Added:
websites/production/commons/content/proper/commons-vfs/commons-vfs2-jackrabbit2/org.apache.commons_commons-vfs2-jackrabbit2-2.10.0.spdx.json
==============================================================================
---
websites/production/commons/content/proper/commons-vfs/commons-vfs2-jackrabbit2/org.apache.commons_commons-vfs2-jackrabbit2-2.10.0.spdx.json
(added)
+++
websites/production/commons/content/proper/commons-vfs/commons-vfs2-jackrabbit2/org.apache.commons_commons-vfs2-jackrabbit2-2.10.0.spdx.json
Fri Feb 14 14:54:09 2025
@@ -0,0 +1,3897 @@
+{
+ "SPDXID" : "SPDXRef-DOCUMENT",
+ "spdxVersion" : "SPDX-2.3",
+ "creationInfo" : {
+ "created" : "2025-02-14T14:50:50Z",
+ "creators" : [ "Tool: spdx-maven-plugin" ],
+ "licenseListVersion" : "3.26.0"
+ },
+ "name" : "Apache Commons VFS Jackrabbit 2.x",
+ "dataLicense" : "CC0-1.0",
+ "documentNamespace" :
"http://spdx.org/spdxpackages/org.apache.commons_commons-vfs2-jackrabbit2-2.10.0";,
+ "packages" : [ {
+ "SPDXID" : "SPDXRef-gnrtd0",
+ "checksums" : [ {
+ "algorithm" : "SHA1",
+ "checksumValue" : "220139ab3a53451251d4621f6c8ce43634e4dfd9"
+ } ],
+ "copyrightText" : "NOASSERTION",
+ "description" : "Apache Commons VFS is a Virtual File System library -
Jackrabbit2-based WebDAV provider.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : true,
+ "homepage" :
"https://commons.apache.org/proper/commons-vfs/commons-vfs2-jackrabbit2/";,
+ "licenseConcluded" : "Apache-2.0",
+ "licenseDeclared" : "Apache-2.0",
+ "licenseInfoFromFiles" : [ "NOASSERTION" ],
+ "name" : "Apache Commons VFS Jackrabbit 2.x",
+ "originator" : "Organization:The Apache Software Foundation",
+ "packageFileName" : "commons-vfs2-jackrabbit2-2.10.0.jar",
+ "packageVerificationCode" : {
+ "packageVerificationCodeValue" :
"67455d2d8149987ba3a0bd80f2118e968353438a"
+ },
+ "primaryPackagePurpose" : "LIBRARY",
+ "summary" : "Apache Commons VFS is a Virtual File System library -
Jackrabbit2-based WebDAV provider.",
+ "supplier" : "Organization: The Apache Software Foundation",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd25",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "SLF4J 2 provider (binding) for the Apache Log4j API.\n
It forwards SLF4J 2 calls to the Log4j API.\n This effectively allows using
Log4j as an implementation of SLF4J 2.\n (Refer to the `log4j-to-slf4j`
artifact for forwarding the Log4j API to SLF4J.)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "SLF4J 2 Provider for Log4j API",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "SLF4J 2 provider (binding) for the Apache Log4j API.\n It
forwards SLF4J 2 calls to the Log4j API.\n This effectively allows using
Log4j as an implementation of SLF4J 2.\n (Refer to the `log4j-to-slf4j`
artifact for forwarding the Log4j API to SLF4J.)",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd26",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The logging API of the Log4j project.\n Library and
application code can log through this API.\n It contains a simple built-in
implementation (`SimpleLogger`) for trivial use cases.\n Production
applications are recommended to use Log4j API in combination with a
fully-fledged implementation, such as Log4j Core.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Log4j API",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The logging API of the Log4j project.\n Library and
application code can log through this API.\n It contains a simple built-in
implementation (`SimpleLogger`) for trivial use cases.\n Production
applications are recommended to use Log4j API in combination with a
fully-fledged implementation, such as Log4j Core.",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd27",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons VFS is a Virtual File System library.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-vfs/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons VFS",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons VFS is a Virtual File System library.",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd28",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Logging is a thin adapter allowing
configurable bridging to other,\n well-known logging systems.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-logging/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-logging/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Logging",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Logging is a thin adapter allowing
configurable bridging to other,\n well-known logging systems.",
+ "versionInfo" : "1.3.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd29",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache HttpComponents Client",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.httpcomponents/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://hc.apache.org/httpcomponents-client-ga";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache HttpClient",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache HttpComponents Client",
+ "versionInfo" : "4.5.14"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd30",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache HttpComponents Core (blocking I/O)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.httpcomponents/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://hc.apache.org/httpcomponents-core-ga";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache HttpCore",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache HttpComponents Core (blocking I/O)",
+ "versionInfo" : "4.4.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd31",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons Codec component contains encoders and
decoders for\n formats such as Base16, Base32, Base64, digest, and
Hexadecimal. In addition to these\n widely used encoders and decoders, the
codec package also maintains a\n collection of phonetic encoding
utilities.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-codec/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-codec/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Codec",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons Codec component contains encoders and
decoders for\n formats such as Base16, Base32, Base64, digest, and
Hexadecimal. In addition to these\n widely used encoders and decoders, the
codec package also maintains a\n collection of phonetic encoding
utilities.",
