{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"jetty-distribution-remote-resources-0.1.2-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/jetty-distribution-remote-resources-0.1.2-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-1237dc95-e41b-46ca-b159-d307cbe31790",
			"name":"java-1.8.0-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"238c33c2cf9c8944e7474a1b663b60bbd5c3bd90cf2ecf67b3a54f331222d3e1"
				}
			],
			"description":"The OpenJDK runtime environment 8 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.422.b05-11.oe2409?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.422.b05-11.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/464edcf54fb9bc738bfbfd103b19e56688ae3bb9@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/57f78a36865d4ffa59d4fdadecbd2a766923b1f6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7216e2d47233eb2c8ab28bb83a974053b8cc1115@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/58f94364d8bfd787b7f423688c68b142a4a500d5@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/e3adac5641089c6f459393d61ec9cee754a9d134@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/df320d5d773300d68ea3beb0b7c0c5fe34fe5722@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7358a98231c26d5c4d1d80cf78c1b3df35e8614d@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6fb1b9c54847eea4994ced249f94a7f6577e6fc2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/f46f88dd1c883eb06d6b8d3c272af151b9abc7c2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/2bcb4fcce95793b4354f116504c0b4c6eaf359d6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/ba8327b4aaa6899f07204298b551b134dfa3ceaf@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/04f8a293b79ab8209dc126f00e662f3492669d93@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/90a759a645a0a72cd8d7c5efe3c9050221d9a654@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/1f794a0ee8ade9c871012eefcd84c02ab4b2634b@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/92fc571df55d2324a5cd80d03174a70a7ce071e6@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/0700c49a5eeb3a904f6a8e8766c50216b6586b0e@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/4a2cf42ee3a25dba7f4989a11211265ed9e4ded2@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6458a295b1a93a74e978c697b8f526d07bef55bd@1.0.0",
					"referenceType":"checksum"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/7fa120055e1616faacce8fe7dc51c6149615d33f@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 8",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.8.0.422.b05-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-c927dc82-42b6-40f6-9d39-c7d0f80f5a18",
			"name":"java-11-openjdk-headless",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"147d2515d12f73bb328868c3844e2204d0ce350b7c92b2715d479f31316f4cc0"
				}
			],
			"description":"The OpenJDK runtime environment 11 without audio and video support.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/java-11-openjdk-headless@11.0.24.8-3.oe2409?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.8-3.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"EXTERNAL_MANAGER",
					"referenceLocator":"pkg:maven/sha1/6bf0d25629f53e7833a5d1f54f101d661d5d7add@1.0.0",
					"referenceType":"checksum"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://openjdk.java.net/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"OpenJDK Headless Runtime Environment 11",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:11.0.24.8-3.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-56c69be2-64a8-42a0-9f7b-9ba6a99e8397",
			"name":"javapackages-filesystem",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"7b018eb5902898b1d9f5ad3ed162751f290ada0b22c0aa799fe41bbd0bc61887"
				}
			],
			"description":"The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-filesystem@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Filesystem layout for java packages",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-18d660e9-0941-4c8f-bd0d-354d484bb569",
			"name":"javapackages-tools",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d4ca83a58ceeb3acaa84e93fd12bcef39e7030e4208aee369486ac5eb226fc48"
				}
			],
			"description":"The javapackages-tools package contains macros and scripts to support Java packaging.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/javapackages-tools@5.3.0-6.oe2409?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/com.sun/tools@SYSTEM",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/sun.jdk/jconsole@SYSTEM",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/fedora-java/javapackages",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Support for Java packaging with macros and scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.3.0-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-jetty-toolchain-1.7-cb40e327-bbfa-443e-ac58-131ae6762793-d1968e56-1c1d-4b2c-a772-514117b43eea",
			"name":"jetty-toolchain",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"192efa6b5c2b0dfe89129616d9c67b4958b87ec5f0c56db04a91aec7493de9a9"
				}
			],
			"description":"Jetty Toolchain main POM file",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/jetty-toolchain@1.7-1.oe2409?arch=noarch&epoch=0&upstream=jetty-toolchain-1.7-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.eclipse.org/jetty/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Jetty Toolchain main POM file",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.7-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-maven-3.6.3-20a63b12-c8db-4de3-a28e-079199c8667b-8bc57800-8c72-4125-81f7-43540edeedf8",
			"name":"maven",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"d403954e7e9ea60e67d3afb34232e52b1664892b33f064da845410df86dfe5fb"
				}
			],
			"description":"Maven is a software project management and comprehension tool. Based on the\nconcept of a project object model (POM), Maven can manage a project's build,\nreporting and documentation from a central piece of information.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/maven@3.6.3-2.oe2409?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://maven.apache.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Java project management and project comprehension tool",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:3.6.3-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-maven-remote-resources-plugin-1.5-9d87293c-67df-4cb8-b552-e96674c11b83-c81e9467-4f23-4843-88ca-328614b89384",
			"name":"maven-remote-resources-plugin",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"bddfa9295065c41e590525c31d59f6d23d5262df0797ce29a4346078a9e51a69"
				}
			],
			"description":"This plugin is used to retrieve JARs of resources from remote repositories, process those resources, and incorporate them\ninto JARs you build with Maven.\n\nA very common use-case is the need to package certain resources in a consistent way across your organization. For example\nat Apache, it is required that every JAR produced contains a copy of the Apache license and a notice file that references\nall used software in a given project.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/maven-remote-resources-plugin@1.5-5.oe2409?arch=noarch&epoch=0&upstream=maven-remote-resources-plugin-1.5-5.oe2409.src.rpm",
					"referenceType":"purl"
				},
				{
					"referenceCategory":"PROVIDE_MANAGER",
					"referenceLocator":"pkg:maven/org.apache.maven.plugins/maven-remote-resources-plugin@1.5",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://maven.apache.org/plugins/maven-remote-resources-plugin/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Maven Remote Resources Plugin",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.5-5.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.422.b05-b3e22705-9873-4147-92e9-6a18387dfca8-1237dc95-e41b-46ca-b159-d307cbe31790"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-java-11-openjdk-headless-11.0.24.8-58fb7383-2c8d-4bef-a962-a75fe448445b-c927dc82-42b6-40f6-9d39-c7d0f80f5a18"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-filesystem-5.3.0-d9e61db9-5d27-47b1-9bc3-2684b053576e-56c69be2-64a8-42a0-9f7b-9ba6a99e8397"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-javapackages-tools-5.3.0-c33a8900-3133-4b9a-9731-6036c8ab4040-18d660e9-0941-4c8f-bd0d-354d484bb569"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-jetty-toolchain-1.7-cb40e327-bbfa-443e-ac58-131ae6762793-d1968e56-1c1d-4b2c-a772-514117b43eea"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-maven-3.6.3-20a63b12-c8db-4de3-a28e-079199c8667b-8bc57800-8c72-4125-81f7-43540edeedf8"
		},
		{
			"spdxElementId":"SPDXRef-rpm-jetty-distribution-remote-resources-1.2-0e6ee3bc-a7de-4bba-a054-6ed3f9bfdc6b",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-maven-remote-resources-plugin-1.5-9d87293c-67df-4cb8-b552-e96674c11b83-c81e9467-4f23-4843-88ca-328614b89384"
		}
	]
}