{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "xmpbox-0.2.0.29-2.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-08-08T18:23:06.882101294Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/xmpbox-0.2.0.29-2.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-xmpbox-2.0.29",
      "name": "xmpbox",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1b06fdda5e822520351263343536ac71ea121b57ecaef183fc9b8adc7e8ed8e4"
        }
      ],
      "description": "The Apache XmpBox library is an open source Java tool that implements Adobe's\nXMP(TM) specification.  It can be used to parse, validate and create xmp\ncontents.  It is mainly used by subproject preflight of Apache PDFBox.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/xmpbox@2.0.29-2.oe2403?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.pdfbox/xmpbox@2.0.29",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pdfbox.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "Apache XmpBox",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.29-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "001358eecb0b376c0f0b7fce526edcb64e640c86ab9aa6dde4235d1537f73ecb"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-1.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/50f0ac245c5c7b417e0074678fbd53434f39f915@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fc66a56b26117adebc006202da6145be1b6f7308@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/602aedf96879eab47d2ace737fa2b0a701d5bc17@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a08b4735f2d6029bafb128390ed911b39dbebcf2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2e6785253ef5062ebb1c40c22286bddb2fa4cb1c@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b822f6f6657633c1701784ea5050d1e05e70e25e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/65bea0ba4910a4438f3f8f31a3fdad83589a114a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7197a4e09f7652a6a883f89e290dc355383ae04a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/006c3ee5d5100f2ae8c38b88f83464585b6da036@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b2cc796f82a8218e5c9e7080a24c2d23e3a61e73@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2b4ae24053fcc08f54b1f160db3711ece351fab6@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7bff88315c63f42f609e0ca7df4671e815ae79a9@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6425942de78dc9b2e3c56a0a5d20d2674bf89b8a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cbaafb3aca71fc6886f34a8d8f9cbe8936906b21@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d51539082b4a548d650286d66da7fb92d602207e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5e4092c39012f91caa6aa5dd269d420de49ece8e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b4cedf0c968bba2e9314a434a5cc9ac847fd530c@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.422.b05-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a9b5c902648cc5b26c5a2ae326062359cfc5e28b8030a8d16e43ef3f5092055a"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-0.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-0.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/490bf66295141b8d943db12d0f12af9706961371@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b2286ffb8347f15e1df4d77002d8c68509125a8a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/62aea7e71e3a24b626168349c8a59a131ce84c80@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/907a27ad45f6c4db51066fc9f4b7e3f6fba10358@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/4d8720351011e6055c9e37e6fcbb44572f2d3112@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5856b67f7d0167fa1fa0a55484f1c27116f07b3e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/3387a1e970bb0b4a496f3ab604c7498c656337c7@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/64ce3037d899f5f9c49d1223a47496aec83774fd@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5159dad42ec2a73fb1861bca737c1a4cd42161d9@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/06f2c86ba5b583523ee5bc6ed45b852f7c67ba28@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/be566a0785f07d3306fc5906bb1f421b8c10bd39@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/07f682050aae8e6d835dc7c44a58eb7169904a50@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b21c9e50e3b25ae82f63b4bef1701e91a3187b59@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/86c183b5d765911b3cc364ca0f602538f9a6f343@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1fdcf6892e84f7fbf9f956ff84a75f4918bc764a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/45a4177e4cb93001c3dc115f739c565bf44b6975@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/24f4136f462d9ace76fffb73f3afab2bdbd0e737@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.432.b06-0.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.452.b09",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "861ca188ce62813ab810945e64f52d01817d3a27254ff7a59dc9fe468d95ff33"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.452.b09-2.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.452.b09-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ede15ef710f416a796c39de4a1d8e8afcaf8805a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/afe3a4b3ef77efccabe7d243cea65d973356928c@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/da4954a433ae75c6ff8b923dc122bcda26ebfeaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/561a743cdaf77c20070437a1e725d7e213c691b3@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1018592a060092ea5da1aa926b2b5373722342a2@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/9b61c14c331db9d0b6f47a3e4fe4ee855d6eb9c5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d439dc4b9b702b1a5485fc1c88c68a80a062236f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7acdb980e383ea3b913618629eef412da7687096@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b30e5a6ae926e2223005c79df58c51fc14cd181f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/78a55545b4b164518823666aad8db3374d138689@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e53d486657230f57374a6c9d848aa8c0af6039be@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/f4cd45198aa288d2fba669b6b3043cc7ef7246d0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6e7cf9c35f478c162f4ef502df531b504c18583b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/779fc668da44740ec0345bb0db26ff570dc52e3f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5229964a8768dce8bb4dccfd731926f5f5a58281@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cc8c864cd9f373e191e2bbe180ccfca9c6b3e428@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/be0d503ed05af58f1cbedb0401fc98feaa2de589@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.452.b09-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.462.b08",
      "name": "java-1.8.0-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "94f440e417191034ab8169c37667a481f1b847f93d3e2729ac2e90d858c01237"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.462.b08-3.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.462.b08-3.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/06c1eb0160c4cdd4f8aa19cd07c8d1def3011c95@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/05226f0dd453013ee77a49bc0e6400b6238972c4@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/45cfe37b9504cd34a6f80e11bb46536cdec5ff21@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/cdcdebdfeb7c35d5b1d87ba379a724f378494396@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/6bda9f157f6c7223276860b8f2f45a3840fada2c@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/7b60e089015e8c932778cb84885369a84c15334f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/b8870d1ab3647177d4cb2153a5bf4302f5f7f40a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/db5feb3c06a2da75fda6a5dabe66b89ea4c979ff@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/acd3cabd79558a68780de00c364bdcac737b75ce@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/1c32608d5029ef48d221310ac4cc01675d7014d5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/81fe2c7f0dd3b6eed35b0452ac34681915f8f61c@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d66b1c5efb942b42eac5c107d7e897be50aac75e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/eb7ff04eaa9e561d73e8b6be94b569b872e4bdd0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/a5a8b7d7b458e1651470a1051379319ee1408bb0@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/f9bf2b843e418c5f86c788e9ebcb0decdbc468de@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/97754efe17b1dfcfe54dcfdc9ca7e000df410441@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/10b7421a0b4b7b76dd8615be9055dae1fd7c3cac@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.462.b08-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "0eca755801947422fe98d19dbad431463f3af3a7f20f51a5a692ead0fc3da1a6"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.24.8-1.oe2403?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/2530cda644ad4843e463e5dfe32ae9bb1b6e13eb@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.24.8-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "517eb291508cc292f84efa1a5d4e5705443a44dfd1202cf961aef296f99814e3"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d59bdf94ac4b335458c4c4ac3cd14d443f630ebf@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.25.9-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.27.6",
      "name": "java-11-openjdk-headless",
      "licenseConcluded": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "bb51259090efc55d3e4d91848f8cfac54cbfdbebc86b2406ab8cf26e7a370ec6"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.27.6-1.oe2403?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.27.6-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/c9a6e2e4a2b43c308dd17c8c15fdbb0e9919e7eb@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "licenseDeclared": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA-MD",
      "sourceInfo": "acquired package info from repodata DB: repodata/9b2ee55844e864ec17da870960e33c0b4d69092a893cd7daa8a2acffe004cc46-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.27.6-1.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.452.b09"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.462.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-xmpbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.27.6"
    }
  ]
}