+ "versionInfo" : "1.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd32",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Generic WebDAV Library",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit WebDAV Library",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Generic WebDAV Library",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd33",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons VFS is a Virtual File System library.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-vfs/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons VFS",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons VFS is a Virtual File System library.",
+ "versionInfo" : "2.10.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd34",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-jupiter-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.jupiter/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Jupiter Engine",
+ "summary" : "Module \"junit-jupiter-engine\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd35",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-platform-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.platform/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Platform Engine API",
+ "summary" : "Module \"junit-platform-engine\" of JUnit 5.",
+ "versionInfo" : "1.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd36",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Open Test Alliance for the JVM",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.opentest4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/ota4j-team/opentest4j";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "org.opentest4j:opentest4j",
+ "summary" : "Open Test Alliance for the JVM",
+ "versionInfo" : "1.3.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd37",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-platform-commons\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.platform/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Platform Commons",
+ "summary" : "Module \"junit-platform-commons\" of JUnit 5.",
+ "versionInfo" : "1.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd38",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-jupiter-api\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.jupiter/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Jupiter API",
+ "summary" : "Module \"junit-jupiter-api\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd39",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "@API Guardian",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apiguardian/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/apiguardian-team/apiguardian";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "org.apiguardian:apiguardian-api",
+ "summary" : "@API Guardian",
+ "versionInfo" : "1.1.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd40",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Module \"junit-vintage-engine\" of JUnit 5.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.junit.vintage/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://junit.org/junit5/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JUnit Vintage Engine",
+ "summary" : "Module \"junit-vintage-engine\" of JUnit 5.",
+ "versionInfo" : "5.11.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd41",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JUnit is a unit testing framework for Java, created by
Erich Gamma and Kent Beck.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/junit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://junit.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "EPL-1.0",
+ "name" : "JUnit",
+ "originator" : "Organization:JUnit",
+ "summary" : "JUnit is a unit testing framework for Java, created by Erich
Gamma and Kent Beck.",
+ "versionInfo" : "4.13.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd42",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "This is the core API of hamcrest matcher framework to be
used by third-party framework providers. This includes the a foundation set of
matcher implementations for common operations.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.hamcrest/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/hamcrest/JavaHamcrest/hamcrest-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Hamcrest Core",
+ "summary" : "This is the core API of hamcrest matcher framework to be used
by third-party framework providers. This includes the a foundation set of
matcher implementations for common operations.",
+ "versionInfo" : "1.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd43",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Lang, a package of Java utility classes
for the\n classes that are in java.lang's hierarchy, or are considered to be
so\n standard as to justify existence in java.lang.\n\n The code is tested
using the latest revision of the JDK for supported\n LTS releases: 8, 11, 17
and 21 currently.\n See
https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\n
\n Please ensure your build environment is up-to-date and kindly report any
build issues.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-lang/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Lang",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Lang, a package of Java utility classes for
the\n classes that are in java.lang's hierarchy, or are considered to be so\n
standard as to justify existence in java.lang.\n\n The code is tested using
the latest revision of the JDK for supported\n LTS releases: 8, 11, 17 and 21
currently.\n See
https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml\n
\n Please ensure your build environment is up-to-date and kindly report any
build issues.",
+ "versionInfo" : "3.17.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd44",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons IO library contains utility classes,
stream implementations, file filters,\nfile comparators, endian transformation
classes, and much more.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-io/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://commons.apache.org/proper/commons-io/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons IO",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons IO library contains utility classes,
stream implementations, file filters,\nfile comparators, endian transformation
classes, and much more.",
