{ "SPDXID": "SPDXRef-DOCUMENT", "name": "forbidden-apis-0.2.5-1.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/forbidden-apis-0.2.5-1.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-forbidden-apis-2.5", "name": "forbidden-apis", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "2e8b8673e7075a3b6a5dbfe6a0168f17b34ef98e5336065a2b13797098af9475" } ], "description": "Allows to parse Java byte code to find invocations of method/class/field\nsignatures and fail build (Apache Ant, Apache Maven, or Gradle).", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/forbidden-apis@2.5-1.oe2403sp4?arch=noarch&epoch=0&upstream=forbidden-apis-2.5-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/de.thetaphi/forbiddenapis@2.5", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/policeman-tools/forbidden-apis", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Policeman's Forbidden API Checker", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.5-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-cli-1.4", "name": "apache-commons-cli", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "f946274e97a51f4ffa841657eca64ea80d14a72103a849b5e23d82cbaf9d8ae2" } ], "description": "The Apache Commons CLI library provides an API for parsing command line\noptions passed to programs. It's also able to print help messages\ndetailing the options available for a command line tool.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-cli@1.4-7.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-cli-1.4-7.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-cli/commons-cli@1.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-cli@1.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/cli/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "CLI Library provides an API for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.4-7.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1", "name": "objectweb-asm", "licenseConcluded": "BSD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "c611eb52700bfcb10a92e76cc2903fb0a412725ed9d130d68fd9216a36028a29" } ], "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework. It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form. Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://asm.ow2.org/", "licenseDeclared": "BSD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Java bytecode manipulation and analysis framework", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:8.0.1-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0", "name": "plexus-utils", "licenseConcluded": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fbe15a899bf8ea3d66acb12fb3dda56853937fa5ce952d1edea4a44ccaa26c25" } ], "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://codehaus-plexus.github.io/plexus-utils/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Plexus Common Utilities", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.0-1.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-cli-1.4" }, { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1" }, { "spdxElementId": "SPDXRef-rpm-forbidden-apis-2.5", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0" } ] }