{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "jersey-0.2.29.1-3.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/jersey-0.2.29.1-3.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-jersey-2.29.1",
      "name": "jersey",
      "licenseConcluded": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0a1fc0ba4e0a04ba174ef403eca6bff594f8af28cf31636d200f509b73e6a0e9"
        }
      ],
      "description": "Jersey is the open source JAX-RS (JSR 311)\nproduction quality Reference Implementation\nfor building RESTful Web services.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jersey@2.29.1-3.oe2403sp4?arch=noarch&epoch=0&upstream=jersey-2.29.1-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.connectors/jersey-jdk-connector@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-http@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-mvc-freemarker@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-wadl-doclet@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-processing@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.security/oauth1-server@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-jdk-http@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-mvc-jsp@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-sse@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-guava@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-mvc@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-mvc-bean-validation@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-proxy-client@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.security/oauth1-client@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-servlet@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jettison@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.security/oauth1-signature@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-spring5@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.connectors/jersey-jetty-connector@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-simple-http@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-ban-custom-hk2-binding@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-servlet@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-weld2-se@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.rx/jersey-rx-client-rxjava@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-grizzly2-servlet@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-metainf-services@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext/jersey-mvc-mustache@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.containers/jersey-container-jetty-http@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-transaction@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.ext.cdi/jersey-cdi1x-validation@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.media/jersey-media-jaxb@2.29.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.jersey.security/oauth2-client@2.29.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/jersey",
      "licenseDeclared": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "JAX-RS (JSR 311) production quality Reference Implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.29.1-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-atinject-1",
      "name": "atinject",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37286e1c74fba83712d4bd0b1a24e0db5348c5f5e85cb9512229c6109c67a198"
        }
      ],
      "description": "AtInject is the Java API build by the JSR-330.It's a set\nof API aiming to standardize an extensible dependency\ninjection paradigm, as those provided by Guice, Spring or\nPlexus projects.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/atinject@1-31.oe2403sp4?arch=noarch&epoch=0&upstream=atinject-1-31.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.inject/javax.inject@1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/svn2github/atinject/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java API for JSR-330 Dependency Injection",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1-31.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bean-validation-api-1.1.0",
      "name": "bean-validation-api",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a2817dd0dd19a9cea248fac9df3a7eb4b301e15f8356e0e0bdf2488189c290ad"
        }
      ],
      "description": "This module includes Bean Validation (JSR-349) API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bean-validation-api@1.1.0-13.oe2403sp4?arch=noarch&epoch=0&upstream=bean-validation-api-1.1.0-13.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.validation/validation-api@1.1.0.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/beanvalidation/beanvalidation-api/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Bean Validation API (JSR 349)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.0-13.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-freemarker-2.3.32",
      "name": "freemarker",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f56a33b728ac496860d0e720588ef00279556e80abdb7dc014d30a450a6c666f"
        }
      ],
      "description": "Apache FreeMarker is a template engine: a Java library to generate text output\n(HTML web pages, e-mails, configuration files, source code, etc.) based on\ntemplates and changing data. Templates are written in the FreeMarker Template\nLanguage (FTL), which is a simple, specialized language (not a full-blown\nprogramming language like PHP).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/freemarker@2.3.32-1.oe2403sp4?arch=noarch&epoch=0&upstream=freemarker-2.3.32-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.freemarker/freemarker@2.3.32",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://freemarker.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The Apache FreeMarker Template Engine",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.32-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-annotation-api-1.2",
      "name": "glassfish-annotation-api",
      "licenseConcluded": "CDDL-1.1 OR GPL-2.0-with-classpath-exception",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4dd336ef5130762ec6f82602825df5842aa216abb7177a7f96a4a95ef6f34b9e"
        }
      ],
      "description": "This package is a general annotations API for the Java platform (JSR 250).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-annotation-api@1.2-17.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-annotation-api-1.2-17.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.annotation/javax.annotation-api@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://glassfish.java.net/",
      "licenseDeclared": "CDDL-1.1 OR GPL-2.0-with-classpath-exception",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java(TM) Specification APIs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-17.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-hk2-hk2-2.5.0",