+ "versionInfo" : "2.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd45",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The slf4j API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.slf4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.slf4j.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "MIT",
+ "name" : "SLF4J API Module",
+ "originator" : "Organization:QOS.ch",
+ "summary" : "The slf4j API",
+ "versionInfo" : "2.0.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd46",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A versatile, industrial-grade, and reference
implementation of the Log4j API.\n It bundles a rich set of components to
assist various use cases:\n Appenders targeting files, network sockets,
databases, SMTP servers;\n Layouts that can render CSV, HTML, JSON, Syslog,
etc. formatted outputs;\n Filters that can be configured using log event
rates, regular expressions, scripts, time, etc.\n It contains several
extension points to introduce custom components, if needed.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.logging.log4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Log4j Core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "A versatile, industrial-grade, and reference implementation
of the Log4j API.\n It bundles a rich set of components to assist various
use cases:\n Appenders targeting files, network sockets, databases, SMTP
servers;\n Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted
outputs;\n Filters that can be configured using log event rates, regular
expressions, scripts, time, etc.\n It contains several extension points to
introduce custom components, if needed.",
+ "versionInfo" : "2.24.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd47",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jackrabbit components for Jackrabbit Standalone",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit Standalone Components",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Jackrabbit components for Jackrabbit Standalone",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd48",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Content Repository API for JavaTM Technology Version
2.0 is specified by JSR-283.\n This module contains the complete API as
specified.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/javax.jcr/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.jcp.org/en/jsr/detail?id=283";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Content Repository for JavaTM Technology API",
+ "originator" : "Organization:Day Software",
+ "summary" : "The Content Repository API for JavaTM Technology Version 2.0
is specified by JSR-283.\n This module contains the complete API as
specified.",
+ "versionInfo" : "2.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd49",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jackrabbit content repository implementation",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit Core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Jackrabbit content repository implementation",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd50",
+ "copyrightText" : "UNSPECIFIED",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/concurrent/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Dough Lea's util.concurrent package",
+ "originator" : "Organization:Dough Lea",
+ "versionInfo" : "1.3.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd51",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Commons Database Connection Pooling",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-dbcp/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/dbcp/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Commons DBCP",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Commons Database Connection Pooling",
+ "versionInfo" : "1.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd52",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Commons Object Pooling Library",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/commons-pool/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/pool/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Commons Pool",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Commons Object Pooling Library",
+ "versionInfo" : "1.5.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd53",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The goal of the Oak effort within the Apache Jackrabbit
project is\n to implement a scalable and performant hierarchical content
repository\n for use as the foundation of modern world-class web sites and
other\n demanding content applications.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/oak-jackrabbit-api/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit API",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The goal of the Oak effort within the Apache Jackrabbit
project is\n to implement a scalable and performant hierarchical content
repository\n for use as the foundation of modern world-class web sites and
other\n demanding content applications.",
+ "versionInfo" : "1.48.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd54",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "General purpose classes for use with the JCR API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit JCR Commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "General purpose classes for use with the JCR API",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd55",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jackrabbit DataStore Implentations",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit Data",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Jackrabbit DataStore Implentations",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd56",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Jackrabbit⢠content repository is a fully
conforming\n implementation of the Content Repository for Java Technology
API\n (JCR, specified in JSR 170 and 283). A content repository is a\n
hierarchical content store with support for structured and unstructured\n
content, full text search, versioning, transactions, observation, and more.\n
Apache Jackrabbit is a project of the Apache Software Foundation.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit SPI Commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Jackrabbit⢠content repository is a fully
conforming\n implementation of the Content Repository for Java Technology
API\n (JCR, specified in JSR 170 and 283). A content repository is a\n
