{ "SPDXID": "SPDXRef-DOCUMENT", "name": "springframework-0.3.2.18-16.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T04:28:12.092529219Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/springframework-0.3.2.18-16.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-springframework-3.2.18", "name": "springframework", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3f391234d2c6acac6bdefce955a226b5cd99c01f0fdcc255336f7da39209aeef" } ], "description": "The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment\nby Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/springframework@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.springframework/spring-core@3.2.18.RELEASE", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://projects.spring.io/spring-framework/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "The Spring Java Application Framework", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.2.18-16.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-logging-1.2", "name": "apache-commons-logging", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ade59dc522c0f9f3769a6a9d4cad486fb4ffb3c477861960ee4f596ba5e6ac54" } ], "description": "The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-logging@1.2-17.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging-api@1.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging-api@1.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-api@1.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/logging", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Apache Commons Logging", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2-17.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-cglib-3.3.0", "name": "cglib", "licenseConcluded": "ASL 2.0 and BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5b2a53a034d6cdec6a7ba33e1c6f7ab1c8a45f0d383c119a375de942ba9d5f12" } ], "description": "cglib is a powerful, high performance and quality code generation library\nfor Java. It is used to extend Java classes and implements interfaces\nat run-time.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/cglib@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=cglib-3.3.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.sonatype.sisu.inject/cglib@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/cglib/cglib@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/cglib/cglib-full@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/cglib/cglib-nodep@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/cglib/cglib-sample@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.sf.cglib/cglib@3.3.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/cglib/cglib", "licenseDeclared": "ASL 2.0 and BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Code Generation Library for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.0-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1", "name": "objectweb-asm", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "293eccfb5a2fc8848e814b03b0c202f7247e2fc67cdb64aaf20f841008dea6fe" } ], "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework. It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form. Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://asm.ow2.org/", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2", "summary": "Java bytecode manipulation and analysis framework", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:8.0.1-1.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-logging-1.2" }, { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-cglib-3.3.0" }, { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-springframework-3.2.18", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1" } ] }