{ "SPDXID": "SPDXRef-DOCUMENT", "name": "findbugs-0.3.0.1-18.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T04:28:12.092529219Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/findbugs-0.3.0.1-18.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-findbugs-3.0.1", "name": "findbugs", "licenseConcluded": "LGPLv2+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "767cf8e6a967b5f59f93a320a680c179c8a109f0e418fa9841dde6622a4109c4" } ], "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403sp4?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/0d6f36abd19181f449c51a0931cd1995531ea0d1@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://findbugs.sourceforge.net/", "licenseDeclared": "LGPLv2+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Find Bugs in Java Programs", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.0.1-18.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-lang-2.6", "name": "apache-commons-lang", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "949a3166db698ed18f4acf1b9948e054c125393f55cb591be1627003f550618b" } ], "description": "The standard Java libraries fail to provide enough methods for manipulation of\nits core classes. Apache Commons Lang provides these extra methods.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-lang@2.6-24.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-lang-2.6-24.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/lang/lang@2.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-lang@2.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-lang/commons-lang@2.6", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/lang", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Provides a host of helper utilities for the java.lang API", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.6-24.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-bash-5.2.15", "name": "bash", "licenseConcluded": "GPLv3", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9e44c67402e88f8c3409ae71f375e1239d0fe67abb011f90acd3cff8eed95a11" } ], "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=aarch64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/bash", "licenseDeclared": "GPLv3", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "It is the Bourne Again Shell", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.2.15-19.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-coreutils-9.4", "name": "coreutils", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9a45326d88eefd6f8a0018a1626f7decc11e3649f47296d7ce55e5ce473c3296" } ], "description": "These are the GNU core utilities. This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=aarch64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.gnu.org/software/coreutils/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A set of basic GNU tools commonly used in shell scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:9.4-22.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-dom4j-2.0.0", "name": "dom4j", "licenseConcluded": "Plexus", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fc1d85a883ce4c87e764394a57e5dc1d89c1a01b962966cf9062ef1c42500da4" } ], "description": "dom4j is an easy to use, open source library for working with XML, XPath and XSLT on the Java platform\nusing the Java Collections Framework and with full support for DOM, SAX and JAXP.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/dom4j@2.0.0-9.oe2403sp4?arch=noarch&epoch=0&upstream=dom4j-2.0.0-9.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/dom4j/dom4j@2.0.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.dom4j/dom4j@2.0.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://dom4j.github.io/", "licenseDeclared": "Plexus", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Flexible XML framework for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.0.0-9.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-findbugs-bcel-6.0", "name": "findbugs-bcel", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "580802643df1b3c8381822f5d7b7b4401a8b9bed2fcdd99577eb61b6a4bf0653" } ], "description": "This is a Byte Code Engineering Library (BCEL) provided for\nFindBugs 3.0.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/findbugs-bcel@6.0-0.13.20140707svn1547656.oe2403sp4?arch=noarch&epoch=0&upstream=findbugs-bcel-6.0-0.13.20140707svn1547656.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/bcel@6.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/bcel-findbugs@6.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/proper/commons-bcel/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A Library for FindBugs provides Byte Code", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:6.0-0.13.20140707svn1547656.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-jFormatString-0", "name": "jFormatString", "licenseConcluded": "GPLv2 with exceptions", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ae4ad96dc797942035350444b0e16de8386a22362b06699849c2f35a1c25c6af" } ], "description": "A checker for Java format string when compile-time.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jFormatString@0-0.31.20131227gitf159b88.oe2403sp4?arch=noarch&epoch=0&upstream=jFormatString-0-0.31.20131227gitf159b88.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/jFormatString@2.0.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://code.google.com/p/j-format-string/", "licenseDeclared": "GPLv2 with exceptions", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A checker for Java format string when compile-time", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0-0.31.20131227gitf159b88.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.492.b09", "name": "java-1.8.0-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8d9686d7abba275e25db180a4c6ec16d06d7f49c8a87d0137b294c40e83d71be" } ], "description": "The OpenJDK runtime environment 8.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-11.0.31.11", "name": "java-11-openjdk", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6616e54d428e45ed33485f19d57e89a816f152456d36269fd945a52410ef191a" } ], "description": "The OpenJDK runtime environment.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0", "name": "javapackages-tools", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ae96f7b5e190e5a7e31f9a59c831f2d554898150f56d78c0ba2ff7b27a8de955" } ], "description": "The javapackages-tools package contains macros and scripts to support Java packaging.