{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "maven-eclipse-plugin-0.2.9-1.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/maven-eclipse-plugin-0.2.9-1.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "name": "maven-eclipse-plugin",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07263c8ad15c0c555e7b057a20ab009c0a0f0dd2ab7f7ff30c2e2d9304396337"
        }
      ],
      "description": "The Eclipse Plugin is used to generate Eclipse IDE files (.project, .classpath\nand the .settings folder) from a POM.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-eclipse-plugin@2.9-1.oe2403sp4?arch=noarch&epoch=0&upstream=maven-eclipse-plugin-2.9-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.plugins/maven-eclipse-plugin@2.9",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/plugins/maven-eclipse-plugin/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven Eclipse Plugin",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.9-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-io-2.15.1",
      "name": "apache-commons-io",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "74831ed344eea21d9082ed4d58ff4bb682b01f8435719214f57ed3803f37c78b"
        }
      ],
      "description": "Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with\nutility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-io@2.15.1-1.oe2403sp4?arch=noarch&epoch=1&upstream=apache-commons-io-2.15.1-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-io@2.15.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/commons-io/commons-io@2.15.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://commons.apache.org/proper/commons-io",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "A library of utilities for developing IO functionality.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:2.15.1-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-aqute-bnd-3.5.0",
      "name": "aqute-bnd",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f1fad8252305e1615b737b6a21ebddc44f587fc357aebbe27d875fab6989bbe0"
        }
      ],
      "description": "Bnd is the engine behind a number of popular software development tools that support OSGi.\nIt can be found in several maven plugins, ant, gradle, and of course Eclipse (bndtools).\nIt actively seeks other build tool vendors to use bnd to improve the quality of the generated\nOSGi metadata.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/aqute-bnd@3.5.0-11.oe2403sp4?arch=noarch&epoch=0&upstream=aqute-bnd-3.5.0-11.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute/bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/aQute.libg@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-maven-plugin@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-shared-maven-lib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/biz.aQute.bndlib@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd@3.5.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/biz.aQute.bnd/bnd-baseline-maven-plugin@3.5.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/bndtools/bnd/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "BND Tool",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.0-11.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-archiver-3.5.2",
      "name": "maven-archiver",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "429d1757c72849ad06e62770f2eef6a1c08114b17dbd9c55a6972fb37a96d440"
        }
      ],
      "description": "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-archiver@3.5.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=maven-archiver-3.5.2-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-archiver@3.5.2",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://maven.apache.org/shared/maven-archiver/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven Archiver",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.5.2-1.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-artifact-2.2.1",
      "name": "maven-artifact",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8fb62dcbef9bc64703c2c754f3a3d9f8d5705c0f7868c1c16798f7f93971a1b0"
        }
      ],
      "description": "Compatibility Maven artifact manager artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-artifact@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.8",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.2.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven artifact artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-artifact-manager-2.2.1",
      "name": "maven-artifact-manager",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2c65947f41e14fe2cbfe1679fd91f5c5cba1c5a7c6f0c4a752b19b5a3661c9bf"
        }
      ],
      "description": "Compatibility Maven artifact manager artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-artifact-manager@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact-manager@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven artifact manager artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "licenseConcluded": "ASL 2.0 and MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "83ac72e787370bbd08258b2d2fd9aca31196e0d3f0b2ae303863d01ca85a5b35"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp4?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "licenseDeclared": "ASL 2.0 and MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-model-2.2.1",
      "name": "maven-model",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0b4d312819ab7b6b0fbe03d932a16d1e066627f5393885ef01cb109fd3b735dc"
        }
      ],
      "description": "Compatibility Maven model artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-model@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.8",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven model artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-osgi-0.2.0",
      "name": "maven-osgi",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3c7d44806fa37b0ad9943e6eab4ea465e716a0b6a9bfebdfae22b658cde7b908"
        }
      ],
      "description": "Library for Maven-OSGi integration.\nThis is a replacement package for maven-shared-osgi",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-osgi@0.2.0-3.oe2403sp4?arch=noarch&epoch=1&upstream=maven-osgi-0.2.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-osgi@0.2.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/shared/maven-osgi",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Library for Maven-OSGi integration",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:0.2.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-project-2.2.1",