      "name": "glassfish-hk2-hk2",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3eaee09970a83b66426dbc4bd6c08af3b04f5b508030b0440ab52f6b3dbc7c7"
        }
      ],
      "description": "This is so that other modules can depend on HK2 as an HK2 module.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-hk2-hk2@2.5.0-5.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-hk2-2.5.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.hk2/hk2@2.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/glassfish-hk2/",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "HK2 module of HK2 itself",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-hk2-locator-2.5.0",
      "name": "glassfish-hk2-locator",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "67486cec14fefbe4183074d733e93c6821b43cc7cb3a5f422c403516f8d4fd83"
        }
      ],
      "description": "Hundred Kilobytes Kernel ServiceLocator Default Implementation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-hk2-locator@2.5.0-5.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-hk2-2.5.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.hk2/hk2-locator@2.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/glassfish-hk2/",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "HK2 ServiceLocator Default Implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-hk2-osgi-resource-locator-2.5.0",
      "name": "glassfish-hk2-osgi-resource-locator",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5bb6d0c9067fda6c8b465c21dc09a607bdd23cabf364ae243848229ccda9ffd9"
        }
      ],
      "description": "Hundred Kilobytes Kernel - OSGi resource locator bundle. Used by\nvarious API providers that rely on META-INF/services mechanism to\nlocate providers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-hk2-osgi-resource-locator@2.5.0-5.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-hk2-2.5.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/glassfish-hk2/",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "HK2 OSGi resource locator bundle",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-hk2-spring-bridge-2.5.0",
      "name": "glassfish-hk2-spring-bridge",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ef20e926d5dd8e7d72a5533441512960c22a680d5ec5e8dad55a5432366e03e3"
        }
      ],
      "description": "Hundred Kilobytes Kernel Spring Bridge.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-hk2-spring-bridge@2.5.0-5.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-hk2-2.5.0-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.hk2/spring-bridge@2.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/glassfish-hk2/",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "HK2 Spring Bridge",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-jax-rs-api-2.1.6",
      "name": "glassfish-jax-rs-api",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "45337a03f17d7d908d09a5fee34556ffd0b60174372c07ec00be199cd3203bf6"
        }
      ],
      "description": "JAX-RS Java API for RESTful Web Services (JSR 339).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-jax-rs-api@2.1.6-1.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-jax-rs-api-2.1.6-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.6",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/jaxrs-api",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "JAX-RS API Specification (JSR 339)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.6-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-servlet-api-3.1.0",
      "name": "glassfish-servlet-api",
      "licenseConcluded": "(CDDL-1.1 OR GPL-2.0-with-classpath-exception) AND Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f6ea9f9421c0dbb6fcfa62a53bf4ff0a5cdb7a83b7bc9e88f23b8d6a5b105949"
        }
      ],
      "description": "Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform.\nIt is the foundation web specification in the Java Enterprise Platform. Developers can build web\napplications using the Servlet API to interact with the request/response workflow.\nThis package provides some classes and interfaces which define and describe the contracts between\na servlet class and the runtime environment provided for an instance of such a class.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-servlet-api@3.1.0-17.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-servlet-api-3.1.0-17.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/servlet-api@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://servlet-spec.java.net",
      "licenseDeclared": "(CDDL-1.1 OR GPL-2.0-with-classpath-exception) AND Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "API of Java Servlet",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1.0-17.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-grizzly-2.3.24",
      "name": "grizzly",
      "licenseConcluded": "(CDDL-1.1 or GPLv2 with exceptions) and BSD and ASL 2.0 and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e018b5157970e191ee696958aa0e20091229b1145fe0f03462383e4167aed16a"
        }
      ],
      "description": "Writing scalable server applications in the Java programming\nlanguage has always been difficult. Before the advent of the\nJava New I/O API (NIO), thread management issues made it\nimpossible for a server to scale to thousands of users. The\nGrizzly framework has been designed to help developers to take\nadvantage of the Java NIO API. Originally developed under the\nGlassFish umbrella, the framework is now available as a\nstandalone project. Grizzly goals is to help developers to\nbuild scalable and robust servers using NIO.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/grizzly@2.3.24-5.oe2403sp4?arch=noarch&epoch=0&upstream=grizzly-2.3.24-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-server-monitoring@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http2@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-portunif@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-websockets@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/connection-pool@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet-extras@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/tls-sni@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-comet@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-framework-monitoring@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-ajp@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-monitoring@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-spdy@2.3.24",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.grizzly/grizzly-http-server-multipart@2.3.24",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://grizzly.java.net/",
