{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-09-11T13:48:59Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "tomcat10-10.1.59-0.2.hum1", "documentNamespace": "https://fedoraproject.org/tomcat10-10.1.59-0.2.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "tomcat10", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-10.1.59-0.2.hum1.src.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10@10.1.59-0.2.hum1?arch=src&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "f38641f85cc4d2429880509eeeb8d7442d9db5c1ab3cbd134518b0bf0f77ea10"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\x1aL\\x05\\x03F;\\xf4AC\\xbb*\\xb9\\xfc\\x85h}'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: c85762c3e9e0ac065a03f65be19cea1a1ddcb6c59b576680a63c134c2651625c"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10", "name": "tomcat10", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "07120e46f036a321827871dbd942ee5c0200ce401e95a705473eb4523702e836"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'?\\ni\\xe0]\\xeaD\\x02\\x05\\x81{\\xfd\\t<*\\x82'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: 76382655fbf90ccfb6932606e74413d4a02ff0244cc2ea0276a2917db8896f99"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-admin-webapps", "name": "tomcat10-admin-webapps", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-admin-webapps-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-admin-webapps@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "d16f168133113e7a29a0db68346121bb5efabb0d2fe6555d47aed4d3cd0371b1"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'w\\xd4/~\\x93\\x10\\xaed\\x86(\\xe6e\\xe9!\\xaeU'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: c6e8f5665128e196aea82196e12c843e20ba293ef4228c4b65485e129e81dfcb"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-common", "name": "tomcat10-common", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-common-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-common@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "136f3247df5b50d936e5c56956154758e8c74a50e6c8eb7cceade1b90f6e69a3"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'[\\x0e\\xe2\\x8d\\xaf[\\xda\\x1f\\xb7C[\\xd7o\\xf7y\\x89'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: a4910af3fb889d26cb9f65628b2d5602599123b82c7bdf935243c51ba6588948"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-docs-webapp", "name": "tomcat10-docs-webapp", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-docs-webapp-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-docs-webapp@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "46e85e12296d8cd589ddc4ed3bc05dd79f23d1eb7bc230b8c1475617965f89a1"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'fl]PfRQ\\xa7\\x9a\\xbf\\x07w$*\\xf7\\xaf'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: 68396dec6fd984dd7a3c3599b71a670a4ba401dff6e0b84495e38ed544d010fa"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-el-5.0-api", "name": "tomcat10-el-5.0-api", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-el-5.0-api@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "a729d168bebb1cbc03596657ed4c3c020431ad069cc8c2be7731189238de8110"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'gv\\xff\\xed\\x11\\xc3s\\xf5Xp\\xd4s)\\xe1\\x0e\\xa2'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: 8a07c52112e5664bfdda1a626cd523193f29858354f4f8c0033b57fef26b2ca4"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "name": "tomcat10-jsp-3.1-api", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-jsp-3.1-api@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "c8f69690f5b3ce82d55b5e6b8b460f6849d82982a7127c7a750ad8d7cd2381c4"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\xab\\xc5\\xff\\xc5r\\xb4\\xeaV*(\\xf3\\xdc\\xe3`\\xd4\\xa3'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: d5753f93866eb77983d358692bcd73eaa1abc2df34896d16a46207a33ae794c6"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-lib", "name": "tomcat10-lib", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-lib-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-lib@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "26b6aabca90e549b31fd7cbdbb789353d3c3f0844916b749466ba988e0be5e1f"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\xeeM\\xbf\\x00\\x12\\xee\\x98qK \\xbf\\x89\\xe8\\xc1d\\xcd'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: df59c2429eb460898c6c635dfa76a2aab545aab952b8fa7122f06afb23b3771b"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "name": "tomcat10-servlet-6.0-api", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-servlet-6.0-api@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "781a71424c09fd26eb566147f7ab1d23a5737ccdd3f44c2582da5078765be640"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\xbf\\xaaT\\x06G\\xa3ds\\xc0(\\xc9t\\xf5%\\x9f\\xbc'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: 4862c552c5e89a52e2d3843126fc7964029ed86dd1ac918ea8c4a5f4dba9834c"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-user-instance", "name": "tomcat10-user-instance", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-user-instance-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-user-instance@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "3e61ad2fa013281035e3872e7e9a8d4b49258baaa8af517f8ffa48d91c81bd16"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\xd4\\xec\\xef\\xba\\x85\\xe4\\x12`\\x0b\\xaf\\x125~\\xd6:['"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: 56af1cad4fdcd425b3e68d8a8a4cc21f882d760787793420bc7c52e0be39625f"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-webapps", "name": "tomcat10-webapps", "versionInfo": "10.1.59:10.1.59-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-webapps-10.1.59-0.2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-webapps@10.1.59-0.2.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "d47e925d74f6bd6f7184a1799f6bcbf73ae9669aa6b835d464ccd10b0b028c15"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b'\\xdf\\r\\xf8\\xaf\\xccs\\xc7\\xf0\\xfb\\x05<gO\\x15\\xc4\\x13'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sha256header: ea9fc46eff5e65fb34301a9fe20c5310eb6da5111e4d194f3f3bb19c7ae1dbdc"}]}, {"SPDXID": "SPDXRef-Source0", "name": "apache-tomcat-10.1.59", "versionInfo": "src", "packageFileName": "apache-tomcat-10.1.59-src.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/tomcat/apache-tomcat-10.1.59-src.tar.gz/sha512/19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea/apache-tomcat-10.1.59-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-10.1.59@src?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/tomcat/apache-tomcat-10.1.59-src.tar.gz/sha512/19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea/apache-tomcat-10.1.59-src.tar.gz&checksum=sha512:19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "apache-tomcat-10.1.59", "versionInfo": "src", "downloadLocation": "https://downloads.apache.org/tomcat/tomcat-10/v10.1.59/src/apache-tomcat-10.1.59-src.tar.gz", "packageFileName": "apache-tomcat-10.1.59-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-10.1.59@src?download_url=https://downloads.apache.org/tomcat/tomcat-10/v10.1.59/src/apache-tomcat-10.1.59-src.tar.gz&checksum=sha256:83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}]}, {"SPDXID": "SPDXRef-Source1", "name": "KEYS", "versionInfo": "unknown", "packageFileName": "KEYS", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "850f793865c1b4a64ba505429702e32a20d71a3accb81b34fb3bf9989af7c83c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/KEYS"}]}, {"SPDXID": "SPDXRef-Source2", "name": "tomcat", "versionInfo": "10.1.conf", "packageFileName": "tomcat-10.1.conf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "33c25908696a6d2b4aeced8e8a361c6fb94d7c240023867af52e630253be851a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@10.1.conf"}]}, {"SPDXID": "SPDXRef-Source3", "name": "tomcat", "versionInfo": "10.1.service", "packageFileName": "tomcat-10.1.service", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "e749c7296fae7c69dd355885b5ad501f6787c9621846cc2057e9cba67513fbf8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@10.1.service"}]}, {"SPDXID": "SPDXRef-Source4", "name": "tomcat-10.1-locate", "versionInfo": "java.sh", "packageFileName": "tomcat-10.1-locate-java.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "bf67fa24d245f6136abb2fa9da10d63cb17653a3c100251e919704b620709146"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-locate@java.sh"}]}, {"SPDXID": "SPDXRef-Source5", "name": "tomcat-10.1", "versionInfo": "run.sh", "packageFileName": "tomcat-10.1-run.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "f24cf0a4441057f5e183010e22e0c839116a6e9f412948036f7ca189c7f8f2b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@run.sh"}]}, {"SPDXID": "SPDXRef-Source6", "name": "tomcat-10.1", "versionInfo": "RUNNING.txt", "packageFileName": "tomcat-10.1-RUNNING.txt", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "1d5d462053122f66f289a0167274f545781f809162d708f705c30873c3b43d67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@RUNNING.txt"}]}, {"SPDXID": "SPDXRef-Source7", "name": "tomcat-10.1-user-instance", "versionInfo": "create.sh", "packageFileName": "tomcat-10.1-user-instance-create.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "be7b50f32fbcab0b1a3bda09011133ede83f7016594c44ba5cb15df18bde95bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-user-instance@create.sh"}]}, {"SPDXID": "SPDXRef-Source8", "name": "tomcat-10.1", "versionInfo": "setenv.sh", "packageFileName": "tomcat-10.1-setenv.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "769750a46503f7fc0fc5ec01dd88fe9f25cbd18c6d7f39242195307e38ca4c99"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@setenv.sh"}]}, {"SPDXID": "SPDXRef-Source9", "name": "tomcat-10.1-user-instance", "versionInfo": "create.asciidoc", "packageFileName": "tomcat-10.1-user-instance-create.asciidoc", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "de8374500ad60d2b85f5c44075b7c14c633fb88f7609efc8fdea56b61791a755"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-user-instance@create.asciidoc"}]}, {"SPDXID": "SPDXRef-Buildroot-tomcat10-noarch", "name": "tomcat10-buildroot-noarch", "versionInfo": "63513c8f", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-noarch", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-noarch", "name": "abattis-cantarell-vf-fonts", "versionInfo": "0.301-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/abattis-cantarell-vf-fonts-0.301-18.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8071144b64145451fbd55f4575094016"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/abattis-cantarell-vf-fonts@0.301-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-noarch", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-noarch", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 49f9259756d5c706df2b6570ff5b5cea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-noarch", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-lib-noarch", "name": "ant-lib", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-lib-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: fcf2508d20a6b8de8f7b4bf52b8c6957"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-lib@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-openjdk25-noarch", "name": "ant-openjdk25", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-openjdk25-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 668bd2b590358e26b1ae5c2b95aedbfa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-openjdk25@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-noarch", "name": "ant", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3af86d196650e7e0bb937c9cf6530d68"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aopalliance-noarch", "name": "aopalliance", "versionInfo": "1.0-8.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aopalliance-1.0-8.fc44.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bbdaa454589ec768d516fefa81e2f833"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aopalliance@1.0-8.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-cli-noarch", "name": "apache-commons-cli", "versionInfo": "1.10.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-cli-1.10.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 93801c268fdb5f74d1de6c63f467e7d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-cli@1.10.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-codec-noarch", "name": "apache-commons-codec", "versionInfo": "1.