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Support for Java packaging with macros and scripts", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-jaxen-1.2.0", "name": "jaxen", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5541eb9b4156ba23069807de59e2942245e5bd3737f5d4be91aacef9037969b3" } ], "description": "Jaxen is an open source XPath library written in Java. It is adaptable\nto many different object models and also possible to write adapters that treat non-XML trees", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jaxen@1.2.0-3.oe2403sp4?arch=noarch&epoch=0&upstream=jaxen-1.2.0-3.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/jaxen/jaxen@1.2.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/jaxen-xpath/jaxen", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "An XPath engine written in Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2.0-3.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-jcip-annotations-1", "name": "jcip-annotations", "licenseConcluded": "CC-BY-2.5", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d787408fad610dfa769e7ed621275099969a89e89b16d36ed4f3431a43b3f555" } ], "description": "This package provides class, field, and method level annotations for describing\nthread-safety policies. These annotations are relatively unintrusive and beneficial\nto both users and maintainers. Users can see immediately whether a class is\nthread-safe, and maintainers can see immediately whether thread-safety guarantees\nmust be preserved.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jcip-annotations@1-26.20060626.oe2403sp4?arch=noarch&epoch=0&upstream=jcip-annotations-1-26.20060626.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.jcip/jcip-annotations@1.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.jcip.net/", "licenseDeclared": "CC-BY-2.5", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Java Concurrency in Practice", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1-26.20060626.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-jsr-305-3.0.2", "name": "jsr-305", "licenseConcluded": "BSD-3-Clause AND CC-BY-2.5", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e060313dab11bbe7dcf5555bc28f9a89e3beafee81e270fb4681a9373635ecea" } ], "description": "This package contains reference implementations, test cases, and other\ndocuments for Java Specification Request 305: Annotations for Software Defect\nDetection.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jsr-305@3.0.2-2.oe2403sp4?arch=noarch&epoch=0&upstream=jsr-305-3.0.2-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.jsr-305/ri@3.0.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://code.google.com/p/jsr-305", "licenseDeclared": "BSD-3-Clause AND CC-BY-2.5", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Correctness annotations for Java code", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.0.2-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-junit-4.13.2", "name": "junit", "licenseConcluded": "EPL-1.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "4e1411b67da88fa697f6b41ad6f8c4db3f482981759570e84218eab7ff699b13" } ], "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403sp4?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/junit/junit@4.13.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://www.junit.org/", "licenseDeclared": "EPL-1.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A Java package for unit testing frameworks", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:4.13.2-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1", "name": "objectweb-asm", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "293eccfb5a2fc8848e814b03b0c202f7247e2fc67cdb64aaf20f841008dea6fe" } ], "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework. It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form. Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://asm.ow2.org/", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Java bytecode manipulation and analysis framework", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:8.0.1-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-perl-5.38.0", "name": "perl", "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f6a219e87ba15fd71cefd81a8c9221532a409d314a7003a4dc39ae45c04a519c" } ], "description": "Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/perl@5.38.0-12.oe2403sp4?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.perl.org/", "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and (GPL-2.0-or-later or Artistic-1.0-perl) and MIT and UCD and Public Domain and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A highly capable, feature-rich programming language", "supplier": "Organization: http://openeuler.org", "versionInfo": "4:5.38.0-12.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-perl-libs-5.38.0", "name": "perl-libs", "licenseConcluded": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "383c1f0aa78ea84879fb79106d660f755942fc6e8b3825c329da257e9b0a84fb" } ], "description": "This package is the shared library for perl.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/perl-libs@5.38.0-12.oe2403sp4?arch=aarch64&epoch=4&upstream=perl-5.38.0-12.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://www.perl.org/", "licenseDeclared": "(GPL-1.0-or-later or Artistic-1.0-perl) and MIT and UCD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "The libraries for the perl", "supplier": "Organization: http://openeuler.org", "versionInfo": "4:5.38.0-12.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang-2.6" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-dom4j-2.0.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-findbugs-bcel-6.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jFormatString-0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jaxen-1.2.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jcip-annotations-1" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jsr-305-3.0.2" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-perl-5.38.0" }, { "spdxElementId": "SPDXRef-rpm-findbugs-3.0.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-perl-libs-5.38.0" } ] }