{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "maven-plugin-bundle-0.3.5.0-6.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T13:11:03.911431983Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/maven-plugin-bundle-0.3.5.0-6.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "name": "aqute-bnd",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d3dcb5e5f4bcc7bf9d060fe1262e5e11d5dd8eafa7b58c8a11fb6cf395230f8c"
        }
      ],
      "description": "Bnd is the engine behind a number of popular software development tools that support OSGi.\nIt can be found in several maven plugins, ant, gradle, and of course Eclipse (bndtools).\nIt actively seeks other build tool vendors to use bnd to improve the quality of the generated\nOSGi metadata.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/aqute-bnd@3.5.0-11.oe2403sp3?arch=noarch&epoch=0&upstream=aqute-bnd-3.5.0-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-shared-maven-lib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/aQute.libg@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-baseline-maven-plugin@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-maven-plugin@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bndlib@3.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/bndtools/bnd/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "BND Tool",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.0-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-felix-bundlerepository-2.0.10",
      "name": "felix-bundlerepository",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8be3779a2f8fafbfc1b3a866c1668677ffc5f260e738e2a79e1803c1880704de"
        }
      ],
      "description": "The goal of the Apache Felix OSGi Bundle Repository (OBR) is two-fold:\n1.To simplify deploying and using available bundles with Felix.\n2.To encourage independent bundle development so that communities of interest can grow.\n\nOBR achieves the first goal by providing a service that can automatically install a bundle, with its\ndeployment dependencies, from a bundle repository. This makes it easier for people to experiment with\nexisting bundles. The second goal is achieved by raising the visibility of the available bundles and\nproviding access to both the executable bundle and its source code. Hopefully, by making OBR and the\nbundles themselves more visible, community members will be encouraged to provide or improve service\nimplementations.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/felix-bundlerepository@2.0.10-6.oe2403sp3?arch=noarch&epoch=0&upstream=felix-bundlerepository-2.0.10-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.felix/org.apache.felix.bundlerepository@2.0.10",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://felix.apache.org/documentation/subprojects/apache-felix-osgi-bundle-repository.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Apache Felix OSGi Bundle Repository service",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.10-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-felix-utils-1.10.4",
      "name": "felix-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ad55c2377cd8436fd46f6430c0a9969a1c4e83970f9523d7df4a94509020c323"
        }
      ],
      "description": "Utility library for OSGi",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/felix-utils@1.10.4-5.oe2403sp3?arch=noarch&epoch=0&upstream=felix-utils-1.10.4-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.felix/org.apache.felix.utils@1.10.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://felix.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Utility library for OSGi",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.10.4-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8b7519f0014fc5f3b02042e0b6846f2d0df2941ba37e257b4cdfe23263402cf9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0943cb6d8ca7710638af2690e12e6964e5dc9d45@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/183b80df170a3c395f3c6556549593da1f07761e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ce772f488c4b96b8fba9b14afcdf0df3b699dd8d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aebaf5cc0cdc2d75ab2049c0cd28f426180742ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fe55f53fb59790b8daf655522afd154fd77e05ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/31dec12f2bf26c06b8f320834ad84b0b3cacd938@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2723c23b2fb08eb5b12143ba432760fea686beff@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b95e5cd3c2cd43dc15c962c2b33c3884bd0c6140@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/503f9d657bfc840a943da2837f1453b8e19f23a4@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a68e47f2e282e275e62bde195618b1db6cdb97e2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6879ab65fa776899e127da9508981ee9d0f8fc0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c14cf4aa4edf857beb47b2e2236dde175c8965ef@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/73bd20645b25e7d091e6f1281b4457f0dc571a10@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/50e4b8940333b68ac946a839dd40cc071b014fbf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/885340121dfd39a4d716833b6ade3d90592c6ef5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/01584134933d19df5200693003aa1fa06cbbfc5f@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cdbb09aded00e689bdb1b8222c2efd73c980fb836bed9081703cc6a653fbac8"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4491f80f13c253ac5ce6003c76defdab9c0725c4@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "72de0d9b024158ef01350b96c203fa3844d13c8d6f6e7f5b377ef5bdf7b2a589"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-kxml-2.3.0",
      "name": "kxml",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ec6f7247e63a158724a017e943f03f80f014afdde43d60b9264c8aa17b9c0746"
        }
      ],
      "description": "kXML is a small XML pull parser, specially designed for constrained environments such as Applets, Personal\nJava or MIDP devices. In contrast to kXML 1, kXML 2 is based on theXML pull API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/kxml@2.3.0-20.oe2403sp3?arch=noarch&epoch=0&upstream=kxml-2.3.0-20.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sf.kxml/kxml2@2.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sf.kxml/kxml2-min@2.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://kxml.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Small XmlPull compatible parser",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.0-20.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-archiver-3.5.2",
      "name": "maven-archiver",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "20f7023c7b43e14b5b887e4b675a36abc1d0e55caea75e33db28b27fd696700c"
        }
      ],
