{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "openwebbeans-osgi-0.1.2.8-2.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T02:24:06.585354077Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/openwebbeans-osgi-0.1.2.8-2.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "name": "openwebbeans-osgi",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b3f0b906cda481f913e8586ab6dcd49439e7d0d6c54250b4c567dace6fefc163"
        }
      ],
      "description": "Apache OpenWebBeans OSGi ClassLoader scanning support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openwebbeans-osgi@1.2.8-2.oe2403sp4?arch=noarch&epoch=0&upstream=openwebbeans-1.2.8-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openwebbeans/openwebbeans-osgi@1.2.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openwebbeans.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Apache OpenWebBeans OSGi plugin",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.8-2.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glassfish-servlet-api-3.1.0",
      "name": "glassfish-servlet-api",
      "licenseConcluded": "(CDDL-1.1 OR GPL-2.0-with-classpath-exception) AND Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "defa64eb4e62726ee9fd595e8fa1621b5d5ccf0cbb56cb3ab57d96cb9b8a36b8"
        }
      ],
      "description": "Java Servlets is a JCP Standard technology for interacting with the web on the Java EE platform.\nIt is the foundation web specification in the Java Enterprise Platform. Developers can build web\napplications using the Servlet API to interact with the request/response workflow.\nThis package provides some classes and interfaces which define and describe the contracts between\na servlet class and the runtime environment provided for an instance of such a class.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glassfish-servlet-api@3.1.0-17.oe2403sp4?arch=noarch&epoch=0&upstream=glassfish-servlet-api-3.1.0-17.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/servlet-api@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.geronimo.specs/geronimo-servlet_3.0_spec@3.1.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.1.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://servlet-spec.java.net",
      "licenseDeclared": "(CDDL-1.1 OR GPL-2.0-with-classpath-exception) AND Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "API of Java Servlet",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.1.0-17.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-jakarta-servlet-5.0.0",
      "name": "jakarta-servlet",
      "licenseConcluded": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "30c21678ee79d7be887c7ce3db3bbbcd948ac94773cf33457d3746229c3faab8"
        }
      ],
      "description": "Jakarta Servlet defines a server-side API for handling HTTP requests\nand responses.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jakarta-servlet@5.0.0-4.oe2403sp4?arch=noarch&epoch=0&upstream=jakarta-servlet-5.0.0-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/javax.servlet-api@5.0.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/javax.servlet/servlet-api@5.0.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/eclipse-ee4j/servlet-api",
      "licenseDeclared": "(EPL-2.0 or GPLv2 with exceptions) and ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Server-side API for handling HTTP requests and responses",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.0.0-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8bb120b1fe59ec1592f387311f713f6977802b1320b550fc3990639d22908b51"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.492.b09-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.492.b09-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/bf80985d4e69eb345aafc994a4ca98d2569d4499@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/261d25b88058f36ca8ffa4b1f639256400f5cbc5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8abc1ab4d87c6b86932e4126b8503a51e66f430d@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/915b56c52a40aada0d4ef6a891e2076e6365a547@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1344aad845719066f5b81d6bf32346b7a82f2805@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/52706d3bda84e3d9dc362423e827e86475501b87@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1bb937e222df420d2f5998d6d2edc6c7e942ff0b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ab01bc70c8102a67a1c6b4c1f3a6d90185714d02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/032f7595bb11d399d6b73ff9354ab86297686d3a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b9b867f5c7af855fa96e5bd6773ea6e1f6574077@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/899e7bfdcd9247bc9bcf700ae7682a8f4031fd9e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/442282af89885e35684d1e24bebec57da2d6b582@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/616b886a2842b1c1fe3a9b38ab1f227856b163e5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/676cd769174b8c76eb21002474191622050ecaa3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ff9b81b37c5311071b4f2702cedaee656373d052@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36aacd83f295f6691aec1c404cbc7e9d369a1524@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.492.b09-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d9803d3ac947e264604be4affa18d14acf66e283a53a8ee59013c0d3bf7c9a84"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.31.11-5.oe2403sp4?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.31.11-5.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a1144927e216a3569496c8b433eab057ec8f4260@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.31.11-5.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "licenseConcluded": "BSD-3-Clause",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b0602168d8cd531fcd8a501d349126e4595ef417e87af5710200e5cd40d4b31b"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp4?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "licenseDeclared": "BSD-3-Clause",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-openwebbeans-impl-1.2.8",
      "name": "openwebbeans-impl",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4146907d7510fbafc26c2879cb7839b507c47833dae4389bf757696c3c5b6c95"
        }
      ],
      "description": "Apache OpenWebBeans Implementation core module.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openwebbeans-impl@1.2.8-2.oe2403sp4?arch=noarch&epoch=0&upstream=openwebbeans-1.2.8-2.oe2403sp4.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.openwebbeans/openwebbeans-impl@1.2.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openwebbeans.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2",
      "summary": "Apache OpenWebBeans Core",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.8-2.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glassfish-servlet-api-3.1.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jakarta-servlet-5.0.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.492.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.31.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-openwebbeans-osgi-1.2.8",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openwebbeans-impl-1.2.8"
    }
  ]
}
