{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "findbugs-tools-0.3.0.1-18.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/findbugs-tools-0.3.0.1-18.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "name": "findbugs-tools",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d5ccdad79afb391852c7c33d4f9284d35caff7c406b14863b2e3856c422ca547"
        }
      ],
      "description": "Provide additional tools for use with findbugs. See README.openEuler for more information.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs-tools@3.0.1-18.oe2403sp4?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Addon tools for findbugs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-findbugs-3.0.1",
      "name": "findbugs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "767cf8e6a967b5f59f93a320a680c179c8a109f0e418fa9841dde6622a4109c4"
        }
      ],
      "description": "Findbugs is a program which uses static analysis to look for bugs in Java code.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/findbugs@3.0.1-18.oe2403sp4?arch=noarch&epoch=0&upstream=findbugs-3.0.1-18.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/net.sourceforge.findbugs/findbugs@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.code.findbugs/annotations@3.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0d6f36abd19181f449c51a0931cd1995531ea0d1@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://findbugs.sourceforge.net/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Find Bugs in Java Programs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0.1-18.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "licenseConcluded": "EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4e1411b67da88fa697f6b41ad6f8c4db3f482981759570e84218eab7ff699b13"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403sp4?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "licenseDeclared": "EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-findbugs-3.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-findbugs-tools-3.0.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    }
  ]
}