{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "plexus-archiver-0.4.2.7-2.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T13:11:03.911431983Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/plexus-archiver-0.4.2.7-2.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-compress-1.21",
      "name": "apache-commons-compress",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3053abe05b1e9b28dc836127aeab20d772fd43fb6341024e31adb47bc35c2775"
        }
      ],
      "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-compress@1.21-1.oe2403sp3?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-compress/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-compress@1.21",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-compress/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Java API for working with compressed files and archivers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-dain-snappy-0.4",
      "name": "dain-snappy",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "163ac065163412a90eb602f9e09a83738ac659ee626653f7bc56f4108756008c"
        }
      ],
      "description": "This is a rewrite (port) of Snappy writen in pure Java. This compression code produces a\nbyte-for-byte exact copy of the output created by the original C++ code, and extremely fast.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/dain-snappy@0.4-7.oe2403sp3?arch=noarch&epoch=0&upstream=dain-snappy-0.4-7.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.iq80.snappy/snappy@0.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/dain/snappy",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Port of Snappy to Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.4-7.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8b7519f0014fc5f3b02042e0b6846f2d0df2941ba37e257b4cdfe23263402cf9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.472.b08-5.oe2403sp3?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.472.b08-5.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0943cb6d8ca7710638af2690e12e6964e5dc9d45@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/183b80df170a3c395f3c6556549593da1f07761e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ce772f488c4b96b8fba9b14afcdf0df3b699dd8d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aebaf5cc0cdc2d75ab2049c0cd28f426180742ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fe55f53fb59790b8daf655522afd154fd77e05ed@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/31dec12f2bf26c06b8f320834ad84b0b3cacd938@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2723c23b2fb08eb5b12143ba432760fea686beff@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b95e5cd3c2cd43dc15c962c2b33c3884bd0c6140@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/503f9d657bfc840a943da2837f1453b8e19f23a4@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a68e47f2e282e275e62bde195618b1db6cdb97e2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6879ab65fa776899e127da9508981ee9d0f8fc0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c14cf4aa4edf857beb47b2e2236dde175c8965ef@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/73bd20645b25e7d091e6f1281b4457f0dc571a10@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/50e4b8940333b68ac946a839dd40cc071b014fbf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/885340121dfd39a4d716833b6ade3d90592c6ef5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/01584134933d19df5200693003aa1fa06cbbfc5f@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.472.b08-5.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cdbb09aded00e689bdb1b8222c2efd73c980fb836bed9081703cc6a653fbac8"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.29.7-1.oe2403sp3?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.29.7-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4491f80f13c253ac5ce6003c76defdab9c0725c4@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.29.7-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "72de0d9b024158ef01350b96c203fa3844d13c8d6f6e7f5b377ef5bdf7b2a589"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp3?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-io-3.2.0",
      "name": "plexus-io",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "163e05463532377aaa891a9cc389cb7f2868c0d1979b92ae8057184a3269d44c"
        }
      ],
      "description": "Plexus IO is a set of plexus components, which are designed for use in I/O operations.\nThese I/O operations are doing nothing spectacular. For example,\nCommons IO is a much more powerful library in the same area.\nHowever, the implementation as a plexus component allows reuse in Maven.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-io@3.2.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=plexus-io-3.2.0-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-io@3.2.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Use in I/O operations",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.0-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "60f8b3602c07fe19b824303aae06dde0285c93393bd687161d5ed9c0ae814396"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp3?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-xz-java-1.9",
      "name": "xz-java",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "332fcf9f9fb4fe5914e3932a9be9389aefc490410778ac42d26a4355ef32a974"
        }
      ],
      "description": "This aims to be a complete implementation of XZ data compression in pure Java. Single-threaded \\\nstreamed compression and decompression and random access decompression have been fully implemented.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xz-java@1.9-1.oe2403sp3?arch=noarch&epoch=0&upstream=xz-java-1.9-1.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.tukaani/xz@1.9",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tukaani.org/xz/java.html",
      "sourceInfo": "acquired package info from repodata DB: repodata/1884cb0675d766cb1ea3a90cf36ea6d3dfc5e5497f6f1351d21c61704c368e98-primary.sqlite.bz2",
      "summary": "A complete implementation of XZ data compression in pure Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9-1.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-compress-1.21"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-dain-snappy-0.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.472.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.29.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-io-3.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xz-java-1.9"
    }
  ]
}