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-codec-1.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: abdd0a2509ff59b6923dc3c51eac2424"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-codec@1.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-compress-noarch", "name": "apache-commons-compress", "versionInfo": "1.28.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-compress-1.28.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d78a3aa33901a2f6d48b4b24c0cb0bfe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-compress@1.28.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-io-noarch", "name": "apache-commons-io", "versionInfo": "1:2.20.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-io-2.20.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 071df2b159babe740e0f33792d16e903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-io@2.20.0-3.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-lang3-noarch", "name": "apache-commons-lang3", "versionInfo": "3.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-lang3-3.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3778bd2bfa11e6ee3ae4e0bcd245d4fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-lang3@3.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bndlib-noarch", "name": "aqute-bndlib", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bndlib-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d634280e90252a1fc55651316d67577c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bndlib@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bnd-noarch", "name": "aqute-bnd", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bnd-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 44c749a2ebc0d9acce2b01260ae20737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bnd@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-noarch", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 25236c26c96434cd2c084d5df98e55cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-noarch", "name": "authselect-libs", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-libs-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b14a21f672fb8a2b32fa25dee98404bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-noarch", "name": "authselect", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4c9189f00d4ea34aaac756cff82ccdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-noarch", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 35c598d1f15aba91f61b244abf8d0fbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bcel-noarch", "name": "bcel", "versionInfo": "6.10.0-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/bcel-6.10.0-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6e5291a1b0a758031886f416f2326655"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bcel@6.10.0-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-beust-jcommander-noarch", "name": "beust-jcommander", "versionInfo": "1.82-29.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/beust-jcommander-1.82-29.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f84e8aada4d5d00ce0e221d811d9b88b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/beust-jcommander@1.82-29.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-noarch", "name": "binutils", "versionInfo": "2.46.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: af80d8495b28db44fe34df5474e26f80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-noarch", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-noarch", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: eed9f8d38229149ee3ba920f26ec2634"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-noarch", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: ed5ad98a73dbc065c211ed6d9a6be8bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-noarch", "name": "ca-certificates", "versionInfo": "2025.2.80_v9.0.304-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2025.2.80_v9.0.304-9.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8280885c60ebda1b9261bdb611c6bf85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-noarch", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-noarch", "name": "coreutils-common", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d2aee0d1bb96b62e637baca6ed52bda3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-noarch", "name": "coreutils", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: de0c31a752b4c84fe8355fc07d7c7e73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-noarch", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-noarch", "name": "cracklib", "versionInfo": "2.10.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cracklib-2.10.3-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3f9ad52e2eccdefe42c677227d92f9f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-noarch", "name": "crypto-policies-config-default", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 879e05f9fee2fffc9b0863b62ee0784c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-noarch", "name": "crypto-policies", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 01283c07f63751da93fa1cfe352e124f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-noarch", "name": "curl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 78c957a3eee0fecb9dacd620650b92ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-noarch", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 266c623e6d845c8594aa574261208db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-noarch", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-default-fonts-core-sans-noarch", "name": "default-fonts-core-sans", "versionInfo": "4.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/default-fonts-core-sans-4.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 86921a0e77b0846c3b4c5197b0ed205f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/default-fonts-core-sans@4.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-noarch", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dola-bsx-noarch", "name": "dola-bsx", "versionInfo": "1.3.2-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/d/dola-bsx-1.3.2-10.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5eafd60d39ae15ef7d17269f6e650ccf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dola-bsx@1.3.2-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-noarch", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ecj-noarch", "name": "ecj", "versionInfo": "1:4.23-16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ecj-4.23-16.hum1.noarch.rpm", "licenseDeclared": "EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 38dc05bbd70ac42f51d4be14c0b168f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ecj@4.23-16.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-noarch", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-noarch", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-noarch", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c9b05c1c56e6b6e2e662124e9113f35c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-noarch", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 06a9e7b4e1ae267637c31a55908c58ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-noarch", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d6b7fc024c1650a5d07a866a0bee6173"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-noarch", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e4968bf39e3fae91e3c199b8ae734a26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-noarch", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-noarch", "name": "expat", "versionInfo": "2.8.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 95cbb0adcdcc44e0c5a7e8663c32b754"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-noarch", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3011bd0b02ede9edac71a65e99147e3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-noarch", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-noarch", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a6149e4767a7cf4d382b9c7363233909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-noarch", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e149bc26d884bf5a5ee6102ad3247a1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-noarch", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: fe5a4416f64ae8bf85a0f6da30837f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fontconfig-noarch", "name": "fontconfig", "versionInfo": "2.18.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fontconfig-2.18.3-1.hum1.x86_64.rpm", "licenseDeclared": "HPND AND LicenseRef-Fedora-Public-Domain AND Unicode-DFS-2016", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8040218e1f79b34c1fa979a5b843ec47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fontconfig@2.18.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-filesystem-noarch", "name": "fonts-filesystem", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-filesystem-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 51b74135abe35cee598865729a7c346d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-filesystem@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-noarch", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-noarch", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-noarch", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-freetype-noarch", "name": "freetype", "versionInfo": "2.14.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/freetype-2.14.3-2.hum1.x86_64.rpm", "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND LicenseRef-Fedora-Public-Domain AND Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f83520986455d13c893c08f081949538"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/freetype@2.14.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-noarch", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-noarch", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-noarch", "name": "gdb-minimal", "versionInfo": "17.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bc6234f1f13c2975b1d28e47af9678a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-noarch", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.23-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 16d5cf0e1a204da7d8dfec016f321ee0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-noarch", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-noarch", "name": "glibc-common", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: cfe72f886d7d4fa49e8668bced9cd22d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-noarch", "name": "glibc-gconv-extra", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d2d43a7a8a4f864292e9ae44af008852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-noarch", "name": "glibc-minimal-langpack", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 52cdd26f225cb3f1ad4c09d8aec1af53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-noarch", "name": "glibc", "versionInfo": "2.43-8.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-8.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: ffe770a35e80e35734a94f18fedb0f9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-noarch", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8333c5d90507e9736f0e303c1d522bc7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-noarch", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-noarch", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-noarch", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-noarch", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9f2721ea3da813f95e0ad372005b7529"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-noarch", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: cacaf2b33174d8b69711aa44ccc468fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-noarch", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f03517c24814af85fc2cf0c88c52cc3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-noarch", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1558980b4762e26e31e9250935327328"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-noarch", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 29926505c40dfc97edbcac3739fa6fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-noarch", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8d857842147cc33655aa852ce16a6d0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-noarch", "name": "gnutls", "versionInfo": "3.8.13-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4465107c8a805de52d68f9358bfc23f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-noarch", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-gson-noarch", "name": "google-gson", "versionInfo": "2.12.1-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-gson-2.12.1-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4ca5ccf49194732e4664592a320185ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-gson@2.12.1-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-guice-noarch", "name": "google-guice", "versionInfo": "5.1.0-33.