{ "SPDXID": "SPDXRef-DOCUMENT", "name": "maven-gpg-plugin-0.1.6-2.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/maven-gpg-plugin-0.1.6-2.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-maven-gpg-plugin-1.6", "name": "maven-gpg-plugin", "licenseConcluded": "Apache-2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "eef3494b3d1ec5eef847b05088a266705cd9e6568ab055a409154c59fca69181" } ], "description": "This plugin signs all of the project's attached artifacts with\nGnuPG. It adds goals gpg:sign and gpg:sign-and-deploy-file.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-gpg-plugin@1.6-2.oe2403sp4?arch=noarch&epoch=0&upstream=maven-gpg-plugin-1.6-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.plugins/maven-gpg-plugin@1.6", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/plugins/maven-gpg-plugin/", "licenseDeclared": "Apache-2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Maven GPG Plugin", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.6-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-gnupg2-2.4.3", "name": "gnupg2", "licenseConcluded": "GPLv3+", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9afb6deb255109f3791880a9fa423486e26af0d9d58515992119ee44f0ea7e6f" } ], "description": "GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP). GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/gnupg2@2.4.3-15.oe2403sp4?arch=x86_64&epoch=0&upstream=gnupg2-2.4.3-15.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://gnupg.org/", "licenseDeclared": "GPLv3+", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Utility for secure communication and data storage", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.4.3-15.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3", "name": "maven-lib", "licenseConcluded": "ASL 2.0 and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "83ac72e787370bbd08258b2d2fd9aca31196e0d3f0b2ae303863d01ca85a5b35" } ], "description": "Core part of Apache Maven that can be used as a library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp4?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/", "licenseDeclared": "ASL 2.0 and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Core part of Maven", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:3.6.3-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-sec-dispatcher-1.4", "name": "plexus-sec-dispatcher", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "91da16a89db4975f723e9e92a7285f49abc89f470eb7d786ec817f9a106c8a6e" } ], "description": "Plexus Security Dispatcher Component.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-sec-dispatcher@1.4-26.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-sec-dispatcher-1.4-26.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/EuroLinux/els-tests-plexus-sec-dispatcher", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Plexus Security Dispatcher Component", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.4-26.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0", "name": "plexus-utils", "licenseConcluded": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "checksums": [ { "algorithm": "SHA256", "checksumValue": "fbe15a899bf8ea3d66acb12fb3dda56853937fa5ce952d1edea4a44ccaa26c25" } ], "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://codehaus-plexus.github.io/plexus-utils/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and xpp and BSD and Public Domain", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Plexus Common Utilities", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.0-1.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-gnupg2-2.4.3" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-sec-dispatcher-1.4" }, { "spdxElementId": "SPDXRef-rpm-maven-gpg-plugin-1.6", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0" } ] }