hierarchical content store with support for structured and unstructured\n
content, full text search, versioning, transactions, observation, and more.\n
Apache Jackrabbit is a project of the Apache Software Foundation.",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd57",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Jackrabbit⢠content repository is a fully
conforming\n implementation of the Content Repository for Java Technology
API\n (JCR, specified in JSR 170 and 283). A content repository is a\n
hierarchical content store with support for structured and unstructured\n
content, full text search, versioning, transactions, observation, and more.\n
Apache Jackrabbit is a project of the Apache Software Foundation.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.jackrabbit/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackrabbit.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackrabbit SPI",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Jackrabbit⢠content repository is a fully
conforming\n implementation of the Content Repository for Java Technology
API\n (JCR, specified in JSR 170 and 283). A content repository is a\n
hierarchical content store with support for structured and unstructured\n
content, full text search, versioning, transactions, observation, and more.\n
Apache Jackrabbit is a project of the Apache Software Foundation.",
+ "versionInfo" : "2.20.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd58",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "This is the core Apache Tika⢠toolkit library from
which all other modules inherit functionality. It\n also\n includes the
core facades for the Tika API.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "This is the core Apache Tika⢠toolkit library from which
all other modules inherit functionality. It\n also\n includes the core
facades for the Tika API.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd59",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Lucene Java Core",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.lucene/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://lucene.apache.org/java/lucene-parent/lucene-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Lucene Core",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Lucene Java Core",
+ "versionInfo" : "3.6.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd60",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://tika.apache.org/tika-parsers/tika-parsers-standard/tika-parsers-standard-package/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika standard parser package",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd61",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-apple-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika Apple parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd62",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-zip-commons/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika ZIP commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd63",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "This library enables Java applications to work with
property lists in various formats.\n Supported formats for reading and
writing are OS X/iOS binary and XML property lists.\n ASCII property
lists are also supported.\n The library also provides access to basic
functions of NeXTSTEP/Cocoa classes like\n NSDictionary, NSArray, etc.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.googlecode.plist/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.github.com/3breadt/dd-plist";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "dd-plist",
+ "summary" : "This library enables Java applications to work with property
lists in various formats.\n Supported formats for reading and writing
are OS X/iOS binary and XML property lists.\n ASCII property lists are
also supported.\n The library also provides access to basic functions of
NeXTSTEP/Cocoa classes like\n NSDictionary, NSArray, etc.",
+ "versionInfo" : "1.23"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd64",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-audiovideo-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika audiovideo parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd65",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-cad-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika cad parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd66",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-code-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika code parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd67",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JHighlight is an embeddable pure Java syntax
highlighting\n library that supports Java, HTML, XHTML, XML and LZX\n
languages and outputs to XHTML.\n \n It also supports RIFE templates tags
and highlights them\n clearly so that you can easily identify the
difference\n between your RIFE markup and the actual marked up source.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.codelibs/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/codelibs/jhighlight";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JHighlight",
+ "summary" : "JHighlight is an embeddable pure Java syntax highlighting\n
library that supports Java, HTML, XHTML, XML and LZX\n languages and
outputs to XHTML.\n \n It also supports RIFE templates tags and
highlights them\n clearly so that you can easily identify the difference\n
between your RIFE markup and the actual marked up source.",
+ "versionInfo" : "1.1.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd68",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "TagSoup is a SAX-compliant parser written in Java that,
instead of parsing well-formed or valid XML, parses HTML as it is found in the
wild: poor, nasty and brutish, though quite often far from short. TagSoup is
designed for people who have to process this stuff using some semblance of a
rational application design. By providing a SAX interface, it allows standard
XML tools to be applied to even the worst HTML. TagSoup also includes a
command-line processor that reads HTML files and can generate either clean HTML
or well-formed XML that is a close approximation to XHTML.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.ccil.cowan.tagsoup/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://home.ccil.org/~cowan/XML/tagsoup/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "TagSoup",