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-guice-5.1.0-33.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a0a76b4165c7e37992253e5272e02667"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-guice@5.1.0-33.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-fonts-common-noarch", "name": "google-noto-fonts-common", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-fonts-common-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d529a78da911404bd76fe292007af60c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-fonts-common@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-noarch", "name": "google-noto-sans-vf-fonts", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-sans-vf-fonts-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d73b2c01493c0a291f525b8549dafc65"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-sans-vf-fonts@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-noarch", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-noarch", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e9b48d78eb8bf0c4148539f2d7590630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-guava-noarch", "name": "guava", "versionInfo": "33.5.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/guava-33.5.0-1.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: de6ba95a6bfd36c3838bd3bd24e3d398"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/guava@33.5.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-noarch", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-client-noarch", "name": "httpcomponents-client", "versionInfo": "4.5.14-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-client-4.5.14-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1bafcfae5004435463e1364739e3e242"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-client@4.5.14-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-core-noarch", "name": "httpcomponents-core", "versionInfo": "4.4.16-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-core-4.4.16-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5bf74ba6d5dd745c3332abcd92e308d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-core@4.4.16-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-noarch", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-noarch", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-noarch", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-noarch", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 13293a1d14d37f008481dc8932e105a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-noarch", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-annotations-noarch", "name": "jakarta-annotations", "versionInfo": "1.3.5-46.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-annotations-1.3.5-46.fc44.noarch.rpm", "licenseDeclared": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 2347161d72d8ba3f213287808c751383"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-annotations@1.3.5-46.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-inject1.0-noarch", "name": "jakarta-inject1.0", "versionInfo": "1.0.5-12.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-inject1.0-1.0.5-12.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 57e0baf53b432ccdc006466f2f976b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-inject1.0@1.0.5-12.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansi-noarch", "name": "jansi", "versionInfo": "2.4.2-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jansi-2.4.2-2.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b17661d6e19bee064d6402a7aac5eea6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansi@2.4.2-2.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-noarch", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-noarch", "name": "java-25-openjdk-crypto-adapter", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e0da4608269ee77093544fe10a747413"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-crypto-adapter@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-noarch", "name": "java-25-openjdk-devel", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-devel-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: caa63261573ce9c8595508ba0a1522f0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-devel@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-noarch", "name": "java-25-openjdk-headless", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-headless-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 2d362a4a05a90a0d4d24c8af022e2e1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-headless@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-noarch", "name": "java-25-openjdk", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d0c5debb4abd8cd627756fd5e39ea1f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-noarch", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-common-noarch", "name": "javapackages-common", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-common-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0c58747098275968eca3af2bce256a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-common@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-filesystem-noarch", "name": "javapackages-filesystem", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-filesystem-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: dfb507d447bceb292455cfa3d3742fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-filesystem@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-noarch", "name": "javapackages-local-openjdk25", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-local-openjdk25-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 32bdb8329469e93ed1221b42bee539b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-local-openjdk25@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-tools-noarch", "name": "javapackages-tools", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-tools-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 248bd63f16318539e0ef4e6243948e92"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-tools@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jcl-over-slf4j-noarch", "name": "jcl-over-slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jcl-over-slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1615e220e97509ac77f2d7c2821503ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jcl-over-slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-noarch", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e77db91a34f0bbe04e9c920b4509229b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jsr-305-noarch", "name": "jsr-305", "versionInfo": "3.0.2-44.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jsr-305-3.0.2-44.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f4f880c3d5a22a484ed421f3bdb698b4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jsr-305@3.0.2-44.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-noarch", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-noarch", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f3314a91e4eea1720410bcd3b770ab81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-noarch", "name": "krb5-libs", "versionInfo": "1.22.2-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-9.1.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: fcd0b9f63f73692d52c332ab30217e6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-common-noarch", "name": "libX11-common", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-common-1.8.13-2.hum1.noarch.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: debe6e4308c8a575143b5f76b3bebcd4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11-common@1.8.13-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-noarch", "name": "libX11", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-1.8.13-2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8d95a6ed42ae135faef90837e6b5bac8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11@1.8.13-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXau-noarch", "name": "libXau", "versionInfo": "1.0.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXau-1.0.12-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8ac42f7764153997f1f83b4fe4a22c88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXau@1.0.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXcomposite-noarch", "name": "libXcomposite", "versionInfo": "0.4.6-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXcomposite-0.4.6-8.hum1.x86_64.rpm", "licenseDeclared": "MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0c14126b353aaab5b82f92c4391d2805"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXcomposite@0.4.6-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXext-noarch", "name": "libXext", "versionInfo": "1.3.6-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXext-1.3.6-6.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND HPND AND HPND-sell-variant AND SMLNJ AND MIT AND ISC AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4f60c3fb8c35590df93ecea57c2b7ce6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXext@1.3.6-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXi-noarch", "name": "libXi", "versionInfo": "1.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXi-1.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND SMLNJ AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 75783990ac8d8cf50e298bb095ff1425"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXi@1.8.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXrender-noarch", "name": "libXrender", "versionInfo": "0.9.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXrender-0.9.12-5.hum1.x86_64.rpm", "licenseDeclared": "HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7ae5ab05ae59ec072eba6c1300bf7be6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXrender@0.9.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXtst-noarch", "name": "libXtst", "versionInfo": "1.2.5-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXtst-1.2.5-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND HPND-sell-variant AND X11 AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a094f59851775fb31fcdc8224befe2cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXtst@1.2.5-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-noarch", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 778d6a835f1bfcb1eba15772105b50dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-noarch", "name": "libarchive", "versionInfo": "3.8.8-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.8-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0758bf73997040af83f49b583928ab2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.8-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-noarch", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3d2e4518c599f045df67f8766d514be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-noarch", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-noarch", "name": "libblkid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 640898d2ab2f2438f25b5d21b49c128b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-noarch", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 04bf9b2dab99d0b0957ddc802b552a3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-noarch", "name": "libcap-ng", "versionInfo": "0.9.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.5-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bee771867abba9896a92e8061074cbfd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-noarch", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 99e45918735b0a73e5d7fa59ca39d79c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-noarch", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f3c1be1d36e9f029f995536b6e55a86c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-noarch", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: efa036217a574dc291905e1d6787e5fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-noarch", "name": "libcurl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 43fd88b4ba65b9a7c53699d46553b5f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-noarch", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f286b987da4aba89effee118c74d63c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-noarch", "name": "libevent", "versionInfo": "2.1.13-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f569d4f8dc1520a6da8d71e8e2661a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-noarch", "name": "libfdisk", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4372d99deede31c20dc450a2b34bab60"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-noarch", "name": "libffi", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.5.2-3.