{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "openjpa-tools-0.2.4.1-7.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/openjpa-tools-0.2.4.1-7.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "name": "openjpa-tools",
      "licenseConcluded": "BSD and Apache-2.0 and CDDL-1.0 and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7e8348df6b6fff4fce1d689dfa24efdc55d218a7a6d35d48e52046fce7d00066"
        }
      ],
      "description": "OpenJPA tasks for enhancing, SQL creation and\nschema mapping creation using Apache maven.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openjpa-tools@2.4.1-7.oe2403sp4?arch=noarch&epoch=0&upstream=openjpa-2.4.1-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-fetch-statistics@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-fetch-statistics-was@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-maven-plugin@2.4.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjpa.apache.org/",
      "licenseDeclared": "BSD and Apache-2.0 and CDDL-1.0 and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJPA tools - Maven Plugin",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.1-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bval-1.1.1",
      "name": "bval",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6f44a347a6e09ee93287e7f510c156238ecb7588dda1a1fd36d4c112b2c13254"
        }
      ],
      "description": "Apache BVal delivers an implementation of the Bean Validation\nSpecification (JSR-303 and JSR-346), which is TCK compliant and\nworks on Java SE 5 or later. The initial codebase for the\nproject was donated to the ASF by a SGA from Agimatec GmbH.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bval@1.1.1-4.oe2403sp4?arch=noarch&epoch=0&upstream=bval-1.1.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-core@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://bval.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Apache Bean Validation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bval-jsr-1.1.1",
      "name": "bval-jsr",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "697bb405e4221c8b2b5ed031a4b36dcef6dae8cea9bf8553bc79ebb4cd3a7f81"
        }
      ],
      "description": "Implementation specific classes for JSR 349 Bean Validation 1.1.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bval-jsr@1.1.1-4.oe2403sp4?arch=noarch&epoch=0&upstream=bval-1.1.1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-jsr@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.bval/bval-jsr303@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://bval.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Apache BVal :: JSR 349",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-geronimo-jta-1.1.1",
      "name": "geronimo-jta",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae255f78171e6c7faf15f1ec2f7a680a81393b88c202a9dad13f8344becc9a2b"
        }
      ],
      "description": "Java Transaction API (JTA) specifies standard Java interfaces between a\ntransaction manager and the parties involved in a distributed transaction\nsystem: the resource manager, the application server, and the transactional\napplications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/geronimo-jta@1.1.1-26.oe2403sp4?arch=noarch&epoch=0&upstream=geronimo-jta-1.1.1-26.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.transaction/jta@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.transaction@1.1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://geronimo.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "J2EE JTA v1.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1.1-26.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-geronimo-validation-1.1",
      "name": "geronimo-validation",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6790de4f018732845647b534786449d5bec7f2fa8bce69850df11aa4b3524ab2"
        }
      ],
      "description": "This is the Geronimo implementation of JSR-303, the Bean\nValidation API specification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/geronimo-validation@1.1-21.oe2403sp4?arch=noarch&epoch=0&upstream=geronimo-validation-1.1-21.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-validation_1.0_spec@1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://geronimo.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Geronimo implementation of JSR 303",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.1-21.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-hibernate-jpa-2.0-api-1.0.1",
      "name": "hibernate-jpa-2.0-api",
      "licenseConcluded": "EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fa19421751429fe3beacec9df2e0723c523ad1dc8656b441ff70c3bb9ca3c93a"
        }
      ],
      "description": "Hibernate definition of the Java Persistence 2.0 (JSR 317) API.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/hibernate-jpa-2.0-api@1.0.1-2.oe2403sp4?arch=noarch&epoch=0&upstream=hibernate-jpa-2.0-api-1.0.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.hibernate.javax.persistence/hibernate-jpa-2.0-api@1.0.1.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.hibernate.org/",
      "licenseDeclared": "EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java Persistence 2.0 (JSR 317) API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-junit-4.13.2",
      "name": "junit",
      "licenseConcluded": "EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4e1411b67da88fa697f6b41ad6f8c4db3f482981759570e84218eab7ff699b13"
        }
      ],
      "description": "JUnit is a simple framework to write repeatable tests. It is an\ninstance of the xUnit architecture for unit testing frameworks.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/junit@4.13.2-2.oe2403sp4?arch=noarch&epoch=1&upstream=junit-4.13.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit@4.13.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/junit/junit-dep@4.13.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.junit.org/",
      "licenseDeclared": "EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A Java package for unit testing frameworks",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.13.2-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-log4j12-1.2.17",
      "name": "log4j12",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d406ac5de809d04b6ad6090fbd74bbcf32bb07541d7fb26895dda21c7c252db2"
        }
      ],
      "description": "With log4j it is possible to enable logging at runtime\nwithout modifying the application binary.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/log4j12@1.2.17-26.oe2403sp4?arch=noarch&epoch=0&upstream=log4j12-1.2.17-26.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.17",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.13",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.14",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.15",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/log4j/log4j@1.2.16",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://logging.apache.org/log4j/1.2/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "A logging library for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.17-26.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "licenseConcluded": "ASL 2.0 and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "90e6021acc16f49ccd0d5133789a030e40dc08b70ce7b37c5a826975556b7a9a"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp4?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "licenseDeclared": "ASL 2.0 and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-project-2.2.1",
      "name": "maven-project",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b4d66e28887cdb6a238b7e9cf221392dd3f69e4594f369c469a3f740a5a43e7c"
        }
      ],
      "description": "Compatibility Maven project artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Maven project artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openjpa-2.4.1",
      "name": "openjpa",
      "licenseConcluded": "BSD and Apache-2.0 and CDDL-1.0 and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c3c19334e4e2e29fd8ca62b869e1c3e64a9faf6404f066cf18ac0a50adf8ea83"
        }
      ],
      "description": "OpenJPA is Apache's implementation of Sun's Java Persistence 2.0 API\n(JSR-317 JPA 2.0) specification for the transparent persistence of\nJava objects.\nIt is an object-relational mapping (ORM) solution for the Java language,\nwhich simplifies storing objects in databases.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openjpa@2.4.1-7.oe2403sp4?arch=noarch&epoch=0&upstream=openjpa-2.4.1-7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-jdbc@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-jest@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-slice@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-kernel@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-lib@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence-jdbc@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-persistence-locking@2.4.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openjpa/openjpa-xmlstore@2.4.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjpa.apache.org/",
      "licenseDeclared": "BSD and Apache-2.0 and CDDL-1.0 and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Java Persistence 2.0 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.1-7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ae23f9fd8e29abf9d648c244bcb293c76a30fa3af5dfa135f21cec5f8d276d26"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bval-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bval-jsr-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-geronimo-jta-1.1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-geronimo-validation-1.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-hibernate-jpa-2.0-api-1.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-junit-4.13.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-log4j12-1.2.17"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openjpa-2.4.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openjpa-tools-2.4.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    }
  ]
}