      "licenseDeclared": "(CDDL-1.1 or GPLv2 with exceptions) and BSD and ASL 2.0 and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java NIO Server Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.24-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-guava20-20.0",
      "name": "guava20",
      "licenseConcluded": "ASL 2.0 and CC0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "505eb19a1367101773012fad9c867993541dfa6c4f037cb7c802d97f6da757cb"
        }
      ],
      "description": "Guava is a set of core libraries that includes new collection types ,immutable collections,\na graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/guava20@20.0-11.oe2403sp4?arch=noarch&epoch=0&upstream=guava20-20.0-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@19.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@20.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@10.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@11.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@13.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@13.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@16.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.collections/google-collections@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@16.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@17.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@18.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@11.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@12.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-testlib@14.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava-jdk5@15.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@10.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/guava",
      "licenseDeclared": "ASL 2.0 and CC0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Google Libraries for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:20.0-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-hibernate-validator-5.2.4",
      "name": "hibernate-validator",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4835f0699148d640737dd1092a2d21174aee051480fa349ad1385e7387c79b27"
        }
      ],
      "description": "This is the reference implementation of JSR-349 - Bean Validation 1.1.\nBean Validation defines a meta-data model and API for JavaBean as well\nas method validation. The default meta-data source are annotations,\nwith the ability to override and extend the meta-data through the\nuse of XML validation descriptors.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hibernate-validator@5.2.4-5.oe2403sp4?arch=noarch&epoch=0&upstream=hibernate-validator-5.2.4-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hibernate/hibernate-validator@5.2.4.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.hibernate.org/subprojects/validator.html",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Bean Validation 1.1 (JSR 349) Reference Implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.4-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-httpcomponents-client-4.5.5",
      "name": "httpcomponents-client",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "53b23c12f4fd2f20d41e3eafe453d9614959653d5ff0ac91b4765544dbd0146f"
        }
      ],
      "description": "HttpClient is an HTTP proxy implementation of HTTP / 1.1 extended by\nhttpcomponents HttpCore,which provides reusable components for\nHTTP state management, HTTP connection management, and client-side\nauthentication. HttpComponents Client is almost equalto Commons\nHttpClient 3.x. Users of Commons HttpClient strongly support it.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/httpcomponents-client@4.5.5-7.oe2403sp4?arch=noarch&epoch=0&upstream=httpcomponents-client-4.5.5-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/fluent-hc@4.5.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.5",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://hc.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A library of components for building client side HTTP services",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.5.5-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jackson-annotations-2.15.2",
      "name": "jackson-annotations",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3ffbb3c42f8831b531da42b8d02dbba82036cddbeb5b129e7d92de9cbeb9419a"
        }
      ],
      "description": "Core annotations used for value types,\nused by Jackson data-binding package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jackson-annotations@2.15.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=jackson-annotations-2.15.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/FasterXML/jackson-annotations/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core annotations for Jackson data processor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.15.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jackson-databind-2.9.8",
      "name": "jackson-databind",
      "licenseConcluded": "ASL 2.0 and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a02b5bda047c8fd13819b95b77237168188ddc2734233a900a11ed9fbbe90d0a"
        }
      ],
      "description": "The general-purpose data-binding functionality and tree-model for Jackson Data\nProcessor. It builds on core streaming parser/generator package, and uses\nJackson Annotations for configuration.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jackson-databind@2.9.8-10.oe2403sp4?arch=noarch&epoch=0&upstream=jackson-databind-2.9.8-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/FasterXML/jackson-databind/",
      "licenseDeclared": "ASL 2.0 and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "General data-binding package for Jackson (2.x)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9.8-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jackson-module-jaxb-annotations-2.9.8",
      "name": "jackson-module-jaxb-annotations",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "58d49267c849427aba4489f4f0df9989603155fd256cb4cbb010287d511c8e64"
        }
      ],
      "description": "This Jackson extension module provides support for using JAXB (javax.xml.bind)\nannotations as an alternative to native Jackson annotations. It is most often\nused to make it easier to reuse existing data beans that used with JAXB\nframework to read and write XML.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jackson-module-jaxb-annotations@2.9.8-1.oe2403sp4?arch=noarch&epoch=0&upstream=jackson-modules-base-2.9.8-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.9.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/FasterXML/jackson-modules-base",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Support for using JAXB annotations as an alternative to \"native\" Jackson annotations",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9.8-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jakarta-el-4.0.0",