+ "summary" : "TagSoup is a SAX-compliant parser written in Java that,
instead of parsing well-formed or valid XML, parses HTML as it is found in the
wild: poor, nasty and brutish, though quite often far from short. TagSoup is
designed for people who have to process this stuff using some semblance of a
rational application design. By providing a SAX interface, it allows standard
XML tools to be applied to even the worst HTML. TagSoup also includes a
command-line processor that reads HTML files and can generate either clean HTML
or well-formed XML that is a close approximation to XHTML.",
+ "versionInfo" : "1.2.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd69",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "ASM, a very small and fast Java bytecode manipulation
framework",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.ow2.asm/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://asm.ow2.io/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "asm",
+ "originator" : "Organization:OW2",
+ "summary" : "ASM, a very small and fast Java bytecode manipulation
framework",
+ "versionInfo" : "9.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd70",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Parso is a lightweight Java library designed to read
SAS7BDAT datasets. The Parso interfaces\n are analogous to libraries
designed to read table-storing files, for example, CSVReader library.\n
Despite its small size, the Parso library is the only full-featured open-source
solution to process SAS7BDAT\n datasets, both uncompressed,
CHAR-compressed and BIN-compressed. It is effective in processing clinical
and\n statistical data often stored in SAS7BDAT format. Parso allows
converting data into CSV format.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.epam/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/epam/parso";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "parso",
+ "summary" : "Parso is a lightweight Java library designed to read SAS7BDAT
datasets. The Parso interfaces\n are analogous to libraries designed to
read table-storing files, for example, CSVReader library.\n Despite its
small size, the Parso library is the only full-featured open-source solution to
process SAS7BDAT\n datasets, both uncompressed, CHAR-compressed and
BIN-compressed. It is effective in processing clinical and\n statistical
data often stored in SAS7BDAT format. Parso allows converting data into CSV
format.",
+ "versionInfo" : "2.0.14"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd71",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Matlab's MAT-file I/O API in JAVA. Supports Matlab 5
MAT-flie format reading and writing. Written in pure JAVA.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.tallison/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/tballison/jmatio";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JMatIO",
+ "summary" : "Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie
format reading and writing. Written in pure JAVA.",
+ "versionInfo" : "1.5"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd72",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-crypto-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika crypto parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd73",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Bouncy Castle Java S/MIME APIs for handling S/MIME
protocols. This jar contains S/MIME APIs for JDK 1.5 and up. The APIs can be
used in conjunction with a JCE/JCA provider such as the one provided with the
Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation
framework will also be needed.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.bouncycastle/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.bouncycastle.org/java.html";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Bouncy Castle S/MIME API",
+ "summary" : "The Bouncy Castle Java S/MIME APIs for handling S/MIME
protocols. This jar contains S/MIME APIs for JDK 1.5 and up. The APIs can be
used in conjunction with a JCE/JCA provider such as the one provided with the
Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation
framework will also be needed.",
+ "versionInfo" : "1.70"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd74",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Bouncy Castle Java APIs for ASN.1 extension and
utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK
1.5 and up.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.bouncycastle/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.bouncycastle.org/java.html";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Bouncy Castle ASN.1 Extension and Utility APIs",
+ "summary" : "The Bouncy Castle Java APIs for ASN.1 extension and utility
APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.5 and
up.",
+ "versionInfo" : "1.70"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd75",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP,
CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and
up. The APIs can be used in conjunction with a JCE/JCA provider such as the one
provided with the Bouncy Castle Cryptography APIs.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.bouncycastle/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.bouncycastle.org/java.html";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF
APIs",
+ "summary" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP,
CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and
up. The APIs can be used in conjunction with a JCE/JCA provider such as the one
provided with the Bouncy Castle Cryptography APIs.",
+ "versionInfo" : "1.70"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd76",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Bouncy Castle Crypto package is a Java implementation
of cryptographic algorithms. This jar contains JCE provider and lightweight API
for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.bouncycastle/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.bouncycastle.org/java.html";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Bouncy Castle Provider",
+ "summary" : "The Bouncy Castle Crypto package is a Java implementation of
cryptographic algorithms. This jar contains JCE provider and lightweight API
for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.",