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b379c80d092e884edca21229b22b9f0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.5.2-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-noarch", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 09d88d35bf7b1fdbe3596964d5a5b4d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfontenc-noarch", "name": "libfontenc", "versionInfo": "1.1.8-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfontenc-1.1.8-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bfc90dd31704ddb48cc01007c7fb6b67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfontenc@1.1.8-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-noarch", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 714d39cacbaa2869cb8986837cc7c051"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-noarch", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7f44b3ed25c62af7fca7534bcb5503d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-noarch", "name": "libgcrypt", "versionInfo": "1.12.2-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.2-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7e76c4be2288d8b74daf91e4bc1cceab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.2-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-noarch", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 656b1ba106369f9105acf64ed30e33fa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-noarch", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3c865a471949c8a9c6cb39d47d8f1352"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-noarch", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a39f7e39430a77e5e372eabb91b997cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-noarch", "name": "libksba", "versionInfo": "1.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 97c2ec2ec2c7c15552b2f9bfe8aaf020"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-noarch", "name": "liblastlog2", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0911552f951130c8ba1509649b98497d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-noarch", "name": "libmount", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: fead67f5f1cf6664db260063f7fe890f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-noarch", "name": "libnghttp2", "versionInfo": "1.69.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-5.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c6ae8f8b998ef4b924f4a7c483950da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-noarch", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5598615cbe06f72c2a2879a3aaf13699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-noarch", "name": "libnsl2", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnsl2-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 738ea6cbd6499c2495aa28d665c043b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-noarch", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-noarch", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpng-noarch", "name": "libpng", "versionInfo": "2:1.6.58-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpng-1.6.58-2.hum1.x86_64.rpm", "licenseDeclared": "zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1bd5b6396180ec2d447226eab0b14f27"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpng@1.6.58-2.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-noarch", "name": "libpsl", "versionInfo": "0.23.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.1-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5a6a0c1c67a57c39de62b7e2a8e21504"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-noarch", "name": "libpwquality", "versionInfo": "1.4.5-18.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpwquality-1.4.5-18.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 83fb1254a477bafd652ea86057ef79bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-noarch", "name": "libseccomp", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e2bd5d7f7cc8c493f79e31a71757cf2a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-noarch", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5bebcc7720fa8a5cc86351ed7298f152"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-noarch", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: acadf2edec720f9104493928ec56f3cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-noarch", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: efeb1527bdc98b7da6525ff307c93da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-noarch", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 39bac19c684ef55d632a47c43bb878c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-noarch", "name": "libsmartcols", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f8deb70cca766046d78bd7b71a3accb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-noarch", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-noarch", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 149536546e1810f679ce19b1be42e58e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-noarch", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 786c9eb6cf16e70afac24b687a58a734"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-noarch", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e377a290a5c1a3fe6380be2a69a90fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-noarch", "name": "libtirpc", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtirpc-1.3.7-3.hum1.x86_64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d270169aad39bef874590837735f6a1d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.7-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-noarch", "name": "libtool-ltdl", "versionInfo": "2.5.4-11.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.5.4-11.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 70ba9283722c13dd220b62e0337e67b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.5.4-11.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-noarch", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1cc5ed6dc9abd644761b1394fa848349"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-noarch", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7e5e59833d66366a60c5c01481be2c39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-noarch", "name": "libuuid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e3e9afb82e210b9217e4ad7d086cbafd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-noarch", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1e2d449e326eb9c384e7665561d3bf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcb-noarch", "name": "libxcb", "versionInfo": "1.17.0-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcb-1.17.0-8.hum1.x86_64.rpm", "licenseDeclared": "X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b65b0379db98877a8d53e1b8eed2fca1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcb@1.17.0-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-noarch", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 186f5d91cd0fb2f9753f3859f2eaca00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-noarch", "name": "libxml2-16", "versionInfo": "2.15.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 20dc73195f09f0687470eac50c6995ff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-noarch", "name": "libxml2", "versionInfo": "2.12.10-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/l/libxml2-2.12.10-6.fc44.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 580ab293715fe79dfd1d1ca00f335668"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2@2.12.10-6.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxslt-noarch", "name": "libxslt", "versionInfo": "1.1.45-0.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxslt-1.1.45-0.1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e56e1a0838c6f6d4a4b84d62945555fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxslt@1.1.45-0.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-noarch", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d3302b977dc6fd5cb29412a7d358541d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-noarch", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lksctp-tools-noarch", "name": "lksctp-tools", "versionInfo": "1.0.21-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lksctp-tools-1.0.21-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-only AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: de113f675e8eb42acd7085a585cae8e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lksctp-tools@1.0.21-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-noarch", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 202aef337d9998f9b16c9b81b42d4744"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-noarch", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lujavrite-noarch", "name": "lujavrite", "versionInfo": "1.2.3-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lujavrite-1.2.3-4.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6a4340b7b1681b6bbcdd5492b9fac2dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lujavrite@1.2.3-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-noarch", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9d26849f5c070c53a3c0eb03d2a7b3da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-lib-noarch", "name": "maven-lib", "versionInfo": "1:3.9.11-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-lib-3.9.11-11.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 06010a9ee38899f4508a7dfb1e5fe260"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-lib@3.9.11-11.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-resolver-noarch", "name": "maven-resolver", "versionInfo": "1:1.9.24-5.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-resolver-1.9.24-5.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 210b4335f129aa62423b2854e52b4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-resolver@1.9.24-5.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-shared-utils-noarch", "name": "maven-shared-utils", "versionInfo": "3.4.2-27.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-shared-utils-3.4.2-27.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9ecf41b89dea3030322e53754e4ad780"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-shared-utils@3.4.2-27.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-wagon-noarch", "name": "maven-wagon", "versionInfo": "3.5.3-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-wagon-3.5.3-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 11788a192192c068f8990f624f535afd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-wagon@3.5.3-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mkfontscale-noarch", "name": "mkfontscale", "versionInfo": "1.2.4-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mkfontscale-1.2.4-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e874c6a940690035fb739108f879b703"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mkfontscale@1.2.4-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-noarch", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 2510cb8c8936230f7136343d313013d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-noarch", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-noarch", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-noarch", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1f7dd08e1f7f3a21dea4d74150ca7e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-noarch", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: dec047659ca3ed7f2ade5edb5417768e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-noarch", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: ce32706efbf4cd25374b30a8c35c8b33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-noarch", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 53eeed67908e3a4eb1daa0c352dd6c6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-noarch", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 79832c509c9ece7d8af6a7967f6c6d36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nspr-noarch", "name": "nspr", "versionInfo": "4.39.