{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "aqute-bnd-0.3.5.0-11.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/aqute-bnd-0.3.5.0-11.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "name": "aqute-bnd",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f1fad8252305e1615b737b6a21ebddc44f587fc357aebbe27d875fab6989bbe0"
        }
      ],
      "description": "Bnd is the engine behind a number of popular software development tools that support OSGi.\nIt can be found in several maven plugins, ant, gradle, and of course Eclipse (bndtools).\nIt actively seeks other build tool vendors to use bnd to improve the quality of the generated\nOSGi metadata.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/aqute-bnd@3.5.0-11.oe2403sp4?arch=noarch&epoch=0&upstream=aqute-bnd-3.5.0-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/aQute.libg@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-maven-plugin@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-shared-maven-lib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-baseline-maven-plugin@3.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/bndtools/bnd/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "BND Tool",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.0-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-ant-lib-1.10.12",
      "name": "ant-lib",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a38e8fb16dbdf90c50858e5bb552f4ccd6628d1cd2470a56c0aec6b772888705"
        }
      ],
      "description": "Core part of Apache Ant that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/ant-lib@1.10.12-1.oe2403sp4?arch=noarch&epoch=0&upstream=ant-1.10.12-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/ant@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.ant/ant@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.ant/ant-bootstrap@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.ant/ant-launcher@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.ant/ant-nodeps@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/ant/ant@1.10.12",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/ant/ant-launcher@1.10.12",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://ant.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Core part of ant",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.10.12-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bash-5.2.15",
      "name": "bash",
      "licenseConcluded": "GPLv3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a980f85dfb01951730f94f5537d836d925d5e23cafc786f2e63f0087f69e1d93"
        }
      ],
      "description": "Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/bash",
      "licenseDeclared": "GPLv3",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "It is the Bourne Again Shell",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.2.15-19.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9bb4ee58cb6555f3a3ba208d602721ef0068179a530c0ddcaa95e1457dc0b1d7"
        }
      ],
      "description": "The OpenJDK runtime environment 8.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-slowdebug-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-slowdebug",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23d0e983d27b05c81cbc58f1f3b29888996a603c79aa0465d4f677e5f0b93fc8"
        }
      ],
      "description": "The OpenJDK runtime environment 8.\nThis package has full debug on. Install only in need and remove asap.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-slowdebug@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Runtime Environment 8 with full debug on",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-tools-5.3.0",
      "name": "javapackages-tools",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2b6090c9504bab6a1d080f4544ef16de313c7bbe23b7c0896a906789b7edffd1"
        }
      ],
      "description": "The javapackages-tools package contains macros and scripts to support Java packaging.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-tools@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.sun/tools@SYSTEM",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/sun.jdk/jconsole@SYSTEM",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Support for Java packaging with macros and scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-osgi-annotation-7.0.0",
      "name": "osgi-annotation",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f15a3eea56cc548288c988eda3a0467103affc3aa06d0a558eadef7c16ff88f3"
        }
      ],
      "description": "Annotations for use in compiling OSGi bundles. This package is not normally\nneeded at run-time.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/osgi-annotation@7.0.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=osgi-annotation-7.0.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.osgi/osgi.annotation@7.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.osgi/org.osgi.annotation@7.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.osgi.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Annotations for use in compiling OSGi bundles",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:7.0.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-osgi-compendium-7.0.0",
      "name": "osgi-compendium",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4a6e655a8836a33f46a4749a1edda2de3c13d5f862d43b26d11cdf57b889dea4"
        }
      ],
      "description": "OSGi Compendium, Interfaces and Classes for use in compiling bundles.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/osgi-compendium@7.0.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=osgi-compendium-7.0.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.osgi/osgi.cmpn@7.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.osgi.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Interfaces and Classes for use in compiling OSGi bundles",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:7.0.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-osgi-core-7.0.0",
      "name": "osgi-core",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bec62c7fd15742b32382b367c4d528ccf06b8e8da3a64ebeb402a269a25dfc47"
        }
      ],
      "description": "OSGi Core, Interfaces and Classes for use in compiling bundles.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/osgi-core@7.0.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=osgi-core-7.0.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.osgi/osgi.core@7.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.osgi.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OSGi Core API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:7.0.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-build-api-0.0.7",
      "name": "plexus-build-api",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "760d7246e16fe4ce77b1891225a4819eb941d4abb7c6bac367102b3ab3faa04b"
        }
      ],
      "description": "Plexus Build API",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-build-api@0.0.7-24.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-build-api-0.0.7-24.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/sonatype/sisu-build-api",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Plexus Build API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.0.7-24.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-slf4j-1.7.25",
      "name": "slf4j",
      "licenseConcluded": "MIT and ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "456cf9d3fb00b1b864db4c93b50cc9e2ac8661c8f876e065e94aa422886f4e98"
        }
      ],
      "description": "The Simple Logging Facade for Java (SLF4J) serves as a simple facade or abstraction for various\nlogging frameworks (e.g. java.util.logging, logback, log4j) allowing the end user to plug in the\ndesired logging framework at deployment time.Before you start using SLF4J, we highly recommend\nthat you read the two-page SLF4J user manual. Note that SLF4J-enabling your library implies the\naddition of only a single mandatory dependency, namely slf4j-api.jar. If no binding is found on\nthe class path, then SLF4J will default to a no-operation implementation. In case you wish to\nmigrate your Java source files to SLF4J, consider our migrator tool which can migrate your project\nto use the SLF4J API in just a few minutes. In case an externally-maintained component you depend\non uses a logging API other than SLF4J, such as commons logging, log4j or java.util.logging, have\na look at SLF4J's binary-support for legacy APIs.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/slf4j@1.7.25-8.oe2403sp4?arch=noarch&epoch=0&upstream=slf4j-1.7.25-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-api@1.7.25",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-nop@1.7.25",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.slf4j/slf4j-simple@1.7.25",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.slf4j.org/",
      "licenseDeclared": "MIT and ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Simple Logging Facade for Java(SLF4J)",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.25-8.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-ant-lib-1.10.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bash-5.2.15"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-slowdebug-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-tools-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-osgi-annotation-7.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-osgi-compendium-7.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-osgi-core-7.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-build-api-0.0.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-slf4j-1.7.25"
    }
  ]
}
