{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "apache-rat-plugin-0.0.13-2.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-15T06:57:53.750891916Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/apache-rat-plugin-0.0.13-2.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-apache-rat-core-0.13",
      "name": "apache-rat-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d98d3a841c27bcf3bbf7130146b828a42a5c702d9648dfebbd424c8ea87f59d5"
        }
      ],
      "description": "The core functionality of RAT, shared by the Ant tasks, and the Maven plugin.\nIt also includes a wrapper script \"apache-rat\" that should be the equivalent\nto running upstream's \"java -jar apache-rat.jar\".",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/apache-rat-core@0.13-2.oe2403?arch=noarch&epoch=0&upstream=apache-rat-0.13-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.rat/apache-rat-core@0.13",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://creadur.apache.org/rat/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Core functionality for apache-rat",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:0.13-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08",
      "name": "java-1.8.0-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "36786001cee22ae383fa2c788de4c12ac8e9ceb83cd6c7baad9fb94770d815fc"
        }
      ],
      "description": "The OpenJDK runtime environment 8 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.412.b08-5.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.412.b08-5.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e785b3f4d3f7dfb053871fa5ae246be6ced69a01@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/fcad9b670b4f84188dd5067fd4c67b10ae577c0a@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/328182722e219123a9fa1c8d7ca799eb8bcc151f@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/778b26ae64e951b15c2f09503b6965ab0a527d00@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/f2f0c09715dec9915611675ff46257cc325fe7ba@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/36bd5e3a1360b03a07290e550d1e11538453ef7b@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/05c05bf242f937b8c0956609aa1248cf272f9bca@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/f6898d391d2404208609a578aba7116baa5a39c5@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/0fbd7be8ff65af2c3c11994d4f289131308aa404@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/54849b189b9146b69bcdc0b9a0f64e2f236a7792@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/40e2885aa5cd06826d780c8b015b9aabe37151cb@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/f9a15f059dcfac2963f6d0e7e9a225c6bffad29e@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/981650dbfe343d6895e2215f9a9f6ecaa8afb4c8@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/5fbbde2630d95173e4cfc69674a76b77372b9e88@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/d89b4157977118ab8c1fed73819ba6f4d22b7e36@1.0.0",
          "referenceType": "checksum"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/61a9c15404cc6317053ebca68e5fcaa338654d09@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 8",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.8.0.412.b08-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9",
      "name": "java-11-openjdk-headless",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5981e913827abb0564865085f2d08559b82fac8fdf2fe2aebf50c55afe80974c"
        }
      ],
      "description": "The OpenJDK runtime environment 11 without audio and video support.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.23.9-1.oe2403?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.23.9-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "EXTERNAL_MANAGER",
          "referenceLocator": "pkg:maven/sha1/e32944edcfcf35e00c4da79f9354d8cfcc2f1188@1.0.0",
          "referenceType": "checksum"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://openjdk.java.net/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "OpenJDK Headless Runtime Environment 11",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:11.0.23.9-1.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0",
      "name": "javapackages-filesystem",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "19b5d8fe4d75bc45474e0dfc3caa365ed7022792763a6a75a16b6e94d35183aa"
        }
      ],
      "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/fedora-java/javapackages",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Filesystem layout for java packages",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:5.3.0-6.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-artifact-2.2.1",
      "name": "maven-artifact",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b8ed630b9ab8b5c2017bbf885f5b006bc9148029f5a590e1b8061b802dc18a37"
        }
      ],
      "description": "Compatibility Maven artifact manager artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-artifact@2.2.1-60.oe2403?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.0.8",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Maven artifact artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-artifact-manager-2.2.1",
      "name": "maven-artifact-manager",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c7809d08361eb9fa7d1fbd65ca4f80a6448f7a7499e072426543ac8412242c53"
        }
      ],
      "description": "Compatibility Maven artifact manager artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-artifact-manager@2.2.1-60.oe2403?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact-manager@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Maven artifact manager artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-doxia-core-1.7",
      "name": "maven-doxia-core",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "d84a52cef1259ef5b6c87351f15875ba7a459dfc224c95e441efd28f50ec1c10"
        }
      ],
      "description": "This package provides Core module for maven-doxia.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-doxia-core@1.7-13.oe2403?arch=noarch&epoch=0&upstream=maven-doxia-1.7-13.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-core@1.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/doxia/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Core module for maven-doxia",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7-13.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-doxia-sink-api-1.7",
      "name": "maven-doxia-sink-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9a769b72b99bf68be0ad7db7636fc0160e70622a61e2a396e38f415ce1364fb5"
        }
      ],
