Added:
websites/production/commons/content/proper/commons-vfs/commons-vfs2-hdfs/org.apache.commons_commons-vfs2-hdfs-2.10.0.spdx.json
==============================================================================
---
websites/production/commons/content/proper/commons-vfs/commons-vfs2-hdfs/org.apache.commons_commons-vfs2-hdfs-2.10.0.spdx.json
(added)
+++
websites/production/commons/content/proper/commons-vfs/commons-vfs2-hdfs/org.apache.commons_commons-vfs2-hdfs-2.10.0.spdx.json
Fri Feb 14 14:54:09 2025
@@ -0,0 +1,3422 @@
+{
+ "SPDXID" : "SPDXRef-DOCUMENT",
+ "spdxVersion" : "SPDX-2.3",
+ "creationInfo" : {
+ "created" : "2025-02-14T14:50:16Z",
+ "creators" : [ "Tool: spdx-maven-plugin" ],
+ "licenseListVersion" : "3.26.0"
+ },
+ "name" : "Apache Commons VFS HDFS",
+ "dataLicense" : "CC0-1.0",
+ "documentNamespace" :
"http://spdx.org/spdxpackages/org.apache.commons_commons-vfs2-hdfs-2.10.0";,
+ "packages" : [ {
+ "SPDXID" : "SPDXRef-gnrtd0",
+ "checksums" : [ {
+ "algorithm" : "SHA1",
+ "checksumValue" : "657164da4acbc2d4cc8ad4bed87e5a7205605684"
+ } ],
+ "copyrightText" : "NOASSERTION",
+ "description" : "Apache Commons VFS is a Virtual File System library -
Apache Hadoop HDFS provider.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : true,
+ "homepage" :
"https://commons.apache.org/proper/commons-vfs/commons-vfs2-hdfs/";,
+ "licenseConcluded" : "Apache-2.0",
+ "licenseDeclared" : "Apache-2.0",
+ "licenseInfoFromFiles" : [ "NOASSERTION" ],
+ "name" : "Apache Commons VFS HDFS",
+ "originator" : "Organization:The Apache Software Foundation",
+ "packageFileName" : "commons-vfs2-hdfs-2.10.0.jar",
+ "packageVerificationCode" : {
+ "packageVerificationCodeValue" :
"e7466c678f2b62658791566340a4d9daa4b64266"
+ },
+ "primaryPackagePurpose" : "LIBRARY",
+ "summary" : "Apache Commons VFS is a Virtual File System library - Apache
Hadoop HDFS provider.",
+ "supplier" : "Organization: The Apache Software Foundation",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd13",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons VFS is a Virtual File System library.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-vfs/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons VFS",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons VFS is a Virtual File System library.",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd14",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Logging is a thin adapter allowing
configurable bridging to other,\n well-known logging systems.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-logging/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-logging/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Logging",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Logging is a thin adapter allowing
configurable bridging to other,\n well-known logging systems.",
+ "versionInfo" : "1.3.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd15",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Lang, a package of Java utility classes
for the\n classes that are in java.lang's hierarchy, or are considered to be
so\n standard as to justify existence in java.lang.\n\n The code is tested
using the latest revision of the JDK for supported\n LTS releases: 8, 11, 17
and 21 currently.\n See
https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\n
\n Please ensure your build environment is up-to-date and kindly report any
build issues.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-lang/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Lang",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Lang, a package of Java utility classes for
the\n classes that are in java.lang's hierarchy, or are considered to be so\n
standard as to justify existence in java.lang.\n\n The code is tested using
the latest revision of the JDK for supported\n LTS releases: 8, 11, 17 and 21
currently.\n See
https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\n
\n Please ensure your build environment is up-to-date and kindly report any
build issues.",
+ "versionInfo" : "3.17.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd16",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons IO library contains utility classes,
stream implementations, file filters,\nfile comparators, endian transformation
classes, and much more.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-io/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-io/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons IO",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons IO library contains utility classes,
stream implementations, file filters,\nfile comparators, endian transformation
classes, and much more.",
+ "versionInfo" : "2.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd17",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop HDFS Client",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop HDFS Client",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop HDFS Client",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd18",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache HttpComponents Client",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.httpcomponents/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://hc.apache.org/httpcomponents-client-ga";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache HttpClient",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache HttpComponents Client",
+ "versionInfo" : "4.5.14"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd19",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache HttpComponents Core (blocking I/O)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.httpcomponents/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://hc.apache.org/httpcomponents-core-ga";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache HttpCore",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache HttpComponents Core (blocking I/O)",
+ "versionInfo" : "4.4.13"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd20",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Core annotations used for value types, used by Jackson
data binding package.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.fasterxml.jackson.core/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://github.com/FasterXML/jackson";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackson-annotations",
+ "originator" : "Organization:FasterXML",
+ "summary" : "Core annotations used for value types, used by Jackson data
binding package.",
+ "versionInfo" : "2.12.7"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd21",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "General data-binding functionality for Jackson: works on