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nspr-4.39.0-4.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 396373e128a8a9c6f55ee96be904f162"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nspr@4.39.0-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-freebl-noarch", "name": "nss-softokn-freebl", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-freebl-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a28591b689483ebff78b93f8e9460593"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn-freebl@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-noarch", "name": "nss-softokn", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 846a54f364bbdda33fb6d4be581ab3fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-sysinit-noarch", "name": "nss-sysinit", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-sysinit-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 288cb3a44497200d81c83be021173b2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-sysinit@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-util-noarch", "name": "nss-util", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-util-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f8165f38432edc8e9fca461056d0840b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-util@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-noarch", "name": "nss", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 64a3a265afb737a4f0b750a184d30cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-objectweb-asm-noarch", "name": "objectweb-asm", "versionInfo": "9.7.1-15.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/objectweb-asm-9.7.1-15.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 867a2025c5f1033aacbda91b105a9366"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/objectweb-asm@9.7.1-15.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-noarch", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-noarch", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-noarch", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.13-4.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a2d4cf9dfcc75dc0b1203812c66474a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-noarch", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8369e6248ade4d151e67b35b4687a584"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-noarch", "name": "openssl-libs", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 07b4fddbc7a905355706d23cb7793b8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-annotation-noarch", "name": "osgi-annotation", "versionInfo": "8.1.0-23.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-annotation-8.1.0-23.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bbdb9a5437d12374dc5659d83c0bb03a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-annotation@8.1.0-23.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-compendium-noarch", "name": "osgi-compendium", "versionInfo": "7.0.0-43.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-compendium-7.0.0-43.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 74164cab659544c0613c260e2d2e7ef5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-compendium@7.0.0-43.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-core-noarch", "name": "osgi-core", "versionInfo": "8.0.0-39.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-core-8.0.0-39.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7f9e086639fc2c074e1d19304c0e3c55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-core@8.0.0-39.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-noarch", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 68257f4d7431d3b1885712f25b4f5058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-noarch", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 75311ea12371b64af16c0e5594ded602"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-noarch", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-noarch", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: fca8dc3ed64b8bdc9ea406b714989970"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-noarch", "name": "pam", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 45e8bb3359f7a1bcea2cba7230567828"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-noarch", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0ae052d45ed91aae4aa901512b427f23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-noarch", "name": "pcre2-syntax", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.47-1.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: df6d2e760944267916c19d5af1dbc84b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-noarch", "name": "pcre2", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.47-1.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a3612da414f5ebd0589c219b97004eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-noarch", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-noarch", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-noarch", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-noarch", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-cipher-noarch", "name": "plexus-cipher", "versionInfo": "2.0-34.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-cipher-2.0-34.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9dff9d0430ada3c1b9c43385f29c4202"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-cipher@2.0-34.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-classworlds-noarch", "name": "plexus-classworlds", "versionInfo": "2.8.0-17.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-classworlds-2.8.0-17.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Plexus", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b7a7aa34fdb9222cd0c6b9f8cf572e6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-classworlds@2.8.0-17.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-noarch", "name": "plexus-containers-component-annotations", "versionInfo": "2.2.0-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-containers-component-annotations-2.2.0-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT AND xpp", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 770ea353ec5d4c24a4449ceda6edfcc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-containers-component-annotations@2.2.0-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-interpolation-noarch", "name": "plexus-interpolation", "versionInfo": "1.27-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-interpolation-1.27-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Apache-1.1 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4705c06b5fbfd263128020e4793cba14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-interpolation@1.27-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-noarch", "name": "plexus-sec-dispatcher", "versionInfo": "2.0-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-sec-dispatcher-2.0-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8903ab2bb8e4d7777424ca0ad6c3409d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-sec-dispatcher@2.0-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-utils-noarch", "name": "plexus-utils", "versionInfo": "3.5.1-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-utils-3.5.1-26.fc44.noarch.rpm", "licenseDeclared": "Apache-1.1 AND Apache-2.0 AND xpp AND BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 26b442c05eeffefca09cd48c4f8a3fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-utils@3.5.1-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-noarch", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-noarch", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3770c5ab4a851a9ca25915a7894f54c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-noarch", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-noarch", "name": "publicsuffix-list", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6d2c45dd0a145579643b8b5a47dbe37e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-noarch", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-noarch", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-noarch", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-javapackages-noarch", "name": "python3-javapackages", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-javapackages-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 3548fdaac08a2b434f1e132f1029b5e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-javapackages@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-noarch", "name": "python3-libs", "versionInfo": "3.14.7-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.7-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6d2b65364cc85799689099cf02c9c28e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-lxml-noarch", "name": "python3-lxml", "versionInfo": "6.1.1-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/p/python3-lxml-6.1.1-1.fc44.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-CMU AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 327f8c3a232a6f97a49c06ef931d1232"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-lxml@6.1.1-1.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-noarch", "name": "python3", "versionInfo": "3.14.7-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.7-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 880314b3581c817180ed5f0843897a38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-noarch", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-noarch", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-noarch", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: dad256ab45b2ff28db082647e11ab463"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-noarch", "name": "redhat-rpm-config", "versionInfo": "344-7.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-344-7.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9057eccff4e2b7a3cdf5cc4b9645508b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@344-7.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-noarch", "name": "rpm-build-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7b8006ab72d995ed9df2c603bafd4ba6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-noarch", "name": "rpm-build", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 55aafb3993eba97f35528cce9ac5d6c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-noarch", "name": "rpm-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a353e35a0b5f3fa4395d4450df788c6b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-noarch", "name": "rpm-plugin-selinux", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: e5636d0f7996ae59d14870b725d27b39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-noarch", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f8aaccff474ac2e0fb7c916a2869ae15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-noarch", "name": "rpm-sign-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4d84b318db5c5e865614398d432cb4be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-noarch", "name": "rpm", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a96976bd17319ce4d0ea0cfa2c16d793"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-noarch", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-noarch", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: a4c743d0bd5c5abe0e89da9d7acb245d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-noarch", "name": "selinux-policy-targeted", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7108297ff41d86cc219a9827586570e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-noarch", "name": "selinux-policy", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: ed31d3b586a0e9350f35005b7cef044f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-noarch", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-noarch", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 052953675603b8650e5d97c0f5faa6e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sisu-noarch", "name": "sisu", "versionInfo": "1:0.9.0~M3-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/sisu-0.9.0~M3-20.fc44.noarch.rpm", "licenseDeclared": "EPL-1.0 AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 4e91904462eac78765d47b37960e7aa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sisu@0.9.0~M3-20.