{ "SPDXID": "SPDXRef-DOCUMENT", "name": "protobuf-java-util-0.25.1-3.oe2403.aarch64.rpm", "spdxVersion": "SPDX-2.2", "creationInfo": { "created": "2026-05-14T14:17:38.370562542Z", "creators": [ "openeuler_creator" ] }, "dataLicense": "CC0-1.0", "documentNamespace": "https://sbom.openEuler.org/protobuf-java-util-0.25.1-3.oe2403.aarch64.rpm", "packages": [ { "SPDXID": "SPDXRef-rpm-google-gson-2.8.2", "name": "google-gson", "checksums": [ { "algorithm": "SHA256", "checksumValue": "905a10e28f4e68294c2f96c685605c85a74b2633db507090591d2028d49d181e" } ], "description": "Gson is a Java library that can be used to convert a Java object into its JSON representation.\nIt can also be used to convert a JSON string into an equivalent Java object. Gson can work with\narbitrary Java objects including pre-existing objects that you do not have source-code of.\nThere are a few open-source projects that can convert Java objects to JSON. However, most of them\nrequire that you place Java annotations in your classes; something that you can not do if you do\nnot have access to the source-code. Most also do not fully support the use of Java Generics.\nGson considers both of these as very important design goals.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/google-gson@2.8.2-4.oe2403?arch=noarch&epoch=0&upstream=google-gson-2.8.2-4.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.gson/gson@2.8.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/gson", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "A Java library that can be used to convert Java Objects into their JSON representation", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.8.2-4.oe2403" }, { "SPDXID": "SPDXRef-rpm-guava-31.1", "name": "guava", "checksums": [ { "algorithm": "SHA256", "checksumValue": "778b335707ba41c64b7766730d7efd1484613c1f56cdc034a92d656925f22d0c" } ], "description": "Guava is a set of core Java libraries from Google that includes new collection\ntypes (such as multimap and multiset), immutable collections, a graph library,\nand utilities for concurrency, I/O, hashing, caching, primitives, strings,\nand more! It is widely used on most Java projects within Google, and widely\nused by many other companies as well.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/guava@31.1-1.oe2403?arch=noarch&epoch=0&upstream=guava-31.1-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/failureaccess@1.0.1", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.guava/guava@31.1.jre", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/google/guava", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "Google Core Libraries for Java", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:31.1-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08", "name": "java-1.8.0-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9701631b5d5678e4b21aeb9b900b01af4844ef31390e4c0231b90ecdfa962788" } ], "description": "The OpenJDK runtime environment 8 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-1.8.0-openjdk-headless@1.8.0.412.b08-5.oe2403?arch=aarch64&epoch=1&upstream=java-1.8.0-openjdk-1.8.0.412.b08-5.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b1b3fdf018a1e56077a4ebfbf1c3b931724c3cb9@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/ba1df16b7f023fb40ae84e78e625ec8bc6a480cb@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/36de6cae9af5f0286d2ccd10c1d83a7f38525685@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/2b7bb1ad3276cd6fb89c339c7db9297c0fe6d422@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/966760dea7963650198d6f8588946be14b1cb16d@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/00ecf0ca3c8b14a97606c772e5b00c462a3f48f9@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/fd5f4412e6cb8c15a628cfc5a42cf7b56985ae24@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/39d841f450eaac46e53105a9b0729694761cb823@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/3ca034d9352abe8cad825c1365a4358034bba8bb@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/feece42d74b15d04ee80f530e67f81686a8e0080@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/1ef5c67723d555647a64ac06b19805057e7d7bce@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/4e4e0e58824eb29f6afbca7ce25c4cff36b22fef@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/fb18b2010327230f809355c298371ee07c21cd06@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/74db17c8664cf036855c653bb88bc49df5156e33@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8963ca6888c838222c30b58e20a2012d2d8d2058@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/475918c55d36c90691aa2b53dc1f501a3bcc6675@1.0.0", "referenceType": "checksum" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/b48360bd50b7d871a312d165279c0b55fa96f47d@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 8", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:1.8.0.412.b08-5.oe2403" }, { "SPDXID": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9", "name": "java-11-openjdk-headless", "checksums": [ { "algorithm": "SHA256", "checksumValue": "9bfee2dbbc8b7649c62865d01f7fe129fbdd02ad53cbe5533f5634d80002505f" } ], "description": "The OpenJDK runtime environment 11 without audio and video support.