core streaming API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.fasterxml.jackson.core/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://github.com/FasterXML/jackson";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "jackson-databind",
+ "originator" : "Organization:FasterXML",
+ "summary" : "General data-binding functionality for Jackson: works on core
streaming API",
+ "versionInfo" : "2.12.7.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd22",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Core Jackson processing abstractions (aka Streaming API),
implementation for JSON",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.fasterxml.jackson.core/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/FasterXML/jackson-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackson-core",
+ "originator" : "Organization:FasterXML",
+ "summary" : "Core Jackson processing abstractions (aka Streaming API),
implementation for JSON",
+ "versionInfo" : "2.12.7"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd23",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop Common",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop Common",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop Common",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd24",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop HDFS",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop HDFS",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop HDFS",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd25",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "SLF4J 2 provider (binding) for the Apache Log4j API.\n
It forwards SLF4J 2 calls to the Log4j API.\n This effectively allows using
Log4j as an implementation of SLF4J 2.\n (Refer to the `log4j-to-slf4j`
artifact for forwarding the Log4j API to SLF4J.)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "SLF4J 2 Provider for Log4j API",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "SLF4J 2 provider (binding) for the Apache Log4j API.\n It
forwards SLF4J 2 calls to the Log4j API.\n This effectively allows using
Log4j as an implementation of SLF4J 2.\n (Refer to the `log4j-to-slf4j`
artifact for forwarding the Log4j API to SLF4J.)",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd26",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The logging API of the Log4j project.\n Library and
application code can log through this API.\n It contains a simple built-in
implementation (`SimpleLogger`) for trivial use cases.\n Production
applications are recommended to use Log4j API in combination with a
fully-fledged implementation, such as Log4j Core.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Log4j API",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The logging API of the Log4j project.\n Library and
application code can log through this API.\n It contains a simple built-in
implementation (`SimpleLogger`) for trivial use cases.\n Production
applications are recommended to use Log4j API in combination with a
fully-fledged implementation, such as Log4j Core.",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd27",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The slf4j API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.slf4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.slf4j.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "MIT",
+ "name" : "SLF4J API Module",
+ "originator" : "Organization:QOS.ch",
+ "summary" : "The slf4j API",
+ "versionInfo" : "2.0.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd28",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons VFS is a Virtual File System library.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-vfs/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons VFS",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons VFS is a Virtual File System library.",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd29",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-jupiter-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.jupiter/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Jupiter Engine",
+ "summary" : "Module \"junit-jupiter-engine\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd30",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-platform-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.platform/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Platform Engine API",
+ "summary" : "Module \"junit-platform-engine\" of JUnit 5.",
+ "versionInfo" : "1.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd31",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Open Test Alliance for the JVM",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.opentest4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/ota4j-team/opentest4j";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "org.opentest4j:opentest4j",
+ "summary" : "Open Test Alliance for the JVM",
+ "versionInfo" : "1.3.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd32",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-platform-commons\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.platform/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Platform Commons",
+ "summary" : "Module \"junit-platform-commons\" of JUnit 5.",
+ "versionInfo" : "1.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd33",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-jupiter-api\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.jupiter/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Jupiter API",
+ "summary" : "Module \"junit-jupiter-api\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd34",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "@API Guardian",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apiguardian/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/apiguardian-team/apiguardian";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "org.apiguardian:apiguardian-api",
+ "summary" : "@API Guardian",
+ "versionInfo" : "1.1.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd35",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-vintage-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.vintage/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Vintage Engine",
+ "summary" : "Module \"junit-vintage-engine\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd36",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JUnit is a unit testing framework for Java, created by
Erich Gamma and Kent Beck.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/junit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://junit.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "EPL-1.0",
+ "name" : "JUnit",
+ "originator" : "Organization:JUnit",
