{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "openjpa-tools-0.2.4.1-5.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-14T14:17:38.370562542Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/openjpa-tools-0.2.4.1-5.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-bval-1.1.1",
      "name": "bval",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4a3ce82a36197e7d97e9ecdbe2700b963c7afb79dd6499f17d7851d6ad5ee57c"
        }
      ],
      "description": "Apache BVal delivers an implementation of the Bean Validation\nSpecification (JSR-303 and JSR-346), which is TCK compliant and\nworks on Java SE 5 or later. The initial codebase for the\nproject was donated to the ASF by a SGA from Agimatec GmbH.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bval@1.1.1-4.oe2403?arch=noarch&epoch=0&upstream=bval-1.1.1-4.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-core@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://bval.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Apache Bean Validation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-bval-jsr-1.1.1",
      "name": "bval-jsr",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0b4e49b396fb1424bce029964d0edcdac4c487c8f8762b432c7f5e9d643cd0f6"
        }
      ],
      "description": "Implementation specific classes for JSR 349 Bean Validation 1.1.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bval-jsr@1.1.1-4.oe2403?arch=noarch&epoch=0&upstream=bval-1.1.1-4.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-jsr@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-jsr303@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://bval.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Apache BVal :: JSR 349",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-4.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-geronimo-jta-1.1.1",
      "name": "geronimo-jta",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "12f3b379d8c65ea1a363e33643ec6f0fd5854b2c286b97f5d248d97e8e638de8"
        }
      ],
      "description": "Java Transaction API (JTA) specifies standard Java interfaces between a\ntransaction manager and the parties involved in a distributed transaction\nsystem: the resource manager, the application server, and the transactional\napplications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/geronimo-jta@1.1.1-26.oe2403?arch=noarch&epoch=0&upstream=geronimo-jta-1.1.1-26.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.transaction/jta@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.transaction@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://geronimo.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "J2EE JTA v1.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-26.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-geronimo-validation-1.1",
      "name": "geronimo-validation",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b43d089da89981f7cfd8fca511364133c2a4db1da155a720230ca202c40c129c"
        }
      ],
      "description": "This is the Geronimo implementation of JSR-303, the Bean\nValidation API specification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/geronimo-validation@1.1-21.oe2403?arch=noarch&epoch=0&upstream=geronimo-validation-1.1-21.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-validation_1.0_spec@1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://geronimo.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Geronimo implementation of JSR 303",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1-21.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-hibernate-jpa-2.0-api-1.0.1",
      "name": "hibernate-jpa-2.0-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d6cd3c085078e9b1654a8f4f688742b319e69b72d297be705b5a894cd9a6897a"
        }
      ],
      "description": "Hibernate definition of the Java Persistence 2.0 (JSR 317) API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hibernate-jpa-2.0-api@1.0.1-2.oe2403?arch=noarch&epoch=0&upstream=hibernate-jpa-2.0-api-1.0.1-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hibernate.javax.persistence/hibernate-jpa-2.0-api@1.0.1.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.hibernate.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Java Persistence 2.0 (JSR 317) API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.1-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9701631b5d5678e4b21aeb9b900b01af4844ef31390e4c0231b90ecdfa962788"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.412.b08-5.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.412.b08-5.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b1b3fdf018a1e56077a4ebfbf1c3b931724c3cb9@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba1df16b7f023fb40ae84e78e625ec8bc6a480cb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36de6cae9af5f0286d2ccd10c1d83a7f38525685@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2b7bb1ad3276cd6fb89c339c7db9297c0fe6d422@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/966760dea7963650198d6f8588946be14b1cb16d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/00ecf0ca3c8b14a97606c772e5b00c462a3f48f9@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fd5f4412e6cb8c15a628cfc5a42cf7b56985ae24@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/39d841f450eaac46e53105a9b0729694761cb823@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3ca034d9352abe8cad825c1365a4358034bba8bb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/feece42d74b15d04ee80f530e67f81686a8e0080@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1ef5c67723d555647a64ac06b19805057e7d7bce@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4e4e0e58824eb29f6afbca7ce25c4cff36b22fef@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fb18b2010327230f809355c298371ee07c21cd06@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/74db17c8664cf036855c653bb88bc49df5156e33@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8963ca6888c838222c30b58e20a2012d2d8d2058@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/475918c55d36c90691aa2b53dc1f501a3bcc6675@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b48360bd50b7d871a312d165279c0b55fa96f47d@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.412.b08-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9bfee2dbbc8b7649c62865d01f7fe129fbdd02ad53cbe5533f5634d80002505f"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.23.9-1.oe2403?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.23.9-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8d03138758eab35c1254a62c952f71e7942e39f5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.23.9-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17be444ced5b79c5b39a135d13574cba99427b5e0bb79b6ee0382f495baf06e3"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0deb73f0872702e0e484a5313d447394071a3fdf68b0e62f52a4c107f8bcbd0a"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-log4j12-1.2.17",
      "name": "log4j12",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "919fcb8f6f092637e0e1fc3914f757ece409ce71a682cced4051a5fe24d6f582"
        }
      ],
      "description": "With log4j it is possible to enable logging at runtime\nwithout modifying the application binary.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/log4j12@1.2.17-26.oe2403?arch=noarch&epoch=0&upstream=log4j12-1.2.17-26.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.13",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.14",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.15",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.16",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.17",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://logging.apache.org/log4j/1.2/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "A logging library for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.17-26.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a1f77e02c1b4747a5140091262e1156805c0109b3ad88e9d07c5d551a284bebe"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-project-2.2.1",
      "name": "maven-project",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5a8d766c5d919fc5dd7d61238acf40fab368a219a63e2530afccc7eb8e146f62"
        }
      ],
      "description": "Compatibility Maven project artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Maven project artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openjpa-2.4.1",
      "name": "openjpa",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "966bd53571066ed0e7566a91d9fe963fc366122cee52bbabc73d3bfb0fde712a"
        }
      ],
      "description": "OpenJPA is Apache's implementation of Sun's Java Persistence 2.0 API\n(JSR-317 JPA 2.0) specification for the transparent persistence of\nJava objects.\nIt is an object-relational mapping (ORM) solution for the Java language,\nwhich simplifies storing objects in databases.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openjpa@2.4.1-5.oe2403?arch=noarch&epoch=0&upstream=openjpa-2.4.1-5.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-jdbc@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-kernel@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence-locking@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-jest@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-lib@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence-jdbc@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-slice@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-xmlstore@2.4.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjpa.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Java Persistence 2.0 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.1-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "95a00d87020a99643454631c2c3adb03c2cb16bb6cd59d8105b5b196b4551d7c"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bval-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bval-jsr-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-geronimo-jta-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-geronimo-validation-1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hibernate-jpa-2.0-api-1.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-log4j12-1.2.17"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openjpa-2.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    }
  ]
}
