{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "mysql-connector-java-1.8.0.33-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/mysql-connector-java-1.8.0.33-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "name": "mysql-connector-java",
      "licenseConcluded": "GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a6eb081efb1e18186bdf9321fd2de3c4e0e694e3796358bd175bbae683ef2bcc"
        }
      ],
      "description": "MySQL Connector/J is a native Java driver that converts JDBC (Java Database\nConnectivity) calls into the network protocol used by the MySQL database.\nIt lets developers working with the Java programming language easily build\nprograms and applets that interact with MySQL and connect all corporate\ndata, even in a heterogeneous environment. MySQL Connector/J is a Type\nIV JDBC driver and has a complete JDBC feature set that supports the\ncapabilities of MySQL.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/mysql-connector-java@8.0.33-1.oe2403sp4?arch=noarch&epoch=1&upstream=mysql-connector-java-8.0.33-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/mysql/mysql-connector-java@8.0.33",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://dev.mysql.com/downloads/connector/j/",
      "licenseDeclared": "GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Official JDBC driver for MySQL",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:8.0.33-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-c3p0-0.9.5.4",
      "name": "c3p0",
      "licenseConcluded": "LGPL-2.1-only OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e19731178449eef3833baaeb03f32f974394d72f892f17790a83d7c79cf88705"
        }
      ],
      "description": "c3p0 is a JDBC driver for extending traditional libraries (DriverManager-based libraries) with JNDI\nbindable data sources (including data sources), as described in the jdbc3 specification and jdbc2\nstandard extensions. They implement connections and statement pools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/c3p0@0.9.5.4-4.oe2403sp4?arch=noarch&epoch=0&upstream=c3p0-0.9.5.4-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/c3p0/c3p0@0.9.5.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.mchange/c3p0@0.9.5.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/swaldman/c3p0",
      "licenseDeclared": "LGPL-2.1-only OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "This is the JDBC DataSources/Resource Pools",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.9.5.4-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-geronimo-jta-1.1.1",
      "name": "geronimo-jta",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae255f78171e6c7faf15f1ec2f7a680a81393b88c202a9dad13f8344becc9a2b"
        }
      ],
      "description": "Java Transaction API (JTA) specifies standard Java interfaces between a\ntransaction manager and the parties involved in a distributed transaction\nsystem: the resource manager, the application server, and the transactional\napplications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/geronimo-jta@1.1.1-26.oe2403sp4?arch=noarch&epoch=0&upstream=geronimo-jta-1.1.1-26.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.transaction/jta@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.transaction@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://geronimo.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "J2EE JTA v1.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-26.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-hamcrest-2.2",
      "name": "hamcrest",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2ff5af4417d9ab1e1c5e72198bfc93db92dfc2d6d66ad23ba6e1164d48571e3e"
        }
      ],
      "description": "Provides a library of matcher objects (also known as constraints or\npredicates) allowing 'match' rules to be defined declaratively, to be\nused in other frameworks. Typical scenarios include testing frameworks,\nmocking libraries and UI validation rules.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hamcrest@2.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=hamcrest-2.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hamcrest/hamcrest@2.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hamcrest/hamcrest-all@2.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hamcrest/hamcrest-core@2.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hamcrest/hamcrest-library@2.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/hamcrest/JavaHamcrest",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Library of matcher objects for building test expressions",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javassist-3.18.1",
      "name": "javassist",
      "licenseConcluded": "MPLv1.1 or LGPLv2+ or ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23b5bccca0b48c97a5c0bdc12cae96c88c892743db5a2202087afaad0ef5175a"
        }
      ],
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a\nclass library for editing bytecodes in Java; it enables Java programs to define a new class\nat runtime and to modify a class file when the JVM loads it. Unlike other similar bytecode\neditors, Javassist provides two levels of API: source level and bytecode level. If the users\nuse the source- level API, they can edit a class file without knowledge of the specifications\nof the Java bytecode. The whole API is designed with only the vocabulary of the Java language.\nYou can even specify inserted bytecode in the form of source text; Javassist compiles it on\nthe fly. On the other hand, the bytecode-level API allows the users to directly edit a class\nfile as other editors.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javassist@3.18.1-10.oe2403sp4?arch=noarch&epoch=0&upstream=javassist-3.18.1-10.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javassist/javassist@3.18.1.GA",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.javassist/javassist@3.18.1.GA",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.csg.is.titech.ac.jp/~chiba/javassist/",
      "licenseDeclared": "MPLv1.1 or LGPLv2+ or ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java bytecode engineering toolkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.18.1-10.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit5-5.4.0",
      "name": "junit5",
      "licenseConcluded": "EPL-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6dea80f3e863638affe6b42172df6a7c496c332330fd354c52d113338125dd70"
        }
      ],
      "description": "JUnit is a popular regression testing framework for Java platform.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit5@5.4.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=junit5-5.4.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-engine@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-launcher@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-suite-api@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-commons@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-reporting@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.platform/junit-platform-runner@1.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.vintage/junit-vintage-engine@5.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.jupiter/junit-jupiter-migrationsupport@5.4.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.4.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://junit.org/junit5/",
      "licenseDeclared": "EPL-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java regression testing framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-surefire-provider-junit5-2.22.0",
      "name": "maven-surefire-provider-junit5",
      "licenseConcluded": "ASL 2.0 and CPL",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7ffb367fd1f24c2b249d474c892f73ce9de8a7ee19d3e90f61b26a4dafea4e1a"
        }
      ],
      "description": "This package provides for Maven Surefire.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-surefire-provider-junit5@2.22.0-7.oe2403sp4?arch=noarch&epoch=0&upstream=maven-surefire-2.22.0-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.surefire/surefire-junit-platform@2.22.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/surefire/",
      "licenseDeclared": "ASL 2.0 and CPL",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "JUnit 5 provider for Maven Surefire",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.22.0-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-protobuf-java-25.1",
      "name": "protobuf-java",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "876cb89982fa1edccf9797fdfb074805ca4c75c286bc1d0f594a53a8c729330d"
        }
      ],
      "description": "This package contains Java Protocol Buffers runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/protobuf-java@25.1-13.oe2403sp4?arch=noarch&epoch=0&upstream=protobuf-25.1-13.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@3.25.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/protocolbuffers/protobuf",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java Protocol Buffers runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:25.1-13.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-protobuf2-java-2.5.0",
      "name": "protobuf2-java",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2f5af8b0efff9dac31c50a4261b62b1e996a93a3937ba0d70077ee295c9bd97e"
        }
      ],
      "description": "This package contains Java Protocol Buffers runtime library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/protobuf2-java@2.5.0-6.oe2403sp4?arch=aarch64&epoch=0&upstream=protobuf2-2.5.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://code.google.com/p/protobuf/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java Protocol Buffers runtime library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-slf4j-1.7.25",
      "name": "slf4j",
      "licenseConcluded": "MIT and ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "106bd77796c23d6ddcef3bb3c841270da130719fe636a149cbb7dd5a81fd8283"
        }
      ],
      "description": "The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/slf4j@1.7.25-8.oe2403sp4?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-api@1.7.25",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-nop@1.7.25",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-simple@1.7.25",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.slf4j.org/",
      "licenseDeclared": "MIT and ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Simple Logging Facade for Java(SLF4J)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.25-8.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-c3p0-0.9.5.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-geronimo-jta-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hamcrest-2.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javassist-3.18.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit5-5.4.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-surefire-provider-junit5-2.22.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-protobuf-java-25.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-protobuf2-java-2.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-mysql-connector-java-8.0.33",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-slf4j-1.7.25"
    }
  ]
}