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-slf4j-noarch", "name": "slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 51d44615299eeb9aa462cfde8b1a12cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-noarch", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b61e6927000756f1a7453e0ef6f79487"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-noarch", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c329708277b41fa5c79182b97dcd05ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-noarch", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-rpm-macros-261.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 787aadb981481eae0b75b1a0e8897e62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-noarch", "name": "systemd-shared", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-shared-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5db9ca8fa6c1f8d290eef7d9a109416d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-noarch", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1c7264a08531500bedc072ac1026a49f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-noarch", "name": "systemd", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 23fc880762b65a2cee0ec95528533e88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-noarch", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 2d9125f5ec73e194627aa82d115edf46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-noarch", "name": "tomcat-jakartaee-migration", "versionInfo": "1.0.9-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/t/tomcat-jakartaee-migration-1.0.9-9.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6a86de8b35fe9b8b69e0f9768f388384"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat-jakartaee-migration@1.0.9-9.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-noarch", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6e3945fdad8b17446f10429d0f919de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-noarch", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ttmkfdir-noarch", "name": "ttmkfdir", "versionInfo": "3.0.9-75.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/ttmkfdir-3.0.9-75.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 5ee459bd40632217d96101034db082da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ttmkfdir@3.0.9-75.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-java-noarch", "name": "tzdata-java", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-java-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: d9c2846961df5069696a40d2cbbd61f4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata-java@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-noarch", "name": "tzdata", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bb9d0cac51e578dbd6858d7a3f69451c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-noarch", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-noarch", "name": "util-linux-core", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 84e33f372554bfe9eeecc0f0d179d6a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-noarch", "name": "util-linux", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9070d680ed21fd42e3b0e988c47e0cb4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-noarch", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xml-common-noarch", "name": "xml-common", "versionInfo": "0.6.3-69.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xml-common-0.6.3-69.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 01a29366200f28727135436c000f206b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xml-common@0.6.3-69.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-core-noarch", "name": "xmvn-core", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-core-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 6b8e81c9f0a3c8c41e5ca773f5450439"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-core@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-generator-noarch", "name": "xmvn-generator", "versionInfo": "2.1.1-7.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-generator-2.1.1-7.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 65f4aa1d2d41b808fd4d5ae56cc0d093"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-generator@2.1.1-7.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-tools-noarch", "name": "xmvn-tools", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-tools-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 9e8ca0e64eba864777edb2192e587324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-tools@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-noarch", "name": "xorg-x11-fonts-Type1", "versionInfo": "7.5-43.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xorg-x11-fonts-Type1-7.5-43.hum1.noarch.rpm", "licenseDeclared": "HPND AND Adobe-Utopia AND Cronyx AND MIT AND Lucida-Bitmap-Fonts AND Bitstream-Charter AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: b4e2af302f24d3b88806b9db795c99c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xorg-x11-fonts-Type1@7.5-43.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-noarch", "name": "xxhash-libs", "versionInfo": "0.8.3-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.3-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 8e8b69e91a6ab99c261f44d383efd2e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.3-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-noarch", "name": "xz-libs", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 40b31750471c626a59b9c50cf29d582a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-noarch", "name": "xz", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0de88d5dbb3bbc77301612e918495548"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-noarch", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-noarch", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-noarch", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 1afc93af70228a741ab127580f779159"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-noarch", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-11T13:48:59Z", "comment": "sigmd5: 593ee2b10e36abc9883e112101c9b0aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"name": "rpm-extracted/tomcat10-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v4"}]}, {"name": "actions/setup-java", "SPDXID": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-java@v4"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v4"}]}, {"name": "bug69623-lib", "SPDXID": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/bug69623-lib/bug69623-lib"}]}, {"name": "contextCopyXMLFalse", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLFalse.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLFalse:contextCopyXMLFalse:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLFalse/contextCopyXMLFalse"}]}, {"name": "contextCopyXMLTrue", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLTrue.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLTrue:contextCopyXMLTrue:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLTrue/contextCopyXMLTrue"}]}, {"name": "h2", "SPDXID": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "versionInfo": "2.2.220", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:com.h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/com.h2database/h2@2.2.220"}]}, {"name": "junit", "SPDXID": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "versionInfo": "4.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:junit:junit:4.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/junit/junit@4.13.2"}]}, {"name": "non-static-resources", "SPDXID": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webresources/non-static-resources.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/non-static-resources/non-static-resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources2", "SPDXID": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources2:resources2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources2/resources2"}]}, {"name": "rsrc", "SPDXID": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rsrc:rsrc:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/rsrc/rsrc"}]}, {"name": "sample", "SPDXID": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/docs/appdev/sample/sample.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sample:sample:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/sample/sample"}]}, {"name": "taglibs-standard-impl", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "versionInfo": "1.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-impl@1.2.5"}]}, {"name": "taglibs-standard-spec", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "versionInfo": "1.2.5", "supplier": "Organization: Sun Microsystems, Inc.", "originator": "Organization: Sun Microsystems, Inc.", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "versionInfo": "10.1.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@10.1.39"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "versionInfo": "1.1.0-SNAPSHOT", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@1.1.0-SNAPSHOT"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "versionInfo": "10.1.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.39"}]}, {"name": "rpm-extracted/tomcat10-10.1.59-0.2.hum1.src", "SPDXID": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-admin-webapps-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "bootstrap", "SPDXID": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "75a45987288d482ce9a936cc6c335e6d3dc3d585"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/bootstrap@10.1.59"}]}, {"name": "tomcat-bootstrap", "SPDXID": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "75a45987288d482ce9a936cc6c335e6d3dc3d585"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/tomcat-bootstrap@10.1.59"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a69484d3b18fcb0ccd4e219106f103bd7e5713c0"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.59"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a69484d3b18fcb0ccd4e219106f103bd7e5713c0"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.59"}]}, {"name": "rpm-extracted/tomcat10-common-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-docs-webapp-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "el-api", "SPDXID": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "versionInfo": "5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "7a2b9fc079db66f9275b1a1bb1399a44341c0eb3"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/el-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/el-api/el-api@5.0"}]}, {"name": "rpm-extracted/tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "jsp-api", "SPDXID": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "versionInfo": "3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "cb60894b949eb0d3f2b4bf8246c9c20fe22fd5ac"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jsp-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jsp-api/jsp-api@3.1"}]}, {"name": "rpm-extracted/tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "annotations-api", "SPDXID": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "versionInfo": "2.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "757ce1c75087fb5bc3c7e8897acbaf905adbb7fe"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/annotations-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/annotations-api/annotations-api@2.1.1"}]}, {"name": "catalina", "SPDXID": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "99b16c05d36ed66aac3b966190b4d6e8eedbaf77"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina/catalina@10.1.59"}]}, {"name": "catalina-ant", "SPDXID": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "482f0429f9d02d500c6c63b7d8e232a5f73476c3"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ant.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ant/catalina-ant@10.1.59"}]}, {"name": "catalina-ha", "SPDXID": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "751174798dd43f26e1d6b1789cfffd4737531692"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ha.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ha/catalina-ha@10.1.59"}]}, {"name": "catalina-ssi", "SPDXID": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "ff537e813f7ba1e69306a4a8ebc9827f06e4c6d9"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ssi.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ssi/catalina-ssi@10.1.59"}]}, {"name": "catalina-storeconfig", "SPDXID": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e95a76f93cd5a19284306f7d612a2f898fcb7d19"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-storeconfig.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-storeconfig/catalina-storeconfig@10.1.59"}]}, {"name": "catalina-tribes", "SPDXID": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "08e2770861ddd77cfe3fd2fe76a3ba5fe299d03e"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-tribes.