+ "versionInfo" : "1.70"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd77",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-digest-commons/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika digest commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd78",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-font-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika font parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd79",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache FontBox library is an open source Java tool to
obtain low level information\n from font files. FontBox is a subproject of
Apache PDFBox.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://pdfbox.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache FontBox",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache FontBox library is an open source Java tool to
obtain low level information\n from font files. FontBox is a subproject of
Apache PDFBox.",
+ "versionInfo" : "2.0.26"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd80",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-html-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika html parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd81",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-html-commons/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika html commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd82",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-image-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika image parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd83",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Java Advanced Imaging Image I/O Tools API core, but
without the classes \n involved with javax.media.jai dependencies, JPEG2000
or \n codecLibJIIO, meaning that this library can be distributed under the
\n modified BSD license and should be GPL compatible.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.github.jai-imageio/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/jai-imageio/jai-imageio-core";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "Java Advanced Imaging Image I/O Tools API core (standalone)",
+ "originator" : "Organization:jai-imageio GitHub group",
+ "summary" : "Java Advanced Imaging Image I/O Tools API core, but without
the classes \n involved with javax.media.jai dependencies, JPEG2000 or \n
codecLibJIIO, meaning that this library can be distributed under the \n
modified BSD license and should be GPL compatible.",
+ "versionInfo" : "1.4.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd84",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Java Image I/O plugin for reading JBIG2-compressed image
data. \n\tFormerly known as the levigo JBig2 ImageIO plugin
(com.levigo.jbig2:levigo-jbig2-imageio).",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.apache.org/jbig2-imageio/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "PDFBox JBIG2 ImageIO plugin",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Java Image I/O plugin for reading JBIG2-compressed image
data. \n\tFormerly known as the levigo JBig2 ImageIO plugin
(com.levigo.jbig2:levigo-jbig2-imageio).",
+ "versionInfo" : "3.0.4"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd85",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-mail-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika mail parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd86",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-mail-commons/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika mail commons",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd87",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-microsoft-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika Microsoft parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd88",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A library to read PST files with java, without need for
external libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.pff/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/rjohnsondev/java-libpst";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "java-libpst",
+ "summary" : "A library to read PST files with java, without need for
external libraries.",
+ "versionInfo" : "0.9.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd89",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache POI - Java API To Access Microsoft Format Files",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.poi/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://poi.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache POI - Common",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache POI - Java API To Access Microsoft Format Files",
+ "versionInfo" : "5.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd90",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache Commons Math project is a library of
lightweight, self-contained mathematics and statistics components addressing
the most common practical problems not immediately available in the Java
programming language or commons-lang.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/proper/commons-math/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Math",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache Commons Math project is a library of lightweight,
self-contained mathematics and statistics components addressing the most common
practical problems not immediately available in the Java programming language
or commons-lang.",
+ "versionInfo" : "3.6.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd91",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "An efficient sparse bitset implementation for Java",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.zaxxer/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/brettwooldridge/SparseBitSet";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "SparseBitSet",
+ "originator" : "Organization:Zaxxer.com",
+ "summary" : "An efficient sparse bitset implementation for Java",
+ "versionInfo" : "1.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd92",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache POI - Java API To Access Microsoft Format Files
(Scratchpad)",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.poi/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://poi.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache POI",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache POI - Java API To Access Microsoft Format Files
