{ "SPDXID": "SPDXRef-DOCUMENT", "name": "protobuf-java-util-0.25.1-3.oe2403.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-05-15T06:57:53.750891916Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/protobuf-java-util-0.25.1-3.oe2403.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-google-gson-2.8.2", "name": "google-gson", "checksums": [ { "algorithm": "SHA256", "checksumValue": "aff4970ff099420e3167f5996d47b7b1e229017812fc1a6b6910101d787347b7" } ], "description": "Gson is a Java library that can be used to convert a Java object into its JSON representation.\nIt can also be used to convert a JSON string into an equivalent Java object. Gson can work with\narbitrary Java objects including pre-existing objects that you do not have source-code of.\nThere are a few open-source projects that can convert Java objects to JSON. However, most of them\nrequire that you place Java annotations in your classes; something that you can not do if you do\nnot have access to the source-code. Most also do not fully support the use of Java Generics.\nGson considers both of these as very important design goals.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/google-gson@2.8.2-4.oe2403?arch=noarch&epoch=0&upstream=google-gson-2.8.2-4.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.gson/gson@2.8.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/gson", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "A Java library that can be used to convert Java Objects into their JSON representation", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.8.2-4.oe2403" }, { "SPDXID": "SPDXRef-rpm-guava-31.1", "name": "guava", "checksums": [ { "algorithm": "SHA256", "checksumValue": "e74b7448ac12e1ecb80879ed0eae5f5200b56ba870bcac0ec3b8a1d5d2164be0" } ], "description": "Guava is a set of core Java libraries from Google that includes new collection\ntypes (such as multimap and multiset), immutable collections, a graph library,\nand utilities for concurrency, I/O, hashing, caching, primitives, strings,\nand more! It is widely used on most Java projects within Google, and widely\nused by many other companies as well.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/guava@31.1-1.oe2403?arch=noarch&epoch=0&upstream=guava-31.1-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/failureaccess@1.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/guava@31.1.jre", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/guava", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "Google Core Libraries for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:31.1-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08", "name": "java-1.8.0-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "36786001cee22ae383fa2c788de4c12ac8e9ceb83cd6c7baad9fb94770d815fc" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.412.b08-5.oe2403?arch=x86_64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.412.b08-5.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e785b3f4d3f7dfb053871fa5ae246be6ced69a01@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/fcad9b670b4f84188dd5067fd4c67b10ae577c0a@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/328182722e219123a9fa1c8d7ca799eb8bcc151f@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/778b26ae64e951b15c2f09503b6965ab0a527d00@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/f2f0c09715dec9915611675ff46257cc325fe7ba@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36bd5e3a1360b03a07290e550d1e11538453ef7b@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/05c05bf242f937b8c0956609aa1248cf272f9bca@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/f6898d391d2404208609a578aba7116baa5a39c5@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/0fbd7be8ff65af2c3c11994d4f289131308aa404@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/54849b189b9146b69bcdc0b9a0f64e2f236a7792@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/40e2885aa5cd06826d780c8b015b9aabe37151cb@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/f9a15f059dcfac2963f6d0e7e9a225c6bffad29e@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/981650dbfe343d6895e2215f9a9f6ecaa8afb4c8@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/5fbbde2630d95173e4cfc69674a76b77372b9e88@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/d89b4157977118ab8c1fed73819ba6f4d22b7e36@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/61a9c15404cc6317053ebca68e5fcaa338654d09@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.412.b08-5.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9", "name": "java-11-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "5981e913827abb0564865085f2d08559b82fac8fdf2fe2aebf50c55afe80974c" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.23.9-1.oe2403?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.23.9-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/e32944edcfcf35e00c4da79f9354d8cfcc2f1188@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.23.9-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "checksums": [ { "algorithm": "SHA256", "checksumValue": "19b5d8fe4d75bc45474e0dfc3caa365ed7022792763a6a75a16b6e94d35183aa" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403" }, { "SPDXID": "SPDXRef-rpm-jsr-305-3.0.2", "name": "jsr-305", "checksums": [ { "algorithm": "SHA256", "checksumValue": "b40b5e05a94419f87f75970c15b31987d74d36266332b5d42d305ab44faed313" } ], "description": "This package contains reference implementations, test cases, and other\ndocuments for Java Specification Request 305: Annotations for Software Defect\nDetection.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jsr-305@3.0.2-1.oe2403?arch=noarch&epoch=0&upstream=jsr-305-3.0.2-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.jsr-305/ri@3.0.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://code.google.com/p/jsr-305", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "Correctness annotations for Java code", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.0.2-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-protobuf-java-25.1", "name": "protobuf-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "053396b4105b06fbe6faebffa24bd8717d816d523df31a0c2aeeaa63def3f222" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf-java@25.1-3.oe2403?arch=noarch&epoch=0&upstream=protobuf-25.1-3.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@3.25.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/protocolbuffers/protobuf", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:25.1-3.oe2403" }, { "SPDXID": "SPDXRef-rpm-protobuf2-java-2.5.0", "name": "protobuf2-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "ba4a51857b2c3b9f11c74293dbd8ff5bf22a6ce14469958dd7528f340546595d" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf2-java@2.5.0-5.oe2403?arch=x86_64&epoch=0&upstream=protobuf2-2.5.0-5.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://code.google.com/p/protobuf/", "sourceInfo": "acquired package info from repodata DB: repodata/87ee4e92c1e5173adb9dd158ec9c2e7bd500bbe68c80fdd1cfc6721bbb15534f-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.5.0-5.oe2403" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-google-gson-2.8.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-guava-31.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jsr-305-3.0.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf-java-25.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf2-java-2.5.0" } ] }