{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "jython-0.2.7.1-5.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/jython-0.2.7.1-5.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-jython-2.7.1",
      "name": "jython",
      "licenseConcluded": "ASL 1.1 and BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "12af547a12fe774b86d41d8dc5a521fc41a6a37c3131673786ffea35c1bf0e89"
        }
      ],
      "description": "Jython is an implementation of the high-level, dynamic, object-oriented\nlanguage Python seamlessly integrated with the Java platform. The\npredecessor to Jython, JPython, is certified as 100% Pure Java. Jython is\nfreely available for both commercial and non-commercial use and is\ndistributed with source code. Jython is complementary to Java and is\nespecially suited for the following tasks: Embedded scripting - Java\nprogrammers can add the Jython libraries to their system to allow end\nusers to write simple or complicated scripts that add functionality to the\napplication. Interactive experimentation - Jython provides an interactive\ninterpreter that can be used to interact with Java packages or with\nrunning Java applications. This allows programmers to experiment and debug\nany Java system using Jython. Rapid application development - Python\nprograms are typically 2-10X shorter than the equivalent Java program.\nThis translates directly to increased programmer productivity. The\nseamless interaction between Python and Java allows developers to freely\nmix the two languages both during development and in shipping products.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jython@2.7.1-5.oe2403sp4?arch=noarch&epoch=0&upstream=jython-2.7.1-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.python/jython@2.7.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.python/jython-standalone@2.7.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.jython.org/",
      "licenseDeclared": "ASL 1.1 and BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A Java implementation of the Python language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.7.1-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-antlr32-java-3.2",
      "name": "antlr32-java",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "af66399d9bca851c835b5efb7477904e1bd86665db3c654fbc90633c2515ec0c"
        }
      ],
      "description": "Java run-time support for ANTLR-generated parsers.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/antlr32-java@3.2-2.oe2403sp4?arch=noarch&epoch=0&upstream=antlr32-3.2-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.antlr/antlr-runtime@3.1.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.antlr/antlr-runtime@3.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.antlr3.org/",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java run-time support for ANTLR-generated parsers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.2-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-compress-1.21",
      "name": "apache-commons-compress",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d7197aebb00b86059a06b71bbb3d30757e713fd0462233a0809bebe81cc71540"
        }
      ],
      "description": "The Apache Commons Compress library defines an API for working with\nar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.\nIn version 1.14 read-only support for Brotli decompression has been added,\nbut it has been removed from this package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-compress@1.21-1.oe2403sp4?arch=noarch&epoch=0&upstream=apache-commons-compress-1.21-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-compress/commons-compress@1.21",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons/commons-compress@1.21",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-compress/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java API for working with compressed files and archivers",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-bouncycastle-1.67",
      "name": "bouncycastle",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c1fa1ae145bdc56db903adae6ffc132294f2c4cffbb5e406d29373a5a2cd9912"
        }
      ],
      "description": "The package is organised so that it contains a light-weight API suitable for\nuse in any environment (including the newly released J2ME) with the additional\ninfrastructure to conform the algorithms to the JCE framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/bouncycastle@1.67-2.oe2403sp4?arch=noarch&epoch=0&upstream=bouncycastle-1.67-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcmail-jdk15@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcmail-jdk16@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpg-jdk16@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpkix-jdk16@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bctls-jdk16@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcmail-jdk15on@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpg-jdk15@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcprov-jdk15@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcprov-jdk16@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bctls-jdk15@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bctls-jdk15on@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpkix-jdk15@1.67",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.67",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.bouncycastle.org",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A Java implementation of cryptographic algorithms",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.67-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-guava-31.1",
      "name": "guava",
      "licenseConcluded": "ASL 2.0 and CC0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1078496996108f3c2be05400d15e8848c5abeb034320c2ddf0fac75786e302da"
        }
      ],
      "description": "Guava is a set of core Java libraries from Google that includes new collection\ntypes (such as multimap and multiset), immutable collections, a graph library,\nand utilities for concurrency, I/O, hashing, caching, primitives, strings,\nand more! It is widely used on most Java projects within Google, and widely\nused by many other companies as well.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/guava@31.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=guava-31.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/failureaccess@1.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.google.guava/guava@31.1.jre",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/google/guava",