(Scratchpad)",
+ "versionInfo" : "5.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd93",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache POI - Java API To Access Microsoft Format Files",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.poi/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://poi.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache POI - API based on OPC and OOXML schemas",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache POI - Java API To Access Microsoft Format Files",
+ "versionInfo" : "5.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd94",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache POI - Java API To Access Microsoft Format Files",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.poi/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://poi.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache POI",
+ "originator" : "Organization:Apache Software Foundation",
+ "summary" : "Apache POI - Java API To Access Microsoft Format Files",
+ "versionInfo" : "5.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd95",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "XmlBeans main jar",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.xmlbeans/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://xmlbeans.apache.org/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "XmlBeans",
+ "originator" : "Organization:XmlBeans",
+ "summary" : "XmlBeans main jar",
+ "versionInfo" : "5.0.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd96",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Implementation of various mathematical curves that define
themselves over a set of control points. The API is written in Java. The curves
supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange,
Natural Cubic Spline, and NURBS.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.github.virtuald/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/virtuald/curvesapi";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "curvesapi",
+ "summary" : "Implementation of various mathematical curves that define
themselves over a set of control points. The API is written in Java. The curves
supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange,
Natural Cubic Spline, and NURBS.",
+ "versionInfo" : "1.07"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd97",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A pure Java library for reading from and writing to MS
Access databases.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.healthmarketscience.jackcess/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://jackcess.sourceforge.io";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackcess",
+ "originator" : "Organization:OpenHMS",
+ "summary" : "A pure Java library for reading from and writing to MS Access
databases.",
+ "versionInfo" : "4.0.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd98",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "An add-on to the Jackcess library for handling encryption
in MS Access files.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.healthmarketscience.jackcess/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://jackcessencrypt.sf.net";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Jackcess Encrypt",
+ "originator" : "Organization:OpenHMS",
+ "summary" : "An add-on to the Jackcess library for handling encryption in
MS Access files.",
+ "versionInfo" : "4.0.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd99",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JCL 1.2 implemented over SLF4J",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.slf4j/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.slf4j.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "JCL 1.2 implemented over SLF4J",
+ "originator" : "Organization:QOS.ch",
+ "summary" : "JCL 1.2 implemented over SLF4J",
+ "versionInfo" : "2.0.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd100",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-miscoffice-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika miscellaneous office format parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd101",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "JAXB (JSR 222) Reference Implementation",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.glassfish.jaxb/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "JAXB Runtime",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "JAXB (JSR 222) Reference Implementation",
+ "versionInfo" : "2.3.6"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd102",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jakarta XML Binding API",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/jakarta.xml.bind/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "Jakarta XML Binding API",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "Jakarta XML Binding API",
+ "versionInfo" : "2.3.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd103",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "TXW is a library that allows you to write XML documents.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.glassfish.jaxb/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://eclipse-ee4j.github.io/jaxb-ri/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "TXW2 Runtime",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "TXW is a library that allows you to write XML documents.",
+ "versionInfo" : "2.3.6"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd104",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "istack common utility code",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.sun.istack/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" :
"https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "istack common utility code runtime",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "istack common utility code",
+ "versionInfo" : "3.0.12"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd105",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Jakarta Activation",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/com.sun.activation/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "BSD-3-Clause",
+ "name" : "Jakarta Activation",
+ "originator" : "Organization:Eclipse Foundation",
+ "summary" : "Jakarta Activation",
