{ "SPDXID": "SPDXRef-DOCUMENT", "name": "plexus-archiver-0.4.2.7-2.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T04:28:12.092529219Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/plexus-archiver-0.4.2.7-2.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-plexus-archiver-4.2.7", "name": "plexus-archiver", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ccc6fd36a2cfec538c28ad33629fe03062d3c0c2448556d628e0c64eb2b0cecc" } ], "description": "The Plexus project provides a full software stack for creating and executing\nsoftware projects. It provides a number of pre-built components for common\ntasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more.\nHowever, Plexus is also able to reuse your existing components written for\nother IoC frameworks such as Spring, Avalon and Pico Container unmodified,\nas well as allowing you to reuse your existing code inside the Plexus\nContainer.\n\nPlexus comes with an application server that can run your applications, making\nit trivial to build a standalone executable distribution with common features\nsuch as service execution if needed. However, Plexus applications can be run\nin any environment by embedding the container in an existing application,\nincluding Java EE applications or web applications.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-archiver@4.2.7-2.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-archiver-4.2.7-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://codehaus-plexus.github.io/plexus-archiver", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Plexus Archiver Components", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:4.2.7-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-compress-1.21", "name": "apache-commons-compress", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b46980458fd24c7a21298dced1217b45b940a7e9730dc18b41523ef6a4fd6dff" } ], "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-compress@1.21-1.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-compress@1.21", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-compress/commons-compress@1.21", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons/commons-compress@1.21", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/proper/commons-compress/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Java API for working with compressed files and archivers", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.21-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-dain-snappy-0.4", "name": "dain-snappy", "licenseConcluded": "ASL 2.0 and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "81c7a4488db3766ea71d34d5c6c88265ed3bfa10396e9085c90817381e19e6f7" } ], "description": "This is a rewrite (port) of Snappy writen in pure Java. This compression code produces a\nbyte-for-byte exact copy of the output created by the original C++ code, and extremely fast.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/dain-snappy@0.4-7.oe2403sp4?arch=noarch&epoch=0&upstream=dain-snappy-0.4-7.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.iq80.snappy/snappy@0.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/dain/snappy", "licenseDeclared": "ASL 2.0 and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Port of Snappy to Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:0.4-7.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-io-3.2.0", "name": "plexus-io", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "6bf42ccbb311b904f918d948d8ac525e91fa5be39a53c0ea816f47636a9c8993" } ], "description": "Plexus IO is a set of plexus components, which are designed for use in I/O operations.\nThese I/O operations are doing nothing spectacular. For example,\nCommons IO is a much more powerful library in the same area.\nHowever, the implementation as a plexus component allows reuse in Maven.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-io@3.2.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-io-3.2.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-io@3.2.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://codehaus-plexus.github.io/plexus-io/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Use in I/O operations", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.2.0-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0", "name": "plexus-utils", "licenseConcluded": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ae23f9fd8e29abf9d648c244bcb293c76a30fa3af5dfa135f21cec5f8d276d26" } ], "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://codehaus-plexus.github.io/plexus-utils/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Plexus Common Utilities", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.0-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-xz-java-1.9", "name": "xz-java", "licenseConcluded": "Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "817beab1f8d7e4885f26fe816bd6ba4f1bb4146f3cb49d736d26b65516bdcb3c" } ], "description": "This aims to be a complete implementation of XZ data compression in pure Java. Single-threaded \\\nstreamed compression and decompression and random access decompression have been fully implemented.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/xz-java@1.9-1.oe2403sp4?arch=noarch&epoch=0&upstream=xz-java-1.9-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.tukaani/xz@1.9", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://tukaani.org/xz/java.html", "licenseDeclared": "Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "A complete implementation of XZ data compression in pure Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.9-1.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-compress-1.21" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-dain-snappy-0.4" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-io-3.2.0" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0" }, { "spdxElementId": "SPDXRef-rpm-plexus-archiver-4.2.7", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-xz-java-1.9" } ] }