{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "springframework-web-0.3.2.18-16.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/springframework-web-0.3.2.18-16.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-springframework-web-3.2.18",
      "name": "springframework-web",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "20f1fbcc4da839b257db652d3612ddddaaf920c197a4000f8c89bfa6f858e4e0"
        }
      ],
      "description": "This package provide web application context, multipart\nresolver, HTTP-based remoting support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-web@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-web@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Spring Web",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "17a75a972d65928ec6db2be26b26e7bbcfb4c41f483a98f9b9101092633349c9"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4360c2d40e69621ea49c4f6881caa712508e4466@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/42852a0922cf739c1f90bd57a7a7473e605ec721@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/338e604865e98d89ea96affb20aed9eba9e95a0e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3d239d3b5de1b9e903de0539fa9d0ff028dab766@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6597cb118c00bb892e3c6089db5842f542c8e8b0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9c050ec27062f59dc2d9799c0459280f7c1b3c22@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/98d5d2b45fd23ed8e571eaddc068c4baf0d351ba@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2a8064d55b27a9066231785dd172ef9b47677714@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/aa3a5da5290cc8e54ed0fcfc48804b95367418de@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52e70b9aa135268c56f1795cb341034167ba1922@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/caad18b0d47c927b20d4472927ed15c9f7411ae7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cc9616e3e0a8fdf598cfe7b1196c3ea68b1ffbc0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1c2184b4bcd7ddc2a731d06cd50bdf83dcd77266@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/563254529c831099de4df450749bee50d1c33c20@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/496e40354cc8d14bb061b3f83fc27479792ee485@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df84507f6a67f7ff5933c981b811d97f7a7c0f9b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/805effb7c0e43b0eb2bb0ab31b94e059db51acb5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "21077c7c8b599bbd6751cc8f83ac2a560c16b2008829d811a75d3e1f758b2a75"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b25b44b34ba2ea99b79e05a2934902a3f98d380e@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "118a73452648e4cbc2dcb8544c2321c9378e0cf9c875d2c227e799c6295fecbb"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-3.2.18",
      "name": "springframework",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3f391234d2c6acac6bdefce955a226b5cd99c01f0fdcc255336f7da39209aeef"
        }
      ],
      "description": "The spring is based on code pubilshed in Expert One-on-One J2EE Design and Dvelopment\nby Rod Johnson (Wrox, 2002).it is a layered Java/J2ee application framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-core@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The Spring Java Application Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-aop-3.2.18",
      "name": "springframework-aop",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4f94ea00190a603c7a23cb969bb9628816b519d1cc84ebcdd9c04340fcff708a"
        }
      ],
      "description": "The package is an enabling technology,it allows the implementation of custom\naspects and provides declarative transaction management without EJB.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-aop@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-aop@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Provode the Spring Aspect Oriented Framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-beans-3.2.18",
      "name": "springframework-beans",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5c9fdb4e9b9d9b85eea872969cb6a5c0e73a80436d2c8771d11817c47bcbe647"
        }
      ],
      "description": "The Package provides an advanced configuration mechanism capable of\nmanaging beans of any nature, using potentially any kind of storage facility.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-beans@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-beans@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Provide the Spring Bean Factory",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-springframework-context-3.2.18",
      "name": "springframework-context",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b84e00c1415fc354278e974131a1cb69dadae288878fa829e171c9a489002ff4"
        }
      ],
      "description": "The package is a complete superset of a bean factory, and\nadds enhanced capabilities to it, some of them more J2EE and\nenterprise-centric.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/springframework-context@3.2.18-16.oe2403sp4?arch=noarch&epoch=0&upstream=springframework-3.2.18-16.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.springframework/spring-context@3.2.18.RELEASE",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://projects.spring.io/spring-framework/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Provide the Spring Application Context",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2.18-16.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-aop-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-beans-3.2.18"
    },
    {
      "spdxElementId": "SPDXRef-rpm-springframework-web-3.2.18",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-springframework-context-3.2.18"
    }
  ]
}