+ "summary" : "JUnit is a unit testing framework for Java, created by Erich
Gamma and Kent Beck.",
+ "versionInfo" : "4.13.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd37",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "This is the core API of hamcrest matcher framework to be
used by third-party framework providers. This includes the a foundation set of
matcher implementations for common operations.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.hamcrest/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Hamcrest Core",
+ "summary" : "This is the core API of hamcrest matcher framework to be used
by third-party framework providers. This includes the a foundation set of
matcher implementations for common operations.",
+ "versionInfo" : "1.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd38",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A versatile, industrial-grade, and reference
implementation of the Log4j API.\n It bundles a rich set of components to
assist various use cases:\n Appenders targeting files, network sockets,
databases, SMTP servers;\n Layouts that can render CSV, HTML, JSON, Syslog,
etc. formatted outputs;\n Filters that can be configured using log event
rates, regular expressions, scripts, time, etc.\n It contains several
extension points to introduce custom components, if needed.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Log4j Core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "A versatile, industrial-grade, and reference implementation
of the Log4j API.\n It bundles a rich set of components to assist various
use cases:\n Appenders targeting files, network sockets, databases, SMTP
servers;\n Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted
outputs;\n Filters that can be configured using log event rates, regular
expressions, scripts, time, etc.\n It contains several extension points to
introduce custom components, if needed.",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd39",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop Common",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop Common",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop Common",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd40",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Packaging of relocated (renamed, shaded) third-party
libraries used by Hadoop.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.hadoop.thirdparty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://www.apache.org/hadoop-thirdparty/hadoop-shaded-protobuf_3_25/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop shaded Protobuf",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Packaging of relocated (renamed, shaded) third-party
libraries used by Hadoop.",
+ "versionInfo" : "1.3.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd41",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop Annotations",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop Annotations",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop Annotations",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd42",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Packaging of relocated (renamed, shaded) third-party
libraries used by Hadoop.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.hadoop.thirdparty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://www.apache.org/hadoop-thirdparty/hadoop-shaded-guava/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop shaded Guava",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Packaging of relocated (renamed, shaded) third-party
libraries used by Hadoop.",
+ "versionInfo" : "1.3.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd43",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Guava is a suite of core and expanded libraries that
include\n utility classes, google's collections, io classes, and much\n
much more.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.google.guava/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/google/guava/guava";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Guava: Google Core Libraries for Java",
+ "summary" : "Guava is a suite of core and expanded libraries that
include\n utility classes, google's collections, io classes, and much\n
much more.",
+ "versionInfo" : "27.0-jre"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd44",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Contains\n
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and\n
InternalFutures. Most users will never need to use this artifact. Its\n
classes is conceptually a part of Guava, but they're in this separate\n
artifact so that Android libraries can use them without pulling in all of\n
Guava (just as they can use ListenableFuture by depending on the\n
listenablefuture artifact).",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.google.guava/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/google/guava/failureaccess";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Guava InternalFutureFailureAccess and InternalFutures",
+ "summary" : "Contains\n
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and\n
InternalFutures. Most users will never need to use this artifact. Its\n
classes is conceptually a part of Guava, but they're in this separate\n
artifact so that Android libraries can use them without pulling in all of\n
Guava (just as they can use ListenableFuture by depending on the\n
listenablefuture artifact).",
+ "versionInfo" : "1.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd45",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "An empty artifact that Guava depends on to signal that it
is providing\n ListenableFuture -- but is also available in a second
\"version\" that\n contains
com.google.common.util.concurrent.ListenableFuture class, without\n any
other Guava classes. The idea is:\n\n - If users want only ListenableFuture,
they depend on listenablefuture-1.0.\n\n - If users want all of Guava, they
depend on guava, which, as of Guava\n 27.0, depends on\n
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...\n
version number is enough for some build systems (notably, Gradle) to select\n
that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a\n
conflict with the copy of ListenableFuture in guava itself. If users are\n
using an older version of Guava or a build system other than Gradle, they\n
may see class conflicts. If so, they can solve them by manually excluding\n
the listenablefuture artifact or manually f
orcing their build systems to\n use 9999.0-....",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.google.guava/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/google/guava/listenablefuture";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Guava ListenableFuture only",
