{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "tomcatjss-0.8.2.0-2.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-18T18:03:58.750692297Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/tomcatjss-0.8.2.0-2.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-tomcatjss-8.2.0",
      "name": "tomcatjss",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f4b92ed485e88e8bb7aa20f0ab72b5ae549172f7b470c85931d0817cd1fb0dbd"
        }
      ],
      "description": "Apache Tomcat of JSS Connector.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcatjss@8.2.0-2.oe2403?arch=noarch&epoch=0&upstream=tomcatjss-8.2.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.dogtagpki.org/wiki/TomcatJSS",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Tomcat of JSS Connector",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:8.2.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-apache-commons-lang3-3.18.0",
      "name": "apache-commons-lang3",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "78707d60e459dcbe9466e9a0173e102eed6addff2c2009e81655271355615ab3"
        }
      ],
      "description": "The standard Java libraries fail to provide enough methods for\nmanipulation of its core classes. The Commons Lang Component provides\nthese extra methods.\nLang provides a host of helper utilities for the java.lang API,\nnotably String manipulation methods, basic numerical methods, object\nreflection, concurrency, creation and serialization and System\nproperties. Additionally it contains basic enhancements to\njava.util.Date and a series of utilities dedicated to help with\nbuilding methods, such as hashCode, toString and equals.\nNote that Lang 3.0 (and subsequent versions) use a different\npackage (org.apache.commons.lang3) than the previous\nversions (org.apache.commons.lang), allowing it to be used at the same\ntime as an earlier version.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-commons-lang3@3.18.0-1.oe2403?arch=noarch&epoch=0&upstream=apache-commons-lang3-3.18.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.commons/commons-lang3@3.18.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://commons.apache.org/proper/commons-lang/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Commons Lang version 3.0",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.18.0-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-latest-openjdk-headless-23.0.1.11",
      "name": "java-latest-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5658584f413ac542f423a9d55470c37238b993a5bd69f33aa75a0fe704ca71cf"
        }
      ],
      "description": "The OpenJDK runtime environment 23 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-latest-openjdk-headless@23.0.1.11-1.oe2403?arch=x86_64&epoch=1&upstream=java-latest-openjdk-23.0.1.11-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/99ee65ddf8d977eba7c073bf7b25c93888121c93@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 23",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:23.0.1.11-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-jss-5.4.2",
      "name": "jss",
      "licenseConcluded": "MPLv1.1 or GPLv2+ or LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e76bce3302b1a5b62db80d3fc3cd0cfd392e30fc1c436881552e69033a840587"
        }
      ],
      "description": "JSS offers a implementation for java-based applications to use native NSS.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jss@5.4.2-2.oe2403?arch=x86_64&epoch=0&upstream=jss-5.4.2-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.dogtagpki.org/wiki/JSS",
      "licenseDeclared": "MPLv1.1 or GPLv2+ or LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Java Security Services",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.4.2-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-tomcat-9.0.100",
      "name": "tomcat",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a618a3ce565f016e2049f12ffe972d907081d0c913f9d96499d64849cbbc8836"
        }
      ],
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcat@9.0.100-1.oe2403?arch=noarch&epoch=1&upstream=tomcat-9.0.100-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.100",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c3fb1a71d9ae3b448669a24b9aa881618595e001@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/49902dbb1363a183cd4944a22650a014d9690854@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tomcat.apache.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:9.0.100-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-tomcat-9.0.115",
      "name": "tomcat",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3160dc9b24491328b62d7c48829d0363825176a68b896fc5c845fbb4c9224b52"
        }
      ],
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcat@9.0.115-1.oe2403?arch=noarch&epoch=1&upstream=tomcat-9.0.115-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.115",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/31574babb2bb1152176c4bdc214bfc2404274433@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/8643f0fadd99226216ff987d72b8b5b3b402b32b@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tomcat.apache.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:9.0.115-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-tomcat-9.0.117",
      "name": "tomcat",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "44ed61c1545ee3beeb9904bd136125cc022846142ac994200479cf8ba97afcfc"
        }
      ],
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcat@9.0.117-1.oe2403?arch=noarch&epoch=1&upstream=tomcat-9.0.117-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.117",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/559722d1c60a7ac3b23552f9d6099d292fe076f5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e35cf9e66c282ed7ff2a166b6607075996e436fe@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tomcat.apache.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:9.0.117-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-tomcat-9.0.118",
      "name": "tomcat",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "16358150e75e91f2f68eed31447c04ea3a6c19f0c4bb1315680fe1779a0ce14c"
        }
      ],
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcat@9.0.118-1.oe2403?arch=noarch&epoch=1&upstream=tomcat-9.0.118-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.118",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5793d02841f8a66941b3a165379e64180e8de8b5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/eecc8e275e1ce6c269ed9e610b40f75903a58e8f@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tomcat.apache.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:9.0.118-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-tomcat-9.0.96",
      "name": "tomcat",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1f1c56500d964aba859a86f01cbd971a22489774b5e7691f4c9562c4772de66c"
        }
      ],
      "description": "Tomcat is the servlet container that is used in the official Reference\nImplementation for the Java Servlet and JavaServer Pages technologies.\nThe Java Servlet and JavaServer Pages specifications are developed by\nSun under the Java Community Process.\n\nTomcat is developed in an open and participatory environment and\nreleased under the Apache Software License version 2.0. Tomcat is intended\nto be a collaboration of the best-of-breed developers from around the world.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/tomcat@9.0.96-2.oe2403?arch=noarch&epoch=1&upstream=tomcat-9.0.96-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.servlet.jsp@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.eclipse.jetty.orbit/javax.el@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.96",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0e407966b37a50853e1224f50f4970a768258c02@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/25503ed3317ac7f9d3f9fb81e2bbf0463420203b@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://tomcat.apache.org/",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/18c2be42fe2b5b288fc0e4628777cec64a6dd8c9b9c960757aa68407d41ebc3f-primary.sqlite.bz2",
      "summary": "Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:9.0.96-2.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-commons-lang3-3.18.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-latest-openjdk-headless-23.0.1.11"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jss-5.4.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.100"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.115"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.117"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.118"
    },
    {
      "spdxElementId": "SPDXRef-rpm-tomcatjss-8.2.0",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-tomcat-9.0.96"
    }
  ]
}
