{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "findbugs-tools-0.3.0.1-18.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T14:17:38.370562542Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/findbugs-tools-0.3.0.1-18.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-findbugs-3.0.1",
      "name": "findbugs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "570302eb884be1da531657bd102e9ae29d8867a751dd4e122b8423eea6620aee"
        }
      ],
      "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7028a4f8b99281e2d9284c373b366181a2f45e50@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Find Bugs in Java Programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0deb73f0872702e0e484a5313d447394071a3fdf68b0e62f52a4c107f8bcbd0a"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-findbugs-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    }
  ]
}