      "name": "jakarta-el",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "28224f0118c2cf9db85e9d4ba9f3d4c901fe657dca8c461b72fb8c284f3cd78c"
        }
      ],
      "description": "Jakarta Expression Language provides a specification document, API,\nreference implementation and TCK that describes an expression language\nfor Java applications.\nThis package contains the implementation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jakarta-el@4.0.0-4.oe2403sp4?arch=noarch&epoch=0&upstream=jakarta-el-4.0.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/com.sun.el@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish.web/javax.el@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish/jakarta.el@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish/javax.el@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish/javax.el-impl@4.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jakartaee/expression-language",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Jakarta Expression Language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.0.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jakarta-el-api-4.0.0",
      "name": "jakarta-el-api",
      "licenseConcluded": "EPL-2.0 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe9e5555e8099917f57dc50e9d914068344ef75dd41b06aad98c5600f7fd5248"
        }
      ],
      "description": "Jakarta Expression Language provides a specification document, API,\nreference implementation and TCK that describes an expression language\nfor Java applications.\n\nThis package contains only the API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jakarta-el-api@4.0.0-4.oe2403sp4?arch=noarch&epoch=0&upstream=jakarta-el-4.0.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.el/el-api@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.el/javax.el-api@4.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/jakarta.el/jakarta.el-api@4.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jakartaee/expression-language",
      "licenseDeclared": "EPL-2.0 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Jakarta Expression Language API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.0.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jakarta-servlet-5.0.0",
      "name": "jakarta-servlet",
      "licenseConcluded": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5828fc7e1492a2a4e129e73b4ce571808b82af8e501dc839578bb3155074371c"
        }
      ],
      "description": "Jakarta Servlet defines a server-side API for handling HTTP requests\nand responses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jakarta-servlet@5.0.0-4.oe2403sp4?arch=noarch&epoch=0&upstream=jakarta-servlet-5.0.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/servlet-api@5.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/javax.servlet-api@5.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/servlet-api",
      "licenseDeclared": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Server-side API for handling HTTP requests and responses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.0.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0",
      "name": "javapackages-tools",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae96f7b5e190e5a7e31f9a59c831f2d554898150f56d78c0ba2ff7b27a8de955"
        }
      ],
      "description": "The javapackages-tools package contains macros and scripts to support Java packaging.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Support for Java packaging with macros and scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jettison-1.5.4",
      "name": "jettison",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e06436537cd3ff7eb645ed0e1751ae2d76c1edc503a0114d8f836fee539a264e"
        }
      ],
      "description": "Jettison is a collection of Java APIs (like STaX and DOM) which read\nand write JSON. This allows nearly transparent enablement of JSON based\nweb services in services frameworks like CXF or XML serialization\nframeworks like XStream.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jettison@1.5.4-2.oe2403sp4?arch=noarch&epoch=0&upstream=jettison-1.5.4-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.jettison/jettison@1.5.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jettison-json/jettison",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A JSON StAX implementation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.4-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-client-9.4.16",
      "name": "jetty-client",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5f6facf920c3aecca5846a8cdf95ee943ae108f3b09da7bff0b6dcbcb8b2e73b"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains client module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-client@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "client module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-continuation-9.4.16",
      "name": "jetty-continuation",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4d3dbe27d4561c0b67d8c3b89f1646983f17ce217318512759e074033944cedb"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains continuation module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-continuation@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "continuation module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-server-9.4.16",
      "name": "jetty-server",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3fa75748dc20c7c5dc841687f418f5eff1af2dc42167a1db1b980894cdd9d751"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains server module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-server@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "server module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-util-9.4.16",
      "name": "jetty-util",
      "licenseConcluded": "(Apache-2.0 OR EPL-1.0) AND MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fd39df5c649a34cda81aa4140bb65ae674b1e50cf89bc2fecc0d1891d0f5abf6"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains util module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-util@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "(Apache-2.0 OR EPL-1.0) AND MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "util module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-webapp-9.4.16",
      "name": "jetty-webapp",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fe2e7160ff4233e07970a99624b3cce65aa0e7c94dece0a164f39208391510a3"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains webapp module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-webapp@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "webapp module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jsonp-1.0.4",
      "name": "jsonp",