      "name": "maven-project",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d1038b503f4367a66d0bf757683827c0b2d5c4fd4309496530cb59af3218e830"
        }
      ],
      "description": "Compatibility Maven project artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven project artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-settings-2.2.1",
      "name": "maven-settings",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6bd79c6e71371d28d5e68bd96ef9f5fabf8ad3b05b7fe0597f3301c52ddc37fb"
        }
      ],
      "description": "Compatibility Maven settings artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-settings@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@2.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@2.0.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@2.0.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@2.0.8",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Maven settings artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-wagon-provider-api-3.1.0",
      "name": "maven-wagon-provider-api",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d583d5186fdf40fd5488b10af6e5549975067515c600e50fd81f29e1b3564527"
        }
      ],
      "description": "the maven-wagon provider-api module.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-wagon-provider-api@3.1.0-3.oe2403sp4?arch=noarch&epoch=0&upstream=maven-wagon-3.1.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.1.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/wagon",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "the maven-wagon provider-api module",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-archiver-4.2.7",
      "name": "plexus-archiver",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "824b6c565649130d8261c5c4fdc96fba37ffbd1e87a36bfbd5036147be40bab2"
        }
      ],
      "description": "The Plexus project provides a full software stack for creating and executing\nsoftware projects. It provides a number of pre-built components for common\ntasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more.\nHowever, Plexus is also able to reuse your existing components written for\nother IoC frameworks such as Spring, Avalon and Pico Container unmodified,\nas well as allowing you to reuse your existing code inside the Plexus\nContainer.\n\nPlexus comes with an application server that can run your applications, making\nit trivial to build a standalone executable distribution with common features\nsuch as service execution if needed. However, Plexus applications can be run\nin any environment by embedding the container in an existing application,\nincluding Java EE applications or web applications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-archiver@4.2.7-2.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-archiver-4.2.7-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-archiver@4.2.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://codehaus-plexus.github.io/plexus-archiver",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Plexus Archiver Components",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:4.2.7-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-interactivity-1.0",
      "name": "plexus-interactivity",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fbfb8062abb5adbb279bb737a125d7d302055a62d0e5a19c3d23d86bb53d85e9"
        }
      ],
      "description": "The Plexus project provides a full software stack for creating and executing\nsoftware projects. It provides a number of pre-built components for common\ntasks and toolkits such as Jetty, Velocity, Hibernate, i18n, and many more.\nHowever, Plexus is also able to reuse your existing components written for\nother IoC frameworks such as Spring, Avalon and Pico Container unmodified,\nas well as allowing you to reuse your existing code inside the Plexus\nContainer.\n\nPlexus comes with an application server that can run your applications, making\nit trivial to build a standalone executable distribution with common features\nsuch as service execution if needed. However, Plexus applications can be run\nin any environment by embedding the container in an existing application,\nincluding Java EE applications or web applications.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-interactivity@1.0-2.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-interactivity-1.0-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.0.alpha.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-interactivity-jline@1.0.alpha.6",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/codehaus-plexus/plexus-interactivity",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Plexus Interactivity Handler Component",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-resources-1.0",
      "name": "plexus-resources",
      "licenseConcluded": "MIT",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4d7a94b506b473cc79fc57a58bc2df5c2f50860ce36a8351d68f11ff4dce9caa"
        }
      ],
      "description": "The Plexus project aspire to create end-to-end  tools for\nwriting applications. the container is the core which can be\nembedded or for a full scale application server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-resources@1.0-0.25.a7.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-resources-1.0-0.25.a7.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-resources@1.0.alpha.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/codehaus-plexus/plexus-resources",
      "licenseDeclared": "MIT",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Plexus Resource Manager",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.0-0.25.a7.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fbe15a899bf8ea3d66acb12fb3dda56853937fa5ce952d1edea4a44ccaa26c25"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-io-2.15.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-aqute-bnd-3.5.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-archiver-3.5.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-manager-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-model-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-osgi-0.2.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-settings-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-wagon-provider-api-3.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-archiver-4.2.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-interactivity-1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-resources-1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-maven-eclipse-plugin-2.9",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    }
  ]
}