+ "summary" : "An empty artifact that Guava depends on to signal that it is
providing\n ListenableFuture -- but is also available in a second
\"version\" that\n contains
com.google.common.util.concurrent.ListenableFuture class, without\n any
other Guava classes. The idea is:\n\n - If users want only ListenableFuture,
they depend on listenablefuture-1.0.\n\n - If users want all of Guava, they
depend on guava, which, as of Guava\n 27.0, depends on\n
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...\n
version number is enough for some build systems (notably, Gradle) to select\n
that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a\n
conflict with the copy of ListenableFuture in guava itself. If users are\n
using an older version of Guava or a build system other than Gradle, they\n
may see class conflicts. If so, they can solve them by manually excluding\n
the listenablefuture artifact or manually forci
ng their build systems to\n use 9999.0-....",
+ "versionInfo" : "9999.0-empty-to-avoid-conflict-with-guava"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd46",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Checker Qual is the set of annotations (qualifiers) and
supporting classes\n used by the Checker Framework to type check Java
source code. Please\n see artifact:\n
org.checkerframework:checker",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.checkerframework/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://checkerframework.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Checker Qual",
+ "summary" : "Checker Qual is the set of annotations (qualifiers) and
supporting classes\n used by the Checker Framework to type check Java
source code. Please\n see artifact:\n
org.checkerframework:checker",
+ "versionInfo" : "2.5.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd47",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A set of annotations that provide additional information
to the J2ObjC\n translator to modify the result of translation.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.google.j2objc/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/google/j2objc/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "J2ObjC Annotations",
+ "summary" : "A set of annotations that provide additional information to
the J2ObjC\n translator to modify the result of translation.",
+ "versionInfo" : "1.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd48",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Animal Sniffer Parent POM.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.codehaus.mojo/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "MIT",
+ "name" : "Animal Sniffer Annotations",
+ "originator" : "Organization:MojoHaus",
+ "summary" : "Animal Sniffer Parent POM.",
+ "versionInfo" : "1.17"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd49",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons CLI provides a simple API for presenting,
processing and validating a Command Line Interface.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-cli/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-cli/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons CLI",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons CLI provides a simple API for presenting,
processing and validating a Command Line Interface.",
+ "versionInfo" : "1.5.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd50",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons Math project is a library of
lightweight, self-contained mathematics and statistics components addressing
the most common practical problems not immediately available in the Java
programming language or commons-lang.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/proper/commons-math/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Math",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons Math project is a library of lightweight,
self-contained mathematics and statistics components addressing the most common
practical problems not immediately available in the Java programming language
or commons-lang.",
+ "versionInfo" : "3.6.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd51",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons Codec component contains encoders and
decoders for\n formats such as Base16, Base32, Base64, digest, and
Hexadecimal. In addition to these\n widely used encoders and decoders, the
codec package also maintains a\n collection of phonetic encoding
utilities.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-codec/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-codec/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Codec",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons Codec component contains encoders and
decoders for\n formats such as Base16, Base32, Base64, digest, and
Hexadecimal. In addition to these\n widely used encoders and decoders, the
codec package also maintains a\n collection of phonetic encoding
utilities.",
+ "versionInfo" : "1.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd52",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Net library contains a collection of
network utilities and protocol implementations.\nSupported protocols include
Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-net/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-net/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Net",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Net library contains a collection of network
utilities and protocol implementations.\nSupported protocols include Echo,
Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.",
+ "versionInfo" : "3.11.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd53",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Types that extend and augment the Java Collections
Framework.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/commons-collections/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/collections/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Collections",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Types that extend and augment the Java Collections
Framework.",
+ "versionInfo" : "3.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd54",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Java.net - The Source for Java Technology Collaboration",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.servlet/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://servlet-spec.java.net";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Java Servlet API",
+ "originator" : "Organization:GlassFish Community",
+ "summary" : "Java.net - The Source for Java Technology Collaboration",