+ "versionInfo" : "1.2.2"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd106",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-news-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika news parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd107",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "All Roads Lead to ROME. ROME is a set of Atom/RSS Java
utilities that make it\n easy to work in Java with most syndication
formats. Today it accepts all flavors of RSS\n (0.90, 0.91, 0.92, 0.93,
0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes\n a set
of parsers and generators for the various flavors of feeds, as well as
converters\n to convert from one format to another. The parsers can give
you back Java objects that\n are either specific for the format you want
to work with, or a generic normalized\n SyndFeed object that lets you
work on with the data without bothering about the\n underlying format.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.rometools/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://rometools.com/rome";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "rome",
+ "summary" : "All Roads Lead to ROME. ROME is a set of Atom/RSS Java
utilities that make it\n easy to work in Java with most syndication
formats. Today it accepts all flavors of RSS\n (0.90, 0.91, 0.92, 0.93,
0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes\n a set
of parsers and generators for the various flavors of feeds, as well as
converters\n to convert from one format to another. The parsers can give
you back Java objects that\n are either specific for the format you want
to work with, or a generic normalized\n SyndFeed object that lets you
work on with the data without bothering about the\n underlying format.",
+ "versionInfo" : "1.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd108",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Utility classes for ROME projects",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/com.rometools/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://rometools.com/rome-utils";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "rome-utils",
+ "summary" : "Utility classes for ROME projects",
+ "versionInfo" : "1.18.0"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd109",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "A complete, Java-based solution for accessing,
manipulating, \n\t\tand outputting XML data",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.jdom/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.jdom.org";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "NOASSERTION",
+ "name" : "JDOM",
+ "originator" : "Organization:JDOM",
+ "summary" : "A complete, Java-based solution for accessing, manipulating,
\n\t\tand outputting XML data",
+ "versionInfo" : "2.0.6.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd110",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-ocr-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika OCR parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd111",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Commons Exec is a library to reliably execute
external processes from within the JVM.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.commons/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://commons.apache.org/proper/commons-exec/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Commons Exec",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Commons Exec is a library to reliably execute external
processes from within the JVM.",
+ "versionInfo" : "1.3"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd112",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.tika/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://tika.apache.org/tika-parser-pdf-module/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache Tika PDF parser module",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "versionInfo" : "2.4.1"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd113",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.apache.org/pdfbox-parent/pdfbox/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache PDFBox",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents.",
+ "versionInfo" : "2.0.26"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd114",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents. \n This artefact contains commandline tools
using Apache PDFBox.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.apache.org/pdfbox-parent/pdfbox-tools/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache PDFBox tools",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents. \n This artefact contains commandline tools
using Apache PDFBox.",
+ "versionInfo" : "2.0.26"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd115",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents. \n This artefact contains the PDFDebugger.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" :
"pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "https://www.apache.org/pdfbox-parent/pdfbox-debugger/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache PDFBox Debugger",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache PDFBox library is an open source Java tool for
working with PDF documents. \n This artefact contains the PDFDebugger.",
+ "versionInfo" : "2.0.26"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd116",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "The Apache JempBox library is an open source Java tool
that implements Adobe's XMP(TM)\n specification. JempBox is a subproject of
Apache PDFBox.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
+ "referenceLocator" : "pkg:maven/org.apache.pdfbox/[email protected]",
+ "referenceType" : "purl"
+ } ],
+ "filesAnalyzed" : false,
+ "homepage" : "http://www.apache.org/pdfbox-parent/jempbox/";,
+ "licenseConcluded" : "NOASSERTION",
+ "licenseDeclared" : "Apache-2.0",
+ "name" : "Apache JempBox",
+ "originator" : "Organization:The Apache Software Foundation",
+ "summary" : "The Apache JempBox library is an open source Java tool that
implements Adobe's XMP(TM)\n specification. JempBox is a subproject of
Apache PDFBox.",
+ "versionInfo" : "1.8.16"
+ }, {
+ "SPDXID" : "SPDXRef-gnrtd117",
+ "copyrightText" : "UNSPECIFIED",
+ "description" : "Apache Tika is a toolkit for detecting and extracting
metadata and\n structured text content from various documents using existing
parser\n libraries.",
+ "downloadLocation" : "NOASSERTION",
+ "externalRefs" : [ {
+ "referenceCategory" : "PACKAGE-MANAGER",
[... 2220 lines stripped ...]