      "licenseDeclared": "ASL 2.0 and CC0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Google Core Libraries for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:31.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-icu4j-63.2",
      "name": "icu4j",
      "licenseConcluded": "Unicode-DFS-2016 and MIT and BSD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d22642d5bd4e16e043c53da4eec4ea6d005d6fc75a5269ec0f4c2922c692cf04"
        }
      ],
      "description": "The International Components for Unicode (ICU) library provides robust and\nfull-featured Unicode services on a wide variety of platforms. ICU supports\nthe most current version of the Unicode standard, and provides support for\nsupplementary characters (needed for GB 18030 repertoire support).\nJava provides a very strong foundation for global programs, and IBM and the\nICU team played a key role in providing globalization technology into Sun's\nJava. But because of its long release schedule, Java cannot always keep\nup-to-date with evolving standards. The ICU team continues to extend Java's\nUnicode and internationalization support, focusing on improving\nperformance, keeping current with the Unicode standard, and providing\nricher APIs, while remaining as compatible as possible with the original\nJava text and internationalization API design.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/icu4j@63.2-3.oe2403sp4?arch=noarch&epoch=1&upstream=icu4j-63.2-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.ibm.icu/icu4j@63.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/unicode-org/icu/",
      "licenseDeclared": "Unicode-DFS-2016 and MIT and BSD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "International Components for Unicode for Java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:63.2-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jansi-1.17.1",
      "name": "jansi",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fb6264fca07d8e13c914f1dba53c44c958ad099f60fdd1ddcacdc76ac7fd91f8"
        }
      ],
      "description": "Jansi is a small ASl 2.0 licensed Java library that allows you to use ANSI escape sequences to format\nyour console output which works even on windows.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jansi@1.17.1-2.oe2403sp4?arch=noarch&epoch=0&upstream=jansi-1.17.1-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.fusesource.jansi/jansi@1.17.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://fusesource.github.io/jansi/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Jansi is a java library for generating and interpreting ANSI escape sequences",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.17.1-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jctools-2.1.2",
      "name": "jctools",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "37bfe4806bf381d495e7c2eed91487f68b23356f7b8e4d58ca08564425807501"
        }
      ],
      "description": "This project aims to offer some concurrent data structures\ncurrently missing from the JDK:\n° SPSC/MPSC/SPMC/MPMC Bounded lock free queues\n° SPSC/MPSC Unbounded lock free queues\n° Alternative interfaces for queues\n° Offheap concurrent ring buffer for ITC/IPC purposes\n° Single Writer Map/Set implementations\n° Low contention stats counters\n° Executor",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jctools@2.1.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=jctools-2.1.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.jctools/jctools-core@2.1.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://jctools.github.io/JCTools/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java Concurrency Tools for the JVM",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.1.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jffi-1.3.0",
      "name": "jffi",
      "licenseConcluded": "LGPL-3.0-or-later OR Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4f711c48a98915abacb8ff9c1ba60ce77c7b22c94b5ce2a6f2dde587aee69908"
        }
      ],
      "description": "An optimized Java interface to libffi.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jffi@1.3.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=jffi-1.3.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jffi@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c449e2ec0029d9fda077244ad2949a999e5c64b5@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://github.com/jnr/jffi",
      "licenseDeclared": "LGPL-3.0-or-later OR Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java Foreign Function Interface",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jffi-native-1.3.0",
      "name": "jffi-native",
      "licenseConcluded": "LGPL-3.0-or-later OR Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "99e58021319ab6deae4ef0fab57a853b2d803d0b6fe2e6a1793794b516fe4dde"
        }
      ],
      "description": "This package contains jffi JAR with native bits.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jffi-native@1.3.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=jffi-1.3.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jffi@1.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4e72fcea07f8705010e13fd1e5b9168b72749bca@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://github.com/jnr/jffi",
      "licenseDeclared": "LGPL-3.0-or-later OR Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The jffi JAR with native bits",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.3.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jline-2.14.6",
      "name": "jline",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "527d2970f60c84ed4666e5df196f907410e2f4a15d00d3912e621f405800dd10"
        }
      ],