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-tribes/catalina-tribes@10.1.59"}]}, {"name": "jasper", "SPDXID": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "cf0e7a0707ebd9fa182af2a63516ef56d34fcc12"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper/jasper@10.1.59"}]}, {"name": "jasper-el", "SPDXID": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "d4d6f5a41533e69afd614bb54eed9f7396ab5e40"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper-el.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper-el/jasper-el@10.1.59"}]}, {"name": "jaspic-api", "SPDXID": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "versionInfo": "3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "4d307ede033797d6ab0ae6b6a29c7917641b363b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jaspic-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jaspic-api/jaspic-api@3.0"}]}, {"name": "tomcat-api", "SPDXID": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "64d91d86193d8602964e7be85d2a8fed929e052e"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-api:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_api:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@10.1.59"}]}, {"name": "tomcat-coyote", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "196d39e2ec4bfed2b41c37db386a39eaaeabfee6"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-coyote:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_coyote:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.59"}]}, {"name": "tomcat-coyote-ffm", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "d1c7ded9b5ab3aa3b3dbc1cb4238f6ec7473a36f"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote-ffm.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/tomcat-coyote-ffm/tomcat-coyote-ffm@10.1.59"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "0293ba530a13eb864645dc63d3e3c7def8ac76fd"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-dbcp.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@10.1.59"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "versionInfo": "10.1.59", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a24bd4855f81b9132fc20e8eccd1df5ce4df2cbc"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-jdbc.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.59"}]}, {"name": "tomcat-jni", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c5f6c39cfcb7ba72876c06a1fefac7c5b84301c8"}], "sourceInfo": "acquired package info from installed java archive: /usr/lib/java/tomcat/tomcat-jni.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jni:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jni:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@10.1.59"}]}, {"name": "tomcat-util", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "85c4d8b720b6a2d1c3f7c6214bc9e472a9b130aa"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.59"}]}, {"name": "tomcat-util-scan", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "bc65ad8ddae1dbf4ae4ee217677993d6ca802116"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util-scan.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util-scan:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util_scan:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.59"}]}, {"name": "tomcat-websocket", "SPDXID": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9f388bafca33b05b84372ae93a0d27d1e1aca315"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-websocket.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-websocket:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_websocket:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@10.1.59"}]}, {"name": "websocket-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "4231e3f9c4f397eba6caebb86c4c97ed157860f2"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-api/websocket-api@%40version%40"}]}, {"name": "websocket-client-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "5a5e74ea445e3641852788205a8add89a5be1b3b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-client-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-client-api/websocket-client-api@%40version%40"}]}, {"name": "rpm-extracted/tomcat10-lib-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "servlet-api", "SPDXID": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "versionInfo": "6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "4546010772de7aeb45bd634b41e967a05f713c2f"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/servlet-api.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND EPL-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/servlet-api/servlet-api@6.0"}]}, {"name": "rpm-extracted/tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-user-instance-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-webapps-10.1.59-0.2.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.2.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "1a8086ae5986d2a06aa4730f0199042bc8b47add"}, {"algorithm": "SHA256", "checksumValue": "b34bf8d5d989d365160a8156d3531be3046555c7917c0abe874dd9aa4faef38e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "SPDXID": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a46944ddd4dbf9bec8dc4b59fd8a13c3470b1a5c"}, {"algorithm": "SHA256", "checksumValue": "184c647c9bdb9be2498f666d374d5f4c76c5430c36000473a1f81837c28d3b4f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/broken.war", "SPDXID": "SPDXRef-File-...test-deployment-broken.war-574070a24514f7d7", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/context.jar", "SPDXID": "SPDXRef-File-...test-deployment-context.jar-1b657119890d31b2", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/context.war", "SPDXID": "SPDXRef-File-...test-deployment-context.war-6fd6f555c6ee027b", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-6cdcb336c25339c9", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}, {"algorithm": "SHA256", "checksumValue": "ee6c6b9f7ae1b5005cdfe3f0570cd8410b1a52176e40af48db1feeb8ec44e3ba"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLTrue.war", "SPDXID": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-00c93e6c19b1cb9a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}, {"algorithm": "SHA256", "checksumValue": "a50f2fb9a0e5fa0a2ad47dbbe78671455dd3cce591991c13e69610eb136d7b86"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextUnpackWARFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARFalse.war-68b854d3b5670d36", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextUnpackWARTrue.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARTrue.war-9c6966331ad7fb04", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/dir with spaces/context.jar", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.jar-fb6cfd6fd2c87dc5", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/dir with spaces/context.war", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.war-fe064f156e404498", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/noContext.war", "SPDXID": "SPDXRef-File-...test-deployment-noContext.war-f19e9ab8d9700491", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-59a8cc5422dcfc91", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}, {"algorithm": "SHA256", "checksumValue": "25917eeb22376c679e2fd8eb0aadd0b0e8441b2869c394c7bd3cb9de4ae8128b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-ac932e67073f5b15", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}, {"algorithm": "SHA256", "checksumValue": "796fcef4c6b0e8dc3a8a9bc0a7970a3acf9ef8d54ad53a3c8daed0d0b03bdd53"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources2.jar-84b0a4aa4872091d", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}, {"algorithm": "SHA256", "checksumValue": "3684638824a5cafc0aa9bdae1812e9120a867f2103ebce051ba2043120cc23de"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "SPDXID": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-16bb268042ad90b0", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}, {"algorithm": "SHA256", "checksumValue": "2e9e02e8a7688627091d600c62095ff7777cb0e61488df74a37fad7d590bc909"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69135-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69135-lib.jar-72809772e4b9df9a", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-7c156a08e377cb03", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}, {"algorithm": "SHA256", "checksumValue": "2f9c89cd47816c1661c5d12aeeb92e9999946b7bb66d9c294414015d334b84f0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/test-lib.jar", "SPDXID": "SPDXRef-File-...test-webapp-WEB-INF-lib-test-lib.jar-061c47ce30a61290", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/dir1-internal.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1-internal.jar-1e7fc7535ffbb1f2", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/dir1.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1.jar-0a3d05d453443aff", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/non-static-resources.jar", "SPDXID": "SPDXRef-File-...webresources-non-static-resources.jar-81aacadbe91f4552", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}, {"algorithm": "SHA256", "checksumValue": "f594fc2c53fd0a529ef4244ada35950db3743f020b5a3115c4b0499d5208c770"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/static-resources.jar", "SPDXID": "SPDXRef-File-...test-webresources-static-resources.jar-904bb2ab7d85f71b", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/war-url-connection.war", "SPDXID": "SPDXRef-File-...webresources-war-url-connection.war-7f84ea34eb5655e3", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/docs/appdev/sample/sample.war", "SPDXID": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-9c1d31d75b5e2020", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}, {"algorithm": "SHA256", "checksumValue": "3542637cdc55b620e7392e27d394d8d462245facd51c1182802f2185c61b7c7a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-15b86718aa78ed84", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}, {"algorithm": "SHA256", "checksumValue": "1141c62a014ac1378079876f2c021ecd3b31d6021c6ef856e660d0b49188bbe2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-d0e86f0a60ee10e4", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}, {"algorithm": "SHA256", "checksumValue": "71e6120f2f8a72a3cbecb4005732eda144ec658179c0c6c85336d9f6a37e451d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-bootstrap.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "75a45987288d482ce9a936cc6c335e6d3dc3d585"}, {"algorithm": "SHA256", "checksumValue": "e483fcc73e8654e233b30e6bb392da1861dbd1872d9e1c6b8f1ea21c0f833570"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a69484d3b18fcb0ccd4e219106f103bd7e5713c0"}, {"algorithm": "SHA256", "checksumValue": "d0053f26031a18b9c292c1d867ffcb5c042ee36dadeb74199748608d19fdbd6a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/bootstrap.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "75a45987288d482ce9a936cc6c335e6d3dc3d585"}, {"algorithm": "SHA256", "checksumValue": "e483fcc73e8654e233b30e6bb392da1861dbd1872d9e1c6b8f1ea21c0f833570"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a69484d3b18fcb0ccd4e219106f103bd7e5713c0"}, {"algorithm": "SHA256", "checksumValue": "d0053f26031a18b9c292c1d867ffcb5c042ee36dadeb74199748608d19fdbd6a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/el-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7a2b9fc079db66f9275b1a1bb1399a44341c0eb3"}, {"algorithm": "SHA256", "checksumValue": "1e78d016628f78e1d3e9bceb9c6570cae77386c1e821dbd1562dd0fd795d8dbc"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jsp-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "cb60894b949eb0d3f2b4bf8246c9c20fe22fd5ac"}, {"algorithm": "SHA256", "checksumValue": "52982d42179360acd19cbaca60ad53b9c91171d2f8c9bb1299265c0bc1eeea54"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/java/tomcat/tomcat-jni.jar", "SPDXID": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c5f6c39cfcb7ba72876c06a1fefac7c5b84301c8"}, {"algorithm": "SHA256", "checksumValue": "a140cb3b4a9cd0630ac612954bd0ede395674e5592b92465b2582e9d25e5ad06"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/annotations-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "757ce1c75087fb5bc3c7e8897acbaf905adbb7fe"}, {"algorithm": "SHA256", "checksumValue": "8c1ca96357793eb318c54ceef83108204872127b48231b215359d248727450aa"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ant.