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/java-11-openjdk-headless@11.0.23.9-1.oe2403?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.23.9-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "EXTERNAL_MANAGER", "referenceLocator": "pkg:maven/sha1/8d03138758eab35c1254a62c952f71e7942e39f5@1.0.0", "referenceType": "checksum" } ], "filesAnalyzed": false, "homepage": "http://openjdk.java.net/", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "OpenJDK Headless Runtime Environment 11", "supplier": "Organization: http://openeuler.org", "versionInfo": "1:11.0.23.9-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-javapackages-filesystem-5.3.0", "name": "javapackages-filesystem", "checksums": [ { "algorithm": "SHA256", "checksumValue": "17be444ced5b79c5b39a135d13574cba99427b5e0bb79b6ee0382f495baf06e3" } ], "description": "The javapackages-filesystem package contains some basic directories into which\nJava packages install their content.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/javapackages-filesystem@5.3.0-6.oe2403?arch=noarch&epoch=0&upstream=javapackages-tools-5.3.0-6.oe2403.src.rpm", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/fedora-java/javapackages", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "Filesystem layout for java packages", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:5.3.0-6.oe2403" }, { "SPDXID": "SPDXRef-rpm-jsr-305-3.0.2", "name": "jsr-305", "checksums": [ { "algorithm": "SHA256", "checksumValue": "1686686b4e0ecc03f8566b4d1cb08bd2a15209af0aa8741b89fe8ef5d93f459d" } ], "description": "This package contains reference implementations, test cases, and other\ndocuments for Java Specification Request 305: Annotations for Software Defect\nDetection.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/jsr-305@3.0.2-1.oe2403?arch=noarch&epoch=0&upstream=jsr-305-3.0.2-1.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/org.jsr-305/ri@3.0.2", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://code.google.com/p/jsr-305", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "Correctness annotations for Java code", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:3.0.2-1.oe2403" }, { "SPDXID": "SPDXRef-rpm-protobuf-java-25.1", "name": "protobuf-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "49566c4a3a795fd44aadd0e629d7936f2332eb5b3722ccf5c2426d69253d4360" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf-java@25.1-3.oe2403?arch=noarch&epoch=0&upstream=protobuf-25.1-3.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@3.25.1", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "https://github.com/protocolbuffers/protobuf", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:25.1-3.oe2403" }, { "SPDXID": "SPDXRef-rpm-protobuf2-java-2.5.0", "name": "protobuf2-java", "checksums": [ { "algorithm": "SHA256", "checksumValue": "7773cdef6fcc8b65c5789ccbed482991f9fd3f828404dd59e7ba843ae3272546" } ], "description": "This package contains Java Protocol Buffers runtime library.", "downloadLocation": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/protobuf2-java@2.5.0-5.oe2403?arch=aarch64&epoch=0&upstream=protobuf2-2.5.0-5.oe2403.src.rpm", "referenceType": "purl" }, { "referenceCategory": "PROVIDE_MANAGER", "referenceLocator": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0", "referenceType": "purl" } ], "filesAnalyzed": false, "homepage": "http://code.google.com/p/protobuf/", "sourceInfo": "acquired package info from repodata DB: repodata/6a4762c6f9f76cc1a4c44e432c97d08c2803b6e0e96a0a4bdf1aec71664120f2-primary.sqlite.bz2", "summary": "Java Protocol Buffers runtime library", "supplier": "Organization: http://openeuler.org", "versionInfo": "0:2.5.0-5.oe2403" } ], "relationships": [ { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-google-gson-2.8.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-guava-31.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-1.8.0-openjdk-headless-1.8.0.412.b08" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-java-11-openjdk-headless-11.0.23.9" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-javapackages-filesystem-5.3.0" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-jsr-305-3.0.2" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf-java-25.1" }, { "spdxElementId": "SPDXRef-rpm-protobuf-java-util-25.1", "relationshipType": "DEPENDS_ON", "relatedSpdxElement": "SPDXRef-rpm-protobuf2-java-2.5.0" } ] }