      "description": "JLine is a Java library for handling console input. It is similar in functionality to\nBSD editline and GNU readline. People familiar with the readline/editline capabilities\nfor modern shells (such as bash and tcsh) will find most of the command editing features\nof JLine to be familiar.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jline@2.14.6-4.oe2403sp4?arch=noarch&epoch=0&upstream=jline-2.14.6-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/jline/jline@2.14.6",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jline/jline2",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java library for handling console input",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.14.6-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jnr-constants-0.10.4",
      "name": "jnr-constants",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "34021a3ffddcd0e0087fb66d798b2ba04d12abd4128a1ef3e96937bcb6a50a90"
        }
      ],
      "description": "Provides java values for common platform C constants (e.g. errno).",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jnr-constants@0.10.4-1.oe2403sp4?arch=noarch&epoch=0&upstream=jnr-constants-0.10.4-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jnr-constants@0.10.4",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jnr/jnr-constants",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java Native Runtime constants",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.10.4-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jnr-ffi-2.2.0",
      "name": "jnr-ffi",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e1c0589908a7cd38145e2f17fb6d3868e0db5e6045934e6dd7a3acdb57b16a90"
        }
      ],
      "description": "An abstracted interface to invoking native functions from java",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jnr-ffi@2.2.0-3.oe2403sp4?arch=noarch&epoch=0&upstream=jnr-ffi-2.2.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jnr-ffi@2.2.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://github.com/jnr/jnr-ffi/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java Abstracted Foreign Function Layer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jnr-netdb-1.2.0",
      "name": "jnr-netdb",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9bea050c1fbb9f5dd9c93717ea43f378621cb1048b8db4921d7c45f679d9fe4a"
        }
      ],
      "description": "jnr-netdb is a java interface to getservbyname(3), getservbyport(3)",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jnr-netdb@1.2.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=jnr-netdb-1.2.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jnr-netdb@1.2.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/jnr/jnr-netdb/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Network services database access for java",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.0-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jnr-posix-3.1.14",
      "name": "jnr-posix",
      "licenseConcluded": "CPL or GPLv2+ or LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "da0f84a59af0267c6547d238b3f5b442d10b5ba998d3cbb853ae4df17211c264"
        }
      ],
      "description": "jnr-posix is a lightweight cross-platform POSIX emulation layer for Java,\nwritten in Java and is part of the JNR project",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jnr-posix@3.1.14-1.oe2403sp4?arch=noarch&epoch=0&upstream=jnr-posix-3.1.14-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/com.github.jnr/jnr-posix@3.1.14",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://github.com/jnr/jnr-posix",
      "licenseDeclared": "CPL or GPLv2+ or LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java Posix layer",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1.14-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-netty-4.1.13",
      "name": "netty",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "06e24492cbad7f575f1c7dacc36d4c6446158dd995304fc6989bc54bb553bd24"
        }
      ],
      "description": "Netty is an asynchronous event-driven network application framework\nfor rapid development of maintainable high performance protocol servers & clients.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/netty@4.1.13-24.oe2403sp4?arch=x86_64&epoch=0&upstream=netty-4.1.13-24.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-resolver-dns@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-transport@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-xml@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-handler-proxy@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-resolver@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-stomp@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-common@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-handler@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-haproxy@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-redis@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-memcache@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-mqtt@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-socks@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-dev-tools@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-dns@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-http@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-http2@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-transport-sctp@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-all@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-buffer@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/io.netty/netty-codec-smtp@4.1.13.Final",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2a142b242457f03c7f4bad8bca2ca0536a6272cb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/dae3e2caa16bad4d590f4fd0d298384bc50a1043@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7136ef9f7e714e6da4e8de0c753bde07019c5126@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/de9d567f0bf51daea1afa26328226b9ff5858764@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/168c6a07aa7ac6436425b5c773299238108370df@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b2c87f6710a8bde386207b7ba3811271f2c30c4a@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://netty.io/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Asynchronous event-driven network application Java framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.1.13-24.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-objectweb-asm-8.0.1",
      "name": "objectweb-asm",