      "description": "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-archiver@3.5.2-1.oe2403sp3?arch=noarch&epoch=0&upstream=maven-archiver-3.5.2-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-archiver@3.5.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://maven.apache.org/shared/maven-archiver/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Maven Archiver",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.2-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-dependency-tree-3.0",
      "name": "maven-dependency-tree",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c69a16521849f110fda7749e32559f1b85f3f9592a0e7d8d381aa7d1fc06447c"
        }
      ],
      "description": "Apache Maven dependency tree artifact. Originally part of maven-shared.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-dependency-tree@3.0-8.oe2403sp3?arch=noarch&epoch=0&upstream=maven-dependency-tree-3.0-8.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Maven dependency tree artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0-8.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-doxia-sink-api-1.7",
      "name": "maven-doxia-sink-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f9dd02eb4c12f8fca127deb5f05df9bb30faa0c5c6e421db6f485d7fbe13b553"
        }
      ],
      "description": "This package provides Sink-api module for maven-doxia.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-doxia-sink-api@1.7-13.oe2403sp3?arch=noarch&epoch=0&upstream=maven-doxia-1.7-13.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/doxia/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Sink-api module for maven-doxia",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7-13.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-doxia-sitetools-1.7.5",
      "name": "maven-doxia-sitetools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c2b026991fde4fa354c3ccb538e7ee336bca965a129510209f79c0c8096b6225"
        }
      ],
      "description": "Doxia is a content generation framework which aims to provide its users with powerful\ntechniques for generating static and dynamic content: Doxia can be used in web-based\npublishing context to generate static sites, in addition to being incorporated into\ndynamic content generation systems like blogs, wikis and content management systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-doxia-sitetools@1.7.5-5.oe2403sp3?arch=noarch&epoch=0&upstream=maven-doxia-sitetools-1.7.5-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-doxia-tools@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-doc-renderer@1.7.5",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://maven.apache.org/doxia/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Doxia content generation framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.5-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cd396c3e1e0892ea6b9e84570c6d385b30952c248d076247855a2c65624bbab"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp3?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-reporting-impl-3.0.0",
      "name": "maven-reporting-impl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "36357581f0977d0df14f8541d9117bbd4b141e8bcf05c26810405db088111321"
        }
      ],
      "description": "Abstract classes to manage report generation, which can be run both:\n\n* as part of a site generation, as a maven-reporting-api's MavenReport,\n* or as a direct standalone goal invocation, as a maven-plugin-api's Mojo.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-reporting-impl@3.0.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=maven-reporting-impl-3.0.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/shared/maven-reporting-impl/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Abstract classes to manage report generation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-osgi-core-7.0.0",
      "name": "osgi-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "dd4cc6f3561c312b8207ea530b96eccc2507eb00f8d2a1e444eaf226057ecd0f"
        }
      ],
      "description": "OSGi Core, Interfaces and Classes for use in compiling bundles.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/osgi-core@7.0.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=osgi-core-7.0.0-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.osgi/osgi.core@7.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.osgi.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OSGi Core API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:7.0.0-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-build-api-0.0.7",
      "name": "plexus-build-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1303e7b996420e312d7db65b89205b494f41e7ec7637787c9053e08919aa5c64"
        }
      ],
      "description": "Plexus Build API",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-build-api@0.0.7-24.oe2403sp3?arch=noarch&epoch=0&upstream=plexus-build-api-0.0.7-24.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/sonatype/sisu-build-api",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Plexus Build API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.0.7-24.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "60f8b3602c07fe19b824303aae06dde0285c93393bd687161d5ed9c0ae814396"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xpp3-1.1.4",
      "name": "xpp3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "eefe15d50b3a21742bdb5a50ba7f3ef99712d9363605aab60e3cc646bbdfbd8b"
        }
      ],
      "description": "MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2\nbut completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot\nin JDK 1.4+.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xpp3@1.1.4-22.oe2403sp3?arch=noarch&epoch=0&upstream=xpp3-1.1.4-22.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xpp3/xpp3@1.1.4c",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xpp3/xpp3_min@1.1.4c",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xpp3/xpp3_xpath@1.1.4c",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/index.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Xml Pull Parser 3rd Edition",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.4-22.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-aqute-bnd-3.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-felix-bundlerepository-2.0.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-felix-utils-1.10.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-kxml-2.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-archiver-3.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-dependency-tree-3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-doxia-sink-api-1.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-doxia-sitetools-1.7.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-reporting-impl-3.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-osgi-core-7.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-build-api-0.0.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-plugin-bundle-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xpp3-1.1.4"
    }
  ]
}
