{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-09-03T09:22:35Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "tomcat10-10.1.59-0.1.hum1", "documentNamespace": "https://fedoraproject.org/tomcat10-10.1.59-0.1.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "tomcat10", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-10.1.59-0.1.hum1.src.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10@10.1.59-0.1.hum1?arch=src&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "47cb324c876ccf269ce82832dc762b33db1f89e2bc162fe7da0bea0938ab0b27"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\xe7?\\x15\\x8cW\\xb2\\x9f\\x8a\\x9d\\xbd\\xe6j\\xdb9\\xb7\\xb7'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 0b5102235d0639e7e254c4834330598e96cd70bdc2bd388b3ad768cad347c08e"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10", "name": "tomcat10", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "0acc041c86695c87b05a6e04c96ca9417e47dfadf38b0b9461903bffed9c80db"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'9\\x86U\\x9f\\tx\\x07+8w\\xd3\\xe1e\\x90\\x0b\\xe0'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 4daa971de664af46f0640f6d1b6a36c19a907debd4cbbb152e121802c24aec1d"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-admin-webapps", "name": "tomcat10-admin-webapps", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-admin-webapps-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-admin-webapps@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "870f37a4f6025fc47b2ce58bf7590963385fddf7f82931547a14bb358fc5106c"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\x8d\\x163)l\\x87\\x89n\\x05\\xb3\\xed\\xe3\\x1d\\xc8\\xfb\\xd5'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 29e9b3b038d9d85d7358b8f8b6d0352599a6d0e8bb1db8f72f00a020eb97a794"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-common", "name": "tomcat10-common", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-common-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-common@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "20981a37a2286da12ec33cda8ed237857553c5102e47b9f23c415a774275cff7"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\xdcd\\xccOl\\xa5\\xdd4\\x06\\xf2Hy\\xff\\xb3\\\\o'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: a2f21b4ee8ef50530e44d2200adcd0846a9455b872bae889d51ebca301f0a86d"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-docs-webapp", "name": "tomcat10-docs-webapp", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-docs-webapp-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-docs-webapp@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "50246d77a45b2175e61f4033a87e23583f0b4d89b25fae0a5809bd07efcc4420"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'v\\n\\xd9\\x1c\\r\\xacA~\\xddr8\\xca\\xd9\\xd2)?'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: ac81a3e8a8f278d36a7d0ba8d8280fb8b7ec37dccf4308ec7ae31de5fed88ffb"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-el-5.0-api", "name": "tomcat10-el-5.0-api", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-el-5.0-api@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "478cb074b282b919a61f6e1484e5bf468ca37024660002e6c46c7406d7bccb66"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'^sd\\xb4\\xe9|U\\xce+LvrK\\x86uS'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: d4222764e9f0cf830752d5b5116d8a3334abd8844deb9ea2ce55eea1c807eb44"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "name": "tomcat10-jsp-3.1-api", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-jsp-3.1-api@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "039e376d007c8226135431d93264d26c19eb753e3380cfb38070d41bcbd24561"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'}f\\xba\\xd3&L\\xb3\\x9d\\x93\\xaf\\xf4\\xe4\\xf5\\xceJ2'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: f8ba5ec167cf34935525407a72b2403f562a1b9f0e063da324c31a8ca9f2eab5"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-lib", "name": "tomcat10-lib", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-lib-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-lib@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "1b52aa9b0d0f310267e2c7287df5bdb11c519387f1c62ea83be3fced659f1aa4"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\xcf\\xd7\\x9b(P\\xc3Q\\xb2\\xc6\\x1fP\\xbe\\xa3\\xe2\\x1f\\xa1'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 2e0ef5b3bdffef05c53c3984639a8341d247d84cd3500a9cfbefbd70e77e821d"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "name": "tomcat10-servlet-6.0-api", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-servlet-6.0-api@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "1f617d3170a4b8b3a7e5d9d5c4096296d145bad862ec00a91fb79646883cce05"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\x8e\\x01\\x01\\x16\\x84w\\xd5\\xa4*\\xd9\\xc1=\\tf\\xfc\\xe6'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 95e25bc56f28134fa28f2f87696a7176406377cb32ea71f9bc9a3bb1c23ef416"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-user-instance", "name": "tomcat10-user-instance", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-user-instance-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-user-instance@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "644065385e9a2c77b769f7fcf34e720ba9f11ce941fad719076de490f16db412"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\xce\\xdc~\\xf0\\x8c%\\xd5b\\x00\\x1e\\x1d\\xba\\x19\\x91xt'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: a582d257dd47109e6382aee7073c68ef1b1d0909cc4c76f8ac512b57174f030f"}]}, {"SPDXID": "SPDXRef-noarch-tomcat10-webapps", "name": "tomcat10-webapps", "versionInfo": "10.1.59:10.1.59-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "tomcat10-webapps-10.1.59-0.1.