      "licenseConcluded": "BSD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c611eb52700bfcb10a92e76cc2903fb0a412725ed9d130d68fd9216a36028a29"
        }
      ],
      "description": "ASM is an all purpose Java bytecode manipulation and analysis\nframework.  It can be used to modify existing classes or dynamically\ngenerate classes, directly in binary form.  Provided common\ntransformations and analysis algorithms allow to easily assemble\ncustom complex transformations and code analysis tools.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/objectweb-asm@8.0.1-1.oe2403sp4?arch=noarch&epoch=0&upstream=objectweb-asm-8.0.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-all@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-analysis@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-commons@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-debug-all@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-tree@8.0.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.ow2.asm/asm-util@8.0.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://asm.ow2.org/",
      "licenseDeclared": "BSD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java bytecode manipulation and analysis framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.0.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-python-pip-wheel-23.3.1",
      "name": "python-pip-wheel",
      "licenseConcluded": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2ea2e49dfe16b3c6f5714b3166d03061c75ca0614b99a8d1c0494e53bbeb9c70"
        }
      ],
      "description": "A Python wheel of pip to use with venv",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python-pip-wheel@23.3.1-13.oe2403sp4?arch=noarch&epoch=0&upstream=python-pip-23.3.1-13.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.pip-installer.org",
      "licenseDeclared": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "The pip wheel",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:23.3.1-13.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-python-setuptools-68.0.0",
      "name": "python-setuptools",
      "licenseConcluded": "MIT and (BSD or ASL 2.0)",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b5a9045ac8f2cd554b5df6406427b62f38f1a433b8e7a31d7da4c6dd69e3d6d9"
        }
      ],
      "description": "Setuptools is a collection of enhancements to the Python distutils that allow\nyou to more easily build and distribute Python packages, especially ones that\nhave dependencies on other packages.\n\nThis package contains a python wheel of setuptools to use with venv.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/python-setuptools@68.0.0-2.oe2403sp4?arch=noarch&epoch=0&upstream=python-setuptools-68.0.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://pypi.python.org/pypi/setuptools",
      "licenseDeclared": "MIT and (BSD or ASL 2.0)",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Easily build and distribute Python packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:68.0.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-xerces-j2-2.12.2",
      "name": "xerces-j2",
      "licenseConcluded": "ASL 2.0 and W3C",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "088f5bf231b35f579834ef7bc83f5f6d9315307cb81e3ac30978fb25914c41e4"
        }
      ],
      "description": "Welcome to the future! Xerces2 is the next generation of high\nperformance, fully compliant XML parsers in the Apache Xerces family.\nThis new version of Xerces introduces the Xerces Native Interface (XNI),\na complete framework for building parser components and configurations\nthat is extremely modular and easy to program.\n\nThe Apache Xerces2 parser is the reference implementation of XNI but\nother parser components, configurations, and parsers can be written\nusing the Xerces Native Interface. For complete design and\nimplementation documents, refer to the XNI Manual.\n\nXerces 2 is a fully conforming XML Schema processor. For more\ninformation, refer to the XML Schema page.\n\nXerces 2 also provides a partial implementation of Document Object Model\nLevel 3 Core, Load and Save and Abstract Schemas [deprecated] Working\nDrafts. For more information, refer to the DOM Level 3 Implementation\npage.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xerces-j2@2.12.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=xerces-j2-2.12.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xmlParserAPIs@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/apache/xerces-j2@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xerces@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/xerces/xercesImpl@2.11.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5f29430b9cc7704fe0285fdfe9fcf81642540fe8@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://xerces.apache.org/xerces2-j/",
      "licenseDeclared": "ASL 2.0 and W3C",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Java XML parser",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.12.2-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-antlr32-java-3.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-compress-1.21"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-bouncycastle-1.67"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-guava-31.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-icu4j-63.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jansi-1.17.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jctools-2.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jffi-1.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jffi-native-1.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jline-2.14.6"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jnr-constants-0.10.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jnr-ffi-2.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jnr-netdb-1.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jnr-posix-3.1.14"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-netty-4.1.13"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-objectweb-asm-8.0.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python-pip-wheel-23.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-python-setuptools-68.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-jython-2.7.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-xerces-j2-2.12.2"
    }
  ]
}
