{ "SPDXID": "SPDXRef-DOCUMENT", "name": "protobuf-java-util-0.25.1-7.oe2403sp1.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-05-15T04:42:06.064967212Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/protobuf-java-util-0.25.1-7.oe2403sp1.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-google-gson-2.8.2", "name": "google-gson", "checksums": [ { "algorithm": "SHA256", "checksumValue": "be88505b6e361221b086a163f5a19bd613800e9e1ead4906581dea55ea345b46" } ], "description": "Gson is a Java library that can be used to convert a Java object into its JSON representation.\nIt can also be used to convert a JSON string into an equivalent Java object. Gson can work with\narbitrary Java objects including pre-existing objects that you do not have source-code of.\nThere are a few open-source projects that can convert Java objects to JSON. However, most of them\nrequire that you place Java annotations in your classes; something that you can not do if you do\nnot have access to the source-code. Most also do not fully support the use of Java Generics.\nGson considers both of these as very important design goals.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/google-gson@2.8.2-4.oe2403sp1?arch=noarch&epoch=0&upstream=google-gson-2.8.2-4.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.gson/gson@2.8.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/gson", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "A Java library that can be used to convert Java Objects into their JSON representation", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.8.2-4.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-guava-31.1", "name": "guava", "checksums": [ { "algorithm": "SHA256", "checksumValue": "0616a3429129f5c8661022ac501dd5d1193e3ae8c93a03d6c2d99e50c4e72a68" } ], "description": "Guava is a set of core Java libraries from Google that includes new collection\ntypes (such as multimap and multiset), immutable collections, a graph library,\nand utilities for concurrency, I/O, hashing, caching, primitives, strings,\nand more! It is widely used on most Java projects within Google, and widely\nused by many other companies as well.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/guava@31.1-1.oe2403sp1?arch=noarch&epoch=0&upstream=guava-31.1-1.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/failureaccess@1.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/guava@31.1.jre", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/guava", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "Google Core Libraries for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:31.1-1.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06", "name": "java-1.8.0-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "87109c5baf3d4c355806eae7d948532ef81719a9d4841fa6c72e88fb6258e449" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.432.b06-1.oe2403sp1?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.432.b06-1.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2454b625480c97e8f7c8f198715ee32ef46914db@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e24a4286365b68dff8fd5e89d498775dd767fb5a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7b7d9ad0e1384e94a377ab66cf57f8aca63f9c07@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/948dc91798beb7a619ed27ad4805d94119e0fd1e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7d97be660c4b5de3235b14fd9ed3cc6132744d14@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8fa375128933e2cc0bada36afe925a85660e10aa@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/90d3841a0d9b3564c70d16fd43d9622150b11bda@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/9e62062f990c5c786e3309859d72a32a6f88e9e1@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3e4d81502e567a31e69cfbe01c82753de526d691@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/db1daa292c8ca919244b50ebd6237049eec50bfb@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/7c7a646026df268833a1ceeaf7625c4177d36477@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/898b0f4556f142f13c6c9ec19ff29fdc9a0985fd@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d72820d4728998cc9ccab1798eab7c0a198428f1@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/72688f7c22f83e56431d4f633f31dc6e85be418a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/84042ca362fc1398551bb8a10c7aa0daad12a8f6@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4d1df716356a63763605c7b348b8e66c139bb133@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/648f4485731af3571c78cd3c4c6f6844020ce9ed@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.432.b06-1.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9", "name": "java-11-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "50832a0f26cd3b2041c070379900c11caf056ed36e86313379cb692ec38a95f4" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.25.9-3.oe2403sp1?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.25.9-3.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/76081ae25c7ea6082038290184b2b74a70cd522b@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.25.9-3.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "checksums": [ { "algorithm": "SHA256", "checksumValue": "12e6d89eb9dc38eb2644daa5ea21cc178d2a918353fb12c67a3a3de888ca2c55" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403sp1?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403sp1.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-jsr-305-3.0.2", "name": "jsr-305", "checksums": [ { "algorithm": "SHA256", "checksumValue": "159df9530ad242683f461de477438c8e0fd1f60aa2bd4787c747e320e2548b8c" } ], "description": "This package contains reference implementations, test cases, and other\ndocuments for Java Specification Request 305: Annotations for Software Defect\nDetection.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jsr-305@3.0.2-2.oe2403sp1?arch=noarch&epoch=0&upstream=jsr-305-3.0.2-2.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.jsr-305/ri@3.0.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://code.google.com/p/jsr-305", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "Correctness annotations for Java code", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.0.2-2.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-protobuf-java-25.1", "name": "protobuf-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "cf46f0fa43ca91e5fe32645bb2210e496275dde27287a6fcfa6c32e09ce0f458" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf-java@25.1-7.oe2403sp1?arch=noarch&epoch=0&upstream=protobuf-25.1-7.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@3.25.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/protocolbuffers/protobuf", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:25.1-7.oe2403sp1" }, { "SPDXID": "SPDXRef-rpm-protobuf2-java-2.5.0", "name": "protobuf2-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "4798a7e4f8fd959c7bc27ba6e975a40607048291f1bbe46d7895bd5648a6218e" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf2-java@2.5.0-5.oe2403sp1?arch=aarch64&epoch=0&upstream=protobuf2-2.5.0-5.oe2403sp1.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://code.google.com/p/protobuf/", "sourceInfo": "acquired package info from repodata DB: repodata/825c667db78f5378f5d2c3fed8eed9e4d49e0adefc70841b9e2e06a15d74948a-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.5.0-5.oe2403sp1" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-google-gson-2.8.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-guava-31.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.432.b06" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.25.9" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jsr-305-3.0.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf-java-25.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf2-java-2.5.0" } ] }