": "Compatibility Maven artifact manager artifact", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-artifact@2.2.1-60.oe2403sp3?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.2.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.7", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.8", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Maven artifact artifact", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.2.1-60.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3", "name": "maven-lib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8cd396c3e1e0892ea6b9e84570c6d385b30952c248d076247855a2c65624bbab" } ], "description": "Core part of Apache Maven that can be used as a library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp3?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Core part of Maven", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:3.6.3-2.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-maven-project-2.2.1", "name": "maven-project", "checksums": [ { "algorithm": "SHA256", "checksumValue": "17dfaf7746962adf32d4ac9d31b761624b041a267839c0bad80b1beda6830526" } ], "description": "Compatibility Maven project artifact", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403sp3?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Maven project artifact", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.2.1-60.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-maven-shared-jarsigner-1.3.2", "name": "maven-shared-jarsigner", "checksums": [ { "algorithm": "SHA256", "checksumValue": "878948532695e7229a552ef0e35c7ac2790d5fda476190178990b3ebbd55e455" } ], "description": "Apache Maven Jarsigner is a component which provides utilities to sign\nand verify Java archive and other files in your Maven MOJOs.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-shared-jarsigner@1.3.2-1.oe2403sp3?arch=noarch&epoch=0&upstream=maven-shared-jarsigner-1.3.2-1.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-jarsigner@1.3.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/shared/maven-jarsigner/", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Component to assist in signing Java archives", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.3.2-1.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-maven-shared-utils-3.3.3", "name": "maven-shared-utils", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6851f4f1bfef0de039d28e73b47ccaaa4ef7197bf56b94f3f3d09799bb8c84ac" } ], "description": "This package can be the functional replacement of plexus-utils in Maven.\nAt the same time, the package has many hightlights, such as: a lot of methods\ngot cleaned up, generics got added and a lot of unused code dropped.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-shared-utils@3.3.3-1.oe2403sp3?arch=noarch&epoch=0&upstream=maven-shared-utils-3.3.3-1.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://maven.apache.org/shared/maven-shared-utils", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "The functional replacement of plexus-utils in maven", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.3-1.oe2403sp3" }, { "SPDXID": "SPDXRef-rpm-plexus-sec-dispatcher-1.4", "name": "plexus-sec-dispatcher", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2a2c5654e952ff1c64db884ab4e802837814894204473d0d377fa6e5ec55b948" } ], "description": "Plexus Security Dispatcher Component.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-sec-dispatcher@1.4-26.oe2403sp3?arch=noarch&epoch=0&upstream=plexus-sec-dispatcher-1.4-26.oe2403sp3.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/EuroLinux/els-tests-plexus-sec-dispatcher", "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2", "summary": "Plexus Security Dispatcher Component", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.4-26.oe2403sp3" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-2.2.1" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-shared-jarsigner-1.3.2" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-shared-utils-3.3.3" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-sec-dispatcher-1.4" } ] }