{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "apache-commons-chain-0.1.2-2.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/apache-commons-chain-0.1.2-2.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-chain-1.2",
      "name": "apache-commons-chain",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "663abe8204d68a31d8404dc0b36e6b3aecc4328355200c2ecc6b6206e79b0571"
        }
      ],
      "description": "A popular technique for organizing the execution of complex\nprocessing flows is the \"Chain of Responsibility\" pattern, as\ndescribed (among many other places) in the classic \"Gang of Four\"\ndesign patterns book. Although the fundamental API contracts\nrequired to implement this design pattern are extremely simple,\nit is useful to have a base API that facilitates using the pattern,\nand (more importantly) encouraging composition of command\nimplementations from multiple diverse sources.\nTowards that end, the Chain API models a computation as a series\nof \"commands\" that can be combined into a \"chain\". The API for a\ncommand consists of a single method (execute()), which is passed\na \"context\" parameter containing the dynamic state of the\ncomputation, and whose return value is a boolean that determines\nwhether or not processing for the current chain has been completed\n(true), or whether processing should be delegated to the next\ncommand in the chain (false).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-chain@1.2-2.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-chain-1.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-chain/commons-chain@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/chain/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "An implementation of the GoF Chain of Responsibility pattern",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-beanutils-1.9.4",
      "name": "apache-commons-beanutils",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3e5ed88e23db3cdeeb71e5e2e1f243c422c2b2d44dd4229fd02771628b9fb330"
        }
      ],
      "description": "The scope of this package is to create a package of Java utility methods\nfor accessing and modifying the properties of arbitrary JavaBeans.  No\ndependencies outside of the JDK are required, so the use of this package\nis very lightweight.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-beanutils@1.9.4-4.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-beanutils-1.9.4-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils-bean-collections@1.9.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils-core@1.9.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils@1.9.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils-bean-collections@1.9.4",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils-core@1.9.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/beanutils",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java utility methods for accessing and modifying the properties of arbitrary JavaBeans",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9.4-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-digester-2.1",
      "name": "apache-commons-digester",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6338ba2ac9893a0236bbc96bc7e5e9a2c483ab239417df12e4b5d0688090f679"
        }
      ],
      "description": "Many projects read XML configuration files to provide initialization of\nvarious Java objects within the system. There are several ways of doing this,\nand the Digester component was designed to provide a common implementation\nthat can be used in many different projects",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-digester@2.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-digester-2.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-digester@2.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-digester/commons-digester@2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/digester/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "XML to Java object mapping module",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-logging-1.2",
      "name": "apache-commons-logging",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7c5ff305dd8eac6713c6dbf750e56a5fade600f58581bef818dd8a5230fdf2aa"
        }
      ],
      "description": "The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-logging@1.2-17.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/commons-logging-api@1.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-logging/commons-logging-adapters@1.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-api@1.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/logging",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Apache Commons Logging",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-17.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jboss-jsf-2.1-api-2.1.29.1",
      "name": "jboss-jsf-2.1-api",
      "licenseConcluded": "CDDL-1.1 or GPLv2 with exceptions",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3017666ae952953ebc79b6c1244f75fcfba1f3af59f54d9048f30fd8c7c2d36a"
        }
      ],
      "description": "JavaServer Faces API classes based on Version 2.1 of Specification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jboss-jsf-2.1-api@2.1.29.1-2.oe2403sp4?arch=noarch&epoch=0&upstream=jboss-jsf-2.1-api-2.1.29.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.faces/jsf-api@2.1.29.1.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jboss.spec.javax.faces/jboss-jsf-api_2.1_spec@2.1.29.1.Final",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.jboss.org",
      "licenseDeclared": "CDDL-1.1 or GPLv2 with exceptions",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "JavaServer Faces 2.1 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.29.1-2.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-beanutils-1.9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-digester-2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-logging-1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-commons-chain-1.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jboss-jsf-2.1-api-2.1.29.1"
    }
  ]
}
