{ "SPDXID": "SPDXRef-DOCUMENT", "name": "maven-jarsigner-plugin-0.1.4-1.oe2403sp4.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-07-04T02:24:06.585354077Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/maven-jarsigner-plugin-0.1.4-1.oe2403sp4.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "name": "maven-jarsigner-plugin", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ea9f2c1e6651fa916e79eab71c9794e15422114faec80ed39e122ed7cbf6e660" } ], "description": "This plugin provides the capability to sign or verify\na project artifact and attachments using jarsigner.\nIf you need to sign a project artifact and all attached artifacts,\njust configure the sign goal appropriately in your pom.xml\nfor the signing to occur automatically during the package phase.\nIf you need to verify the signatures of a project artifact\nand all attached artifacts, just configure the verify goal\nappropriately in your pom.xml for the verification to occur\nautomatically during the verify phase.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-jarsigner-plugin@1.4-1.oe2403sp4?arch=noarch&epoch=0&upstream=maven-jarsigner-plugin-1.4-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.plugins/maven-jarsigner-plugin@1.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/plugins/maven-jarsigner-plugin/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Signs or verifies a project artifact and attachments using jarsigner", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.4-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09", "name": "java-1.8.0-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11", "name": "java-11-openjdk-headless", "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.31.11-5.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "licenseConcluded": "BSD-3-Clause", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "licenseDeclared": "BSD-3-Clause", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-artifact-2.2.1", "name": "maven-artifact", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "8fb62dcbef9bc64703c2c754f3a3d9f8d5705c0f7868c1c16798f7f93971a1b0" } ], "description": "Compatibility Maven artifact manager artifact", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-artifact@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.8", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.2.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.6", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.7", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Maven artifact artifact", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.2.1-60.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3", "name": "maven-lib", "licenseConcluded": "ASL 2.0 and MIT", "checksums": [ { "algorithm": "SHA256", "checksumValue": "83ac72e787370bbd08258b2d2fd9aca31196e0d3f0b2ae303863d01ca85a5b35" } ], "description": "Core part of Apache Maven that can be used as a library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403sp4?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/", "licenseDeclared": "ASL 2.0 and MIT", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Core part of Maven", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:3.6.3-2.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-project-2.2.1", "name": "maven-project", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "d1038b503f4367a66d0bf757683827c0b2d5c4fd4309496530cb59af3218e830" } ], "description": "Compatibility Maven project artifact", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403sp4?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Maven project artifact", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.2.1-60.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-shared-jarsigner-1.3.2", "name": "maven-shared-jarsigner", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "20486ac12f57d9803c37fd398adee45a043e77a37c694dc3a8d4bb9be61cf16f" } ], "description": "Apache Maven Jarsigner is a component which provides utilities to sign\nand verify Java archive and other files in your Maven MOJOs.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-shared-jarsigner@1.3.2-1.oe2403sp4?arch=noarch&epoch=0&upstream=maven-shared-jarsigner-1.3.2-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-jarsigner@1.3.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://maven.apache.org/shared/maven-jarsigner/", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Component to assist in signing Java archives", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.3.2-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-maven-shared-utils-3.3.3", "name": "maven-shared-utils", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9f56b5260643cf374f208072eff8fd9b36e7299e0680b2ad3e373296c5765ee1" } ], "description": "This package can be the functional replacement of plexus-utils in Maven.\nAt the same time, the package has many hightlights, such as: a lot of methods\ngot cleaned up, generics got added and a lot of unused code dropped.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/maven-shared-utils@3.3.3-1.oe2403sp4?arch=noarch&epoch=0&upstream=maven-shared-utils-3.3.3-1.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.3", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://maven.apache.org/shared/maven-shared-utils", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "The functional replacement of plexus-utils in maven", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.3.3-1.oe2403sp4" }, { "SPDXID": "SPDXRef-rpm-plexus-sec-dispatcher-1.4", "name": "plexus-sec-dispatcher", "licenseConcluded": "ASL 2.0", "checksums": [ { "algorithm": "SHA256", "checksumValue": "91da16a89db4975f723e9e92a7285f49abc89f470eb7d786ec817f9a106c8a6e" } ], "description": "Plexus Security Dispatcher Component.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/plexus-sec-dispatcher@1.4-26.oe2403sp4?arch=noarch&epoch=0&upstream=plexus-sec-dispatcher-1.4-26.oe2403sp4.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/EuroLinux/els-tests-plexus-sec-dispatcher", "licenseDeclared": "ASL 2.0", "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2", "summary": "Plexus Security Dispatcher Component", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:1.4-26.oe2403sp4" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-2.2.1" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-shared-jarsigner-1.3.2" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-maven-shared-utils-3.3.3" }, { "spdxElementId": "SPDXRef-rpm-maven-jarsigner-plugin-1.4", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-plexus-sec-dispatcher-1.4" } ] }