      "description": "This package provides Sink-api module for maven-doxia.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-doxia-sink-api@1.7-13.oe2403?arch=noarch&epoch=0&upstream=maven-doxia-1.7-13.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.7",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/doxia/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Sink-api module for maven-doxia",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7-13.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-doxia-sitetools-1.7.5",
      "name": "maven-doxia-sitetools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ab188ca720f549229751668d3b11589ea25c2cd2baf90cdfafb90b8f6a5a995d"
        }
      ],
      "description": "Doxia is a content generation framework which aims to provide its users with powerful\ntechniques for generating static and dynamic content: Doxia can be used in web-based\npublishing context to generate static sites, in addition to being incorporated into\ndynamic content generation systems like blogs, wikis and content management systems.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-doxia-sitetools@1.7.5-5.oe2403?arch=noarch&epoch=0&upstream=maven-doxia-sitetools-1.7.5-5.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-doc-renderer@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.7.5",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-doxia-tools@1.7.5",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://maven.apache.org/doxia/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Doxia content generation framework",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.7.5-5.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-lib-3.6.3",
      "name": "maven-lib",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8cec6329a4c0a1896fee6d64e49293f94badcbffac4c1f7d560ff1306532a242"
        }
      ],
      "description": "Core part of Apache Maven that can be used as a library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-lib@3.6.3-2.oe2403?arch=noarch&epoch=1&upstream=maven-3.6.3-2.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-aether-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-builder-support@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-artifact@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-core@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-embedder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-slf4j-provider@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-compat@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@3.6.3",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Core part of Maven",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.6.3-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-model-2.2.1",
      "name": "maven-model",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9b7fa1ad715fa8c18ac988993444acae60c7e933b6eff7c0c9b3f5a896500a4d"
        }
      ],
      "description": "Compatibility Maven model artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-model@2.2.1-60.oe2403?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.2.1",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.2",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.6",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.7",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-model@2.0.8",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Maven model artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-project-2.2.1",
      "name": "maven-project",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "28403430866830818e884758992202ea5c4d7b9522b43d31aa03138b8bb65a46"
        }
      ],
      "description": "Compatibility Maven project artifact",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-project@2.2.1-60.oe2403?arch=noarch&epoch=0&upstream=maven2-2.2.1-60.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven/maven-project@2.2.1",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Maven project artifact",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.2.1-60.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-maven-reporting-api-3.0",
      "name": "maven-reporting-api",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e54597173df15aaa4e68c2ea8a057f1605f262879bf2ec6026ffc5873094981e"
        }
      ],
      "description": "API to manage report generation. Maven-reporting-api is included in Maven 2.x\ncore distribution, but moved to shared components to achieve report decoupling\nfrom Maven 3 core. This is a replacement package for maven-shared-reporting-api",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/maven-reporting-api@3.0-17.oe2403?arch=noarch&epoch=0&upstream=maven-reporting-api-3.0-17.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.maven.shared/maven-reporting-api@3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://maven.apache.org/shared/maven-reporting-api",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "API to manage report generation",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.0-17.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-plexus-utils-3.3.0",
      "name": "plexus-utils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3b00302ae3aec4bde3768d90cab870123604801f7818c6b3fbb07934844e6447"
        }
      ],
      "description": "A collection of various utility classes to ease working with strings,\nfiles, command lines, XML and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/plexus-utils@3.3.0-1.oe2403?arch=noarch&epoch=0&upstream=plexus-utils-3.3.0-1.oe2403.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/plexus/plexus-utils@3.3.0",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://codehaus-plexus.github.io/plexus-utils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2",
      "summary": "Plexus Common Utilities",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.3.0-1.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-apache-rat-core-0.13"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-artifact-manager-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-doxia-core-1.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-doxia-sink-api-1.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-doxia-sitetools-1.7.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-lib-3.6.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-model-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-project-2.2.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-maven-reporting-api-3.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-apache-rat-plugin-0.13",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-plexus-utils-3.3.0"
    }
  ]
}