+ "versionInfo" : "3.1.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd55",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JavaBeans Activation Framework API jar",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/jakarta.activation/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "JavaBeans Activation Framework API jar",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "JavaBeans Activation Framework API jar",
+ "versionInfo" : "1.2.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd56",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The core jetty server artifact.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-server";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Server Core",
+ "originator" : "Organization:Webtide",
+ "summary" : "The core jetty server artifact.",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd57",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Eclipse Jetty Project",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-http";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Http Utility",
+ "originator" : "Organization:Webtide",
+ "summary" : "The Eclipse Jetty Project",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd58",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Eclipse Jetty Project",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-io";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: IO Utility",
+ "originator" : "Organization:Webtide",
+ "summary" : "The Eclipse Jetty Project",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd59",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Utility classes for Jetty",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-util";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Utilities",
+ "originator" : "Organization:Webtide",
+ "summary" : "Utility classes for Jetty",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd60",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jetty Servlet Container",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-servlet";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Servlet Handling",
+ "originator" : "Organization:Webtide",
+ "summary" : "Jetty Servlet Container",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd61",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jetty security infrastructure",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-security";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Security",
+ "originator" : "Organization:Webtide",
+ "summary" : "Jetty security infrastructure",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd62",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jetty web application support",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-webapp";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: Webapp Application Support",
+ "originator" : "Organization:Webtide",
+ "summary" : "Jetty web application support",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd63",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The jetty xml utilities.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.eclipse.jetty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse.org/jetty/jetty-xml";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jetty :: XML utilities",
+ "originator" : "Organization:Webtide",
+ "summary" : "The jetty xml utilities.",
+ "versionInfo" : "9.4.53.v20231009"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd64",
+ "copyrightText" : "UNSPECIFIED",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.servlet.jsp/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "jsp-api",
+ "versionInfo" : "2.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd65",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.sun.jersey/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jersey.java.net/jersey-core/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "(CDDL-1.1 AND CDDL-1.1)",
+ "name" : "jersey-core",
+ "originator" : "Organization:Oracle Corporation",
+ "summary" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "versionInfo" : "1.19.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd66",
+ "copyrightText" : "UNSPECIFIED",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.ws.rs/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jsr311.dev.java.net";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "jsr311-api",
+ "originator" : "Organization:Sun Microsystems, Inc",
+ "versionInfo" : "1.1.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd67",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.sun.jersey/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jersey.java.net/jersey-servlet/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "(CDDL-1.1 AND CDDL-1.1)",
+ "name" : "jersey-servlet",
+ "originator" : "Organization:Oracle Corporation",
+ "summary" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "versionInfo" : "1.19.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd68",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A fork of com.sun.jersey:jersey-json:1.19.4 that uses
Jackson2 instead of EOL Jackson1.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.github.pjfanning/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/pjfanning/jersey-1.x";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "(CDDL-1.1 AND CDDL-1.1)",
+ "name" : "jersey-json",
+ "summary" : "A fork of com.sun.jersey:jersey-json:1.19.4 that uses
Jackson2 instead of EOL Jackson1.",
+ "versionInfo" : "1.22.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd69",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JAXB (JSR 222) reference implementation",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.sun.xml.bind/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jaxb.java.net/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "(CDDL-1.1 AND CDDL-1.1)",
+ "name" : "JAXB RI",
+ "originator" : "Organization:Oracle Corporation",
+ "summary" : "JAXB (JSR 222) reference implementation",
+ "versionInfo" : "2.2.3-1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd70",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JAXB (JSR 222) API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.xml.bind/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jaxb.dev.java.net/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JAXB API bundle for GlassFish V3",
+ "originator" : "Organization:Oracle Corporation",
+ "summary" : "JAXB (JSR 222) API",
+ "versionInfo" : "2.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd71",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "StAX is a standard XML processing API that allows you to
stream XML data from and to your application.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.xml.stream/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Streaming API for XML",