      "licenseConcluded": "CDDL-1.1 or GPL-2.0-with-classpath-exception",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bc3c8e1ab5b09094aa99704e74efd0ad28eb200cab2cc0b9387c4ffa417c20ed"
        }
      ],
      "description": "JSR 353: Java API for Processing JSON RI.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jsonp@1.0.4-2.oe2403sp4?arch=noarch&epoch=0&upstream=jsonp-1.0.4-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.json/javax.json-api@1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish/javax.json@1.0.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.glassfish/jsonp-jaxrs@1.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://java.net/projects/jsonp/",
      "licenseDeclared": "CDDL-1.1 or GPL-2.0-with-classpath-exception",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "JSR 353 (JSON Processing) RI",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.4-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mimepull-1.9.10",
      "name": "mimepull",
      "licenseConcluded": "CDDL-1.1 and GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "02ecabc51717caf0dde7056b7c9a24f634159d90f447f0ecd28f452a8638e7ca"
        }
      ],
      "description": "Provides a streaming API to access attachments parts in a MIME message",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mimepull@1.9.10-1.oe2403sp4?arch=noarch&epoch=0&upstream=mimepull-1.9.10-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.10",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://mimepull.java.net",
      "licenseDeclared": "CDDL-1.1 and GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Streaming API to access attachments from a MIME message",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9.10-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-mustache-java-0.9.7",
      "name": "mustache-java",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2f881b06bf045b76cfc0e227bef17aaddcd178e83f414caef3a7b3831db23820"
        }
      ],
      "description": "Implementation of the Mustache language in Java.\nMustache.java is a derivative of mustache.js.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mustache-java@0.9.7-1.oe2403sp4?arch=noarch&epoch=0&upstream=mustache-java-0.9.7-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.spullara.mustache.java/compiler@0.9.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.spullara.mustache.java/handlebar@0.9.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.spullara.mustache.java/javascript@0.9.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/spullara/mustache.java/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Implementation of mustache.js for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.7-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1",
      "name": "objectweb-asm",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "293eccfb5a2fc8848e814b03b0c202f7247e2fc67cdb64aaf20f841008dea6fe"
        }
      ],
      "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework.  It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form.  Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://asm.ow2.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java bytecode manipulation and analysis framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.0.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-rxjava-1.1.8",
      "name": "rxjava",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3744f2e2c0066e47581c5a7dad09c3ae7d45959ce2ec1f7401da533b834c07d8"
        }
      ],
      "description": "RxJava a library for composing asynchronous and\nevent-based programs using observable sequences\nfor the Java VM.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/rxjava@1.1.8-1.oe2403sp4?arch=noarch&epoch=0&upstream=rxjava-1.1.8-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.reactivex/rxjava@1.1.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/ReactiveX/RxJava",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Reactive Extensions for the JVM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.8-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-simple-6.0.1",
      "name": "simple",
      "licenseConcluded": "ASL 2.0 and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fd93292d05be9dc2654e76740ae3a8c34016694aa9f81240443d4f3e323f3720"
        }
      ],
      "description": "Simple is a high performance asynchronous HTTP server for Java.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/simple@6.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=simple-6.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.simpleframework/simple-common@6.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.simpleframework/simple-http@6.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.simpleframework/simple-transport@6.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.simpleframework.org/",
      "licenseDeclared": "ASL 2.0 and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Asynchronous HTTP server for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:6.0.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-3.2.18",
      "name": "springframework",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3f391234d2c6acac6bdefce955a226b5cd99c01f0fdcc255336f7da39209aeef"
        }
      ],
      "description": "The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment\nby Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-core@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The Spring Java Application Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-aop-3.2.18",
      "name": "springframework-aop",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4f94ea00190a603c7a23cb969bb9628816b519d1cc84ebcdd9c04340fcff708a"
        }
      ],
      "description": "The package is an enabling technology,it allows the implementation of custom\naspects and provides declarative transaction management without EJB.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-aop@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-aop@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Provode the Spring Aspect Oriented Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-beans-3.2.18",
      "name": "springframework-beans",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5c9fdb4e9b9d9b85eea872969cb6a5c0e73a80436d2c8771d11817c47bcbe647"
        }
      ],
      "description": "The Package provides an advanced configuration mechanism capable of\nmanaging beans of any nature, using potentially any kind of storage facility.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-beans@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-beans@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Provide the Spring Bean Factory",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-web-3.2.18",
