{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "log4j-0.2.17.2-2.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T17:56:00.557930832Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/log4j-0.2.17.2-2.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-log4j-2.17.2",
      "name": "log4j",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a8c31367b2e178eaa858f63c04c5e87df121a2e277df585c653d8aebb56c3cb6"
        }
      ],
      "description": "Log4j is a tool to help the programmer output log statements to a\nvariety of output targets.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/log4j@2.17.2-2.oe2403sp3?arch=noarch&epoch=0&upstream=log4j-2.17.2-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-docker@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-osgi@2.17.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.logging.log4j/log4j-to-jul@2.17.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://logging.apache.org/log4j",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/0bb9c12c9a1cdb37ea0e3a14791dedb26d490933f951082456e2949d545297ad-primary.sqlite.bz2",
      "summary": "Java logging package",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.17.2-2.oe2403sp3"
    }
  ],
  "relationships": []
}