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "482f0429f9d02d500c6c63b7d8e232a5f73476c3"}, {"algorithm": "SHA256", "checksumValue": "99854d93b80e1ff1da30d18c6abc907687f4da638e0fe8c90cc1b65f565bd1e7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ha.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "751174798dd43f26e1d6b1789cfffd4737531692"}, {"algorithm": "SHA256", "checksumValue": "26ba565dc84fabbb924a8344bd6b1b2aa18e2a1a53ab29221d2e88fee81a88b0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ssi.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ff537e813f7ba1e69306a4a8ebc9827f06e4c6d9"}, {"algorithm": "SHA256", "checksumValue": "5e49c61aa6ad6a75c46516df2657367a9bf9364196f16bbff2ef85e12c3381de"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-storeconfig.jar", "SPDXID": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e95a76f93cd5a19284306f7d612a2f898fcb7d19"}, {"algorithm": "SHA256", "checksumValue": "fa110d4cc3dd80a1140b18a2b16aa993b8fc54d2cc81057890f47a1f70f7b335"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-tribes.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "08e2770861ddd77cfe3fd2fe76a3ba5fe299d03e"}, {"algorithm": "SHA256", "checksumValue": "dcda542feabcfbb6f3845c03a255c95df5604cfbe33564263d8d3e01a66d1f62"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "99b16c05d36ed66aac3b966190b4d6e8eedbaf77"}, {"algorithm": "SHA256", "checksumValue": "9b1cd70548d57b43b1280495761fb11b947449607b759f528303209586778d6d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper-el.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d4d6f5a41533e69afd614bb54eed9f7396ab5e40"}, {"algorithm": "SHA256", "checksumValue": "79585c73896a64294de7b246de670fe844ca4b4fa4a32ad4bb50c227fafce27c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "cf0e7a0707ebd9fa182af2a63516ef56d34fcc12"}, {"algorithm": "SHA256", "checksumValue": "fe9c259590404dcdc9d6087c0668ee5d8311620ce63183ab31bd10d60fae7559"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jaspic-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4d307ede033797d6ab0ae6b6a29c7917641b363b"}, {"algorithm": "SHA256", "checksumValue": "01445d2b7c329a3e92e3703e0ae63eacc6e1d6484536a3f4d8f40222c830f80d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "64d91d86193d8602964e7be85d2a8fed929e052e"}, {"algorithm": "SHA256", "checksumValue": "b33e4739e8b1bdc8978f4abf666b88ace3f3de398b121574f2344814a777ebe8"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote-ffm.jar", "SPDXID": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d1c7ded9b5ab3aa3b3dbc1cb4238f6ec7473a36f"}, {"algorithm": "SHA256", "checksumValue": "1b6f7cafa3146f5be95cef63b1973c755b96f9db5ddbc4564b1fa7bcaed578ae"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "196d39e2ec4bfed2b41c37db386a39eaaeabfee6"}, {"algorithm": "SHA256", "checksumValue": "8d6c66925f63b59ab95645f5ed9e1d0259cd646c829bde2a219d4d09d5310a0c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-dbcp.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0293ba530a13eb864645dc63d3e3c7def8ac76fd"}, {"algorithm": "SHA256", "checksumValue": "154c408b61f92f21049823bf51a20fe41121d0a7d72b9e1367ddcf9e5783ccfa"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-jdbc.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a24bd4855f81b9132fc20e8eccd1df5ce4df2cbc"}, {"algorithm": "SHA256", "checksumValue": "057db559b21e1dbefe23ca8fb7166074d1b4dfce983ba4e02ee48439da7efe93"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util-scan.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "bc65ad8ddae1dbf4ae4ee217677993d6ca802116"}, {"algorithm": "SHA256", "checksumValue": "b0b3b6f939daa16fa4b45fd074c30049905cd5885f08e5310817aa1dcfad69b0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "85c4d8b720b6a2d1c3f7c6214bc9e472a9b130aa"}, {"algorithm": "SHA256", "checksumValue": "5d2799096a5699147e649b4fae80e1a964ffdfbf9224fae4fe4be22659c52cf7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-websocket.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9f388bafca33b05b84372ae93a0d27d1e1aca315"}, {"algorithm": "SHA256", "checksumValue": "fb402a2171f34305f8d714fbcffa602630092d2677f1b04c015602183bb1ceee"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4231e3f9c4f397eba6caebb86c4c97ed157860f2"}, {"algorithm": "SHA256", "checksumValue": "b0525fccefc612c037329dd2aa19cc45abd97c7d48b3168062d6dc9e9e706869"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-client-api.jar", "SPDXID": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "5a5e74ea445e3641852788205a8add89a5be1b3b"}, {"algorithm": "SHA256", "checksumValue": "0485d368d622a2da54047e81b72064173fe7b90757d13b1645741b3d73789277"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/servlet-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4546010772de7aeb45bd634b41e967a05f713c2f"}, {"algorithm": "SHA256", "checksumValue": "e7c0bb5b5f601b1eb79e4b87db104bb877bcb8f879fee7d383b09b0e38f04743"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-admin-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-common", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-docs-webapp", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-el-5.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-lib", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-user-instance", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source3"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source4"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source5"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source6"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source7"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source8"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source9"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-openjdk25-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aopalliance-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-cli-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-codec-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-compress-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-io-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-lang3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bndlib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bnd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bcel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-beust-jcommander-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-default-fonts-core-sans-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dola-bsx-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ecj-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fontconfig-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-freetype-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-gson-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-guice-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-fonts-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-guava-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-client-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-annotations-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-inject1.0-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-filesystem-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jcl-over-slf4j-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jsr-305-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXau-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXcomposite-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXext-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXrender-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXtst-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfontenc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpng-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcb-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxslt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lksctp-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lujavrite-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-lib-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-resolver-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-shared-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-wagon-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mkfontscale-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nspr-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-freebl-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-sysinit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-util-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-objectweb-asm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-annotation-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-compendium-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-cipher-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-classworlds-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-interpolation-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-javapackages-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-lxml-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sisu-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-slf4j-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ttmkfdir-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-java-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xml-common-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-core-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-generator-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-tools-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-noarch"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-admin-webapps"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-common"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-docs-webapp"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-el-5.0-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-jsp-3.1-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-lib"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-servlet-6.0-api"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-user-instance"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-noarch", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-noarch-tomcat10-webapps"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "relatedSpdxElement": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-6cdcb336c25339c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "relatedSpdxElement": "SPDXRef-File-...webresources-non-static-resources.jar-81aacadbe91f4552", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-15b86718aa78ed84", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "relatedSpdxElement": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-00c93e6c19b1cb9a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-59a8cc5422dcfc91", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-d0e86f0a60ee10e4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-ac932e67073f5b15", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "relatedSpdxElement": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-7c156a08e377cb03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "relatedSpdxElement": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-16bb268042ad90b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources2.jar-84b0a4aa4872091d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "relatedSpdxElement": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-9c1d31d75b5e2020", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.2.hum1.src"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-admin-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-common", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-docs-webapp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-el-5.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "relatedSpdxElement": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-lib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-user-instance", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.2.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.2.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.2.hum1.noarch"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-noarch-tomcat10", "SPDXRef-noarch-tomcat10-admin-webapps", "SPDXRef-noarch-tomcat10-common", "SPDXRef-noarch-tomcat10-docs-webapp", "SPDXRef-noarch-tomcat10-el-5.0-api", "SPDXRef-noarch-tomcat10-jsp-3.1-api", "SPDXRef-noarch-tomcat10-lib", "SPDXRef-noarch-tomcat10-servlet-6.0-api", "SPDXRef-noarch-tomcat10-user-instance", "SPDXRef-noarch-tomcat10-webapps"]}