{ "SPDXID": "SPDXRef-DOCUMENT", "name": "json-lib-0.2.4-23.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/json-lib-0.2.4-23.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-json-lib-2.4", "name": "json-lib", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "66db59c77be08a60c327f6924900cd9698949d92e999b8b1c4261488e97a4133" } ], "description": "JSON-lib is a java library for transforming beans, maps, collections, java\narrays and XML to JSON and back again to beans and DynaBeans.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/json-lib@2.4-23.oe2403sp4?arch=noarch&epoch=0&upstream=json-lib-2.4-23.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.sf.json-lib/json-lib@2.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://json-lib.sourceforge.net/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "JSON library for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.4-23.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-beanutils-1.9.4", "name": "apache-commons-beanutils", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "3e5ed88e23db3cdeeb71e5e2e1f243c422c2b2d44dd4229fd02771628b9fb330" } ], "description": "The scope of this package is to create a package of Java utility methods\nfor accessing and modifying the properties of arbitrary JavaBeans. No\ndependencies outside of the JDK are required, so the use of this package\nis very lightweight.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-beanutils@1.9.4-4.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-beanutils-1.9.4-4.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils-bean-collections@1.9.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-beanutils/commons-beanutils-core@1.9.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils@1.9.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils-bean-collections@1.9.4", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-beanutils-core@1.9.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/beanutils", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Java utility methods for accessing and modifying the properties of arbitrary JavaBeans", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.9.4-4.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-collections-3.2.2", "name": "apache-commons-collections", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d236129723612a8a34f2c827cec54446f2e573eb1cd5f0983a5a6a6e1155c97d" } ], "description": "The Java Collections Framework was a major addition in JDK 1.2. It added many powerful\ndata structures that accelerate development of most significant Java applications.\nSince that time it has become the recognised standard for collection handling in Java.\nCommons-Collections seek to build upon the JDK classes by providing new interfaces,\nimplementations and utilities. There are many features, including:\n- Bag interface for collections that have a number of copies of each object\n- BidiMap interface for maps that can be looked up from value to key as well and key to value\n- MapIterator interface to provide simple and quick iteration over maps\n- Transforming decorators that alter each object as it is added to the collection\n- Composite collections that make multiple collections look like one\n- Ordered maps and sets that retain the order elements are added in, including an LRU based map\n- Reference map that allows keys and/or values to be garbage collected under close control\n- Many comparator implementations\n- Many iterator implementations\n- Adapter classes from array and enumerations to collections\n- Utilities to test or create typical set-theory properties of collections such as union,\n intersection, and closure", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-collections@3.2.2-11.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-collections-3.2.2-11.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-collections/commons-collections@3.2.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/collections/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "A series of new interfaces,implementations and utilities provided for Java Collections", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.2.2-11.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-lang-2.6", "name": "apache-commons-lang", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "bfee6d904640031e086cc7694e5cadf2fab3420f6a2c846924b5c7df11cd0e52" } ], "description": "The standard Java libraries fail to provide enough methods for manipulation of\nits core classes. Apache Commons Lang provides these extra methods.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-lang@2.6-24.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-lang-2.6-24.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-lang/commons-lang@2.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/lang/lang@2.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-lang@2.6", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/lang", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Provides a host of helper utilities for the java.lang API", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.6-24.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-apache-commons-logging-1.2", "name": "apache-commons-logging", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7c5ff305dd8eac6713c6dbf750e56a5fade600f58581bef818dd8a5230fdf2aa" } ], "description": "The commons-logging package provides a simple, component-oriented interface\n (org.apache.commons.logging.Log) and a wrapper for the logging system. The\nuser can choose which system to use. A few basic implementations are also\nprovided to allow users to use the package independently.\ncommons-logging was heavily influenced by Avalon's Logkit and Log4J. The\ncommons-logging abstraction is meant to minimize the differences between\nthe two, and to allow a developer to not tie himself to a particular\nlogging implementation.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/apache-commons-logging@1.2-17.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-logging-1.2-17.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging-api@1.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/apache/commons-logging-api@1.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/commons-logging/commons-logging-adapters@1.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.commons/commons-logging-api@1.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://commons.apache.org/logging", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Apache Commons Logging", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.2-17.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-ezmorph-1.0.6", "name": "ezmorph", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "da52c00a709c0170f3f89e172b2b7fc75ec50d9de7af5d101f751baeab11576a" } ], "description": "EZMorph is simple java library for transforming an Object to another\nObject.\n\nEZMorph comes with another feature: ArrayAssertions . JUnit\n3.x does not have an assertEquals() method for asserting\narray equality, and JUnit 4.x has a limited one (it only\nsupports Object[] not primitive arrays). With ArrayAssertions\nis possible to compare a boolean[] with a boolean[] or even a\nBoolean[], an those arrays can be multidimensional too.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/ezmorph@1.0.6-19.oe2403sp4?arch=noarch&epoch=0&upstream=ezmorph-1.0.6-19.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/net.sf.ezmorph/ezmorph@1.0.5", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://ezmorph.sourceforge.net/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Simple java library for transforming an Object to another Object", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.0.6-19.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-beanutils-1.9.4" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-collections-3.2.2" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang-2.6" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-apache-commons-logging-1.2" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-ezmorph-1.0.6" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-json-lib-2.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" } ] }