{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "jetty-annotations-0.9.4.16-8.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/jetty-annotations-0.9.4.16-8.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "name": "jetty-annotations",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cb345a0fd85a3a3fae6ed410ffbb06e0180b22b092bd056a174f5377fd36e5f4"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains annotations module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-annotations@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-annotations@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "annotations module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-annotation-api-1.2",
      "name": "glassfish-annotation-api",
      "licenseConcluded": "CDDL-1.1 OR GPL-2.0-with-classpath-exception",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "67c31ce785f00041833f1bfaa454c0ae289ac108fd77796ba66b78362b38c9c0"
        }
      ],
      "description": "This package is a general annotations API for the Java platform (JSR 250).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-annotation-api@1.2-17.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-annotation-api-1.2-17.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.annotation/javax.annotation-api@1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://glassfish.java.net/",
      "licenseDeclared": "CDDL-1.1 OR GPL-2.0-with-classpath-exception",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java(TM) Specification APIs",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2-17.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-plus-9.4.16",
      "name": "jetty-plus",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07ef32bb63421190bd0e501dc6afe7f358f53a8b93da9232869d663afedfd935"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains plus module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-plus@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "plus module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jetty-webapp-9.4.16",
      "name": "jetty-webapp",
      "licenseConcluded": "Apache-2.0 OR EPL-1.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c220d8803bdb5db844485dcfe2b5b58a550d27b51edeb0afb8b55f1154ce4a1d"
        }
      ],
      "description": "\nJetty is a 100% Java HTTP Server and Servlet Container. This means that you\ndo not need to configure and run a separate web server (like Apache) in order\nto use Java, servlets and JSPs to generate dynamic content. Jetty is a fully\nfeatured web server for static and dynamic content. Unlike separate\nserver/container solutions, this means that your web server and web\napplication run in the same process, without interconnection overheads\nand complications. Furthermore, as a pure java component, Jetty can be simply\nincluded in your application for demonstration, distribution or deployment.\nJetty is available on all Java supported platforms.\n\nThis package contains webapp module for Jetty.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jetty-webapp@9.4.16-8.oe2403sp4?arch=noarch&epoch=0&upstream=jetty-9.4.16-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.16.v20190411",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.eclipse.org/jetty/",
      "licenseDeclared": "Apache-2.0 OR EPL-1.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "webapp module for Jetty",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4.16-8.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1",
      "name": "objectweb-asm",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c611eb52700bfcb10a92e76cc2903fb0a412725ed9d130d68fd9216a36028a29"
        }
      ],
      "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework.  It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form.  Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://asm.ow2.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java bytecode manipulation and analysis framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.0.1-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-annotation-api-1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-plus-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jetty-webapp-9.4.16"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jetty-annotations-9.4.16",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1"
    }
  ]
}