+ "summary" : "StAX is a standard XML processing API that allows you to
stream XML data from and to your application.",
+ "versionInfo" : "1.0-2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd72",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JavaBeans Activation Framework (JAF) is a standard
extension to the Java platform that lets you take advantage of standard
services to: determine the type of an arbitrary piece of data; encapsulate
access to it; discover the operations available on it; and instantiate the
appropriate bean to perform the operation(s).",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.activation/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://java.sun.com/products/javabeans/jaf/index.jsp";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JavaBeans Activation Framework (JAF)",
+ "summary" : "JavaBeans Activation Framework (JAF) is a standard extension
to the Java platform that lets you take advantage of standard services to:
determine the type of an arbitrary piece of data; encapsulate access to it;
discover the operations available on it; and instantiate the appropriate bean
to perform the operation(s).",
+ "versionInfo" : "1.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd73",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A StAX implementation for JSON.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.codehaus.jettison/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/jettison-json/jettison";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jettison",
+ "summary" : "A StAX implementation for JSON.",
+ "versionInfo" : "1.5.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd74",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.sun.jersey/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jersey.java.net/jersey-server/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "(CDDL-1.1 AND CDDL-1.1)",
+ "name" : "jersey-server",
+ "originator" : "Organization:Oracle Corporation",
+ "summary" : "Jersey is the open source (under dual CDDL+GPL license)
JAX-RS (JSR 311)\n production quality Reference Implementation for
building\n RESTful Web services.",
+ "versionInfo" : "1.19.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd75",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Reload4j revives EOLed log4j 1.x",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/ch.qos.reload4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://reload4j.qos.ch";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "reload4j",
+ "originator" : "Organization:QOS.CH Sarl (Switzerland)",
+ "summary" : "Reload4j revives EOLed log4j 1.x",
+ "versionInfo" : "1.2.22"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd76",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons BeanUtils provides an easy-to-use but
flexible wrapper around reflection and introspection.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/commons-beanutils/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-beanutils/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons BeanUtils",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons BeanUtils provides an easy-to-use but flexible
wrapper around reflection and introspection.",
+ "versionInfo" : "1.9.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd77",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Tools to assist in the reading of
configuration/preferences files in various formats; requires Java 8.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-configuration/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Configuration",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Tools to assist in the reading of configuration/preferences
files in various formats; requires Java 8.",
+ "versionInfo" : "2.10.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd78",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Text is a library focused on algorithms
working on strings.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-text";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Text",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Text is a library focused on algorithms
working on strings.",
+ "versionInfo" : "1.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd79",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "SLF4J Reload4j Binding",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.slf4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://reload4j.qos.ch";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "MIT",
+ "name" : "SLF4J Reload4j Binding",
+ "originator" : "Organization:QOS.ch",
+ "summary" : "SLF4J Reload4j Binding",
+ "versionInfo" : "1.7.36"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd80",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Avro core components",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.avro/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://avro.apache.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Avro",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Avro core components",
+ "versionInfo" : "1.9.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd81",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Sonatype helps open source projects to set up Maven
repositories on https://oss.sonatype.org/";,
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.google.re2j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://github.com/google/re2j";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "re2j",
+ "summary" : "Sonatype helps open source projects to set up Maven
repositories on https://oss.sonatype.org/";,
+ "versionInfo" : "1.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd82",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Gson JSON library",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.google.code.gson/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/google/gson/gson";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Gson",
+ "summary" : "Gson JSON library",
+ "versionInfo" : "2.9.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd83",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.hadoop/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Hadoop Auth",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache Hadoop Auth - Java HTTP SPNEGO",
+ "versionInfo" : "3.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd84",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Java library for Javascript Object Signing and Encryption
(JOSE) and\n JSON Web Tokens (JWT)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.nimbusds/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://bitbucket.org/connect2id/nimbus-jose-jwt";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Nimbus JOSE+JWT",
