{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "findbugs-tools-0.3.0.1-18.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T06:57:53.750891916Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/findbugs-tools-0.3.0.1-18.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-findbugs-3.0.1",
      "name": "findbugs",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2a088ca317b4b7d4fb6c067daee76f143b3ebe96c123698e16528d6deb79d3ee"
        }
      ],
      "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5c944f259d8a2e72b8ea8a7ecfea495d7c0cdfda@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Find Bugs in Java Programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "65e56b307b1e4a83549d30681eaba53751f8f2fb0e4f558bf2cc1de5fbd9d36e"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-findbugs-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    }
  ]
}