      "name": "springframework-web",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "20f1fbcc4da839b257db652d3612ddddaaf920c197a4000f8c89bfa6f858e4e0"
        }
      ],
      "description": "This package provide web application context, multipart\nresolver, HTTP-based remoting support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-web@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-web@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Spring Web",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-weld-core-2.3.5",
      "name": "weld-core",
      "licenseConcluded": "ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "75816067f1830c71bd9f7758559ce40e22d3ec89dff64b04cb429f765767d985"
        }
      ],
      "description": "Weld is the reference implementation (RI) for JSR-299: Java Contexts and\nDependency Injection for the Java EE platform (CDI). CDI is the Java standard\nfor dependency injection and contextual lifecycle management, and integrates\ncleanly with the Java EE platform. Any Java EE 6-compliant application server\nprovides support for JSR-299 (even the web profile).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/weld-core@2.3.5-4.oe2403sp4?arch=noarch&epoch=0&upstream=weld-core-2.3.5-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.probe/weld-probe-core@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.se/weld-se-core@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld/weld-core-test-common@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.environment/weld-environment-common@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.se/weld-se@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.servlet/weld-servlet@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld.servlet/weld-servlet-core@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld/weld-core@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld/weld-core-impl@2.3.5.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.weld/weld-core-jsf@2.3.5.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://weld.cdi-spec.org/",
      "licenseDeclared": "ASL 2.0 and (CDDL-1.0 or GPLv2 with exceptions) and LGPLv2+ and MIT and OFL-1.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Reference Implementation for JSR-299: Contexts and Dependency Injection (CDI)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.5-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xerces-j2-2.12.2",
      "name": "xerces-j2",
      "licenseConcluded": "ASL 2.0 and W3C",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "933a5888e092c455a8177d58f42bd1136c665cad8162d86f271661467902251d"
        }
      ],
      "description": "Welcome to the future! Xerces2 is the next generation of high\nperformance, fully compliant XML parsers in the Apache Xerces family.\nThis new version of Xerces introduces the Xerces Native Interface (XNI),\na complete framework for building parser components and configurations\nthat is extremely modular and easy to program.\n\nThe Apache Xerces2 parser is the reference implementation of XNI but\nother parser components, configurations, and parsers can be written\nusing the Xerces Native Interface. For complete design and\nimplementation documents, refer to the XNI Manual.\n\nXerces 2 is a fully conforming XML Schema processor. For more\ninformation, refer to the XML Schema page.\n\nXerces 2 also provides a partial implementation of Document Object Model\nLevel 3 Core, Load and Save and Abstract Schemas [deprecated] Working\nDrafts. For more information, refer to the DOM Level 3 Implementation\npage.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xerces-j2@2.12.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=xerces-j2-2.12.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/xerces-j2@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xerces@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xercesImpl@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xmlParserAPIs@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/769436d89e8bc187f792b19cb54efa290d787d78@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xerces.apache.org/xerces2-j/",
      "licenseDeclared": "ASL 2.0 and W3C",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java XML parser",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.12.2-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-atinject-1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bean-validation-api-1.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-freemarker-2.3.32"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-annotation-api-1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-hk2-hk2-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-hk2-locator-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-hk2-osgi-resource-locator-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-hk2-spring-bridge-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-jax-rs-api-2.1.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-servlet-api-3.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-grizzly-2.3.24"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-guava20-20.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hibernate-validator-5.2.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-httpcomponents-client-4.5.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jackson-annotations-2.15.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jackson-databind-2.9.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jackson-module-jaxb-annotations-2.9.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jakarta-el-4.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jakarta-el-api-4.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jakarta-servlet-5.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jettison-1.5.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-client-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-continuation-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-server-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-util-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-webapp-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jsonp-1.0.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mimepull-1.9.10"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-mustache-java-0.9.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-rxjava-1.1.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-simple-6.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-aop-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-beans-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-web-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-weld-core-2.3.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jersey-2.29.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xerces-j2-2.12.2"
    }
  ]
}