+ "originator" : "Organization:Connect2id Ltd.",
+ "summary" : "Java library for Javascript Object Signing and Encryption
(JOSE) and\n JSON Web Tokens (JWT)",
+ "versionInfo" : "9.37.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd85",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A clean room implementation of the JCIP Annotations based
entirely on the specification provided by the javadocs.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.github.stephenc.jcip/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://stephenc.github.com/jcip-annotations";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "JCIP Annotations under Apache License",
+ "summary" : "A clean room implementation of the JCIP Annotations based
entirely on the specification provided by the javadocs.",
+ "versionInfo" : "1.0-1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd86",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "High-level API that greatly simplifies using ZooKeeper.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.curator/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://curator.apache.org/curator-framework";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Curator Framework",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "High-level API that greatly simplifies using ZooKeeper.",
+ "versionInfo" : "5.2.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd87",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby-kerb Utilities",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-kerb/kerb-util";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby-kerb Util",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby-kerb Utilities",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd88",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby config library",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://directory.apache.org/kerby/kerby-common/kerby-config";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby Config",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby config library",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd89",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby-kerb Crypto facility",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-kerb/kerb-crypto";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby-kerb Crypto",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby-kerb Crypto facility",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd90",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JSch is a pure Java implementation of SSH2",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.jcraft/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.jcraft.com/jsch/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JSch",
+ "originator" : "Organization:JCraft,Inc.",
+ "summary" : "JSch is a pure Java implementation of SSH2",
+ "versionInfo" : "0.1.55"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd91",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Low-level API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.curator/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://curator.apache.org/curator-client";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Curator Client",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Low-level API",
+ "versionInfo" : "5.2.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd92",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "All of the recipes listed on the ZooKeeper recipes doc
(except two phase commit).",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.curator/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://curator.apache.org/curator-recipes";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Curator Recipes",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "All of the recipes listed on the ZooKeeper recipes doc
(except two phase commit).",
+ "versionInfo" : "5.2.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd93",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JSR305 Annotations for Findbugs",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.google.code.findbugs/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://findbugs.sourceforge.net/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "FindBugs-jsr305",
+ "summary" : "JSR305 Annotations for Findbugs",
+ "versionInfo" : "3.0.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd94",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "ZooKeeper server",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.zookeeper/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://zookeeper.apache.org/zookeeper";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache ZooKeeper - Server",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "ZooKeeper server",
+ "versionInfo" : "3.8.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd95",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "ZooKeeper jute",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.zookeeper/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://zookeeper.apache.org/zookeeper-jute";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache ZooKeeper - Jute",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "ZooKeeper jute",
+ "versionInfo" : "3.8.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd96",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Annotations for defining API boundaries and tools for
managing javadocs",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.yetus/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://yetus.apache.org/audience-annotations";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Yetus - Audience Annotations",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Annotations for defining API boundaries and tools for
managing javadocs",
+ "versionInfo" : "0.12.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd97",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-handler/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Handler",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd98",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-common/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Common",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd99",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-resolver/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Resolver",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd100",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-buffer/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Buffer",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd101",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-transport/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Transport",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd102",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Static library which contains common unix utilities.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-transport-native-unix-common/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Transport/Native/Unix/Common",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Static library which contains common unix utilities.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd103",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-codec/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Codec",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd104",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-transport-native-epoll/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Transport/Native/Epoll",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd105",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/io.netty/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://netty.io/netty-transport-classes-epoll/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Netty/Transport/Classes/Epoll",
+ "originator" : "Organization:The Netty Project",
+ "summary" : "Netty is an asynchronous event-driven network application
framework for\n rapid development of maintainable high performance protocol
servers and\n clients.",
+ "versionInfo" : "4.1.100.Final"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd106",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Metrics is a Java library which gives you unparalleled
insight into what your code does in\n production. Metrics provides a
powerful toolkit of ways to measure the behavior of critical\n
components in your production environment.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/io.dropwizard.metrics/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://metrics.dropwizard.io/metrics-core/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Metrics Core",
+ "summary" : "Metrics is a Java library which gives you unparalleled
insight into what your code does in\n production. Metrics provides a
powerful toolkit of ways to measure the behavior of critical\n
components in your production environment.",
+ "versionInfo" : "3.2.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd107",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Compress defines an API for working
with\ncompression and archive formats. These include bzip2, gzip,
pack200,\nLZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64,
LZ4,\nBrotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-compress/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Compress",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Compress defines an API for working
with\ncompression and archive formats. These include bzip2, gzip,
pack200,\nLZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64,
LZ4,\nBrotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
+ "versionInfo" : "1.27.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd108",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Bouncy Castle Crypto package is a Java implementation
of cryptographic algorithms. This jar contains JCE provider and lightweight API
for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.bouncycastle/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.bouncycastle.org/java.html";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Bouncy Castle Provider",
+ "summary" : "The Bouncy Castle Crypto package is a Java implementation of
cryptographic algorithms. This jar contains JCE provider and lightweight API
for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
+ "versionInfo" : "1.78.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd109",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby-kerb core facilities",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-kerb/kerb-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby-kerb core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby-kerb core facilities",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd110",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby PKIX Project",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-pkix";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby PKIX Project",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby PKIX Project",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd111",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby ASN1 Project",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-common/kerby-asn1";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby ASN1 Project",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby ASN1 Project",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd112",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Kerby common util, without any 3rd party dependency",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.kerby/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://directory.apache.org/kerby/kerby-common/kerby-util";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Kerby Util",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Kerby common util, without any 3rd party dependency",
+ "versionInfo" : "2.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd113",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "tax2 API is an extension to basic Stax 1.0 API that adds
significant new functionality, such as full-featured bi-direction validation
interface and high-performance Typed Access API.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.codehaus.woodstox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://github.com/FasterXML/stax2-api";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Stax2 API",
+ "originator" : "Organization:fasterxml.com",
+ "summary" : "tax2 API is an extension to basic Stax 1.0 API that adds
significant new functionality, such as full-featured bi-direction validation
interface and high-performance Typed Access API.",
+ "versionInfo" : "4.2.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd114",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Woodstox is a high-performance XML processor that\n
implements Stax (JSR-173), SAX2 and Stax2 APIs",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.fasterxml.woodstox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/FasterXML/woodstox";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Woodstox",
+ "originator" : "Organization:FasterXML",
+ "summary" : "Woodstox is a high-performance XML processor that\n
implements Stax (JSR-173), SAX2 and Stax2 APIs",
+ "versionInfo" : "5.4.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd115",
+ "copyrightText" : "UNSPECIFIED",
[... 1581 lines stripped ...]