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat10-webapps@10.1.59-0.1.hum1?arch=noarch&epoch=1"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "7c473fee26f6d96be925eb52422d2781988fe795ce929a3fa45ae078294df6da"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b'\\xec\\xf8\\x85\\xdc1Y\\xd7Z#\\xd0\\xe3\\x13h\\x83f\"'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sha256header: 4ac98274a5c5bdda9d3db4b8c1e0e038e1cb55ca11d9bf1def76fb9b19ff6888"}]}, {"SPDXID": "SPDXRef-Source0", "name": "apache-tomcat-10.1.59", "versionInfo": "src", "packageFileName": "apache-tomcat-10.1.59-src.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/tomcat/apache-tomcat-10.1.59-src.tar.gz/sha512/19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea/apache-tomcat-10.1.59-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-10.1.59@src?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/tomcat/apache-tomcat-10.1.59-src.tar.gz/sha512/19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea/apache-tomcat-10.1.59-src.tar.gz&checksum=sha512:19a6736b42370fb6fa64d0c4dab3f33c68b80602c45d86873f2334e42833c3e7e2364c0d34a9dbb86474d9b86640166d263838d485a5b696fd845f2d20114bea"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "apache-tomcat-10.1.59", "versionInfo": "src", "downloadLocation": "http://www.apache.org/dist/tomcat/tomcat-10/v10.1.59/src/apache-tomcat-10.1.59-src.tar.gz", "packageFileName": "apache-tomcat-10.1.59-src.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/apache-tomcat-10.1.59@src?download_url=http://www.apache.org/dist/tomcat/tomcat-10/v10.1.59/src/apache-tomcat-10.1.59-src.tar.gz&checksum=sha256:83dfb12e61fc368272dd93e2f983ead4cf1a37050f2eb56cf285044665ec9c75"}]}, {"SPDXID": "SPDXRef-Source1", "name": "KEYS", "versionInfo": "unknown", "packageFileName": "KEYS", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "850f793865c1b4a64ba505429702e32a20d71a3accb81b34fb3bf9989af7c83c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/KEYS"}]}, {"SPDXID": "SPDXRef-Source2", "name": "tomcat", "versionInfo": "10.1.conf", "packageFileName": "tomcat-10.1.conf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "33c25908696a6d2b4aeced8e8a361c6fb94d7c240023867af52e630253be851a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@10.1.conf"}]}, {"SPDXID": "SPDXRef-Source3", "name": "tomcat", "versionInfo": "10.1.service", "packageFileName": "tomcat-10.1.service", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "e749c7296fae7c69dd355885b5ad501f6787c9621846cc2057e9cba67513fbf8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat@10.1.service"}]}, {"SPDXID": "SPDXRef-Source4", "name": "tomcat-10.1-locate", "versionInfo": "java.sh", "packageFileName": "tomcat-10.1-locate-java.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "bf67fa24d245f6136abb2fa9da10d63cb17653a3c100251e919704b620709146"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-locate@java.sh"}]}, {"SPDXID": "SPDXRef-Source5", "name": "tomcat-10.1", "versionInfo": "run.sh", "packageFileName": "tomcat-10.1-run.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "f24cf0a4441057f5e183010e22e0c839116a6e9f412948036f7ca189c7f8f2b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@run.sh"}]}, {"SPDXID": "SPDXRef-Source6", "name": "tomcat-10.1", "versionInfo": "RUNNING.txt", "packageFileName": "tomcat-10.1-RUNNING.txt", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "1d5d462053122f66f289a0167274f545781f809162d708f705c30873c3b43d67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@RUNNING.txt"}]}, {"SPDXID": "SPDXRef-Source7", "name": "tomcat-10.1-user-instance", "versionInfo": "create.sh", "packageFileName": "tomcat-10.1-user-instance-create.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "be7b50f32fbcab0b1a3bda09011133ede83f7016594c44ba5cb15df18bde95bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-user-instance@create.sh"}]}, {"SPDXID": "SPDXRef-Source8", "name": "tomcat-10.1", "versionInfo": "setenv.sh", "packageFileName": "tomcat-10.1-setenv.sh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "769750a46503f7fc0fc5ec01dd88fe9f25cbd18c6d7f39242195307e38ca4c99"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1@setenv.sh"}]}, {"SPDXID": "SPDXRef-Source9", "name": "tomcat-10.1-user-instance", "versionInfo": "create.asciidoc", "packageFileName": "tomcat-10.1-user-instance-create.asciidoc", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "de8374500ad60d2b85f5c44075b7c14c633fb88f7609efc8fdea56b61791a755"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/tomcat-10.1-user-instance@create.asciidoc"}]}, {"SPDXID": "SPDXRef-Buildroot-tomcat10-x86-64", "name": "tomcat10-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-x86-64", "name": "abattis-cantarell-vf-fonts", "versionInfo": "0.301-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/abattis-cantarell-vf-fonts-0.301-18.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8071144b64145451fbd55f4575094016"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/abattis-cantarell-vf-fonts@0.301-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 49f9259756d5c706df2b6570ff5b5cea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-lib-x86-64", "name": "ant-lib", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-lib-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: fcf2508d20a6b8de8f7b4bf52b8c6957"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-lib@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-openjdk25-x86-64", "name": "ant-openjdk25", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-openjdk25-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 668bd2b590358e26b1ae5c2b95aedbfa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant-openjdk25@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ant-x86-64", "name": "ant", "versionInfo": "1.10.15-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/ant-1.10.15-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3af86d196650e7e0bb937c9cf6530d68"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ant@1.10.15-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aopalliance-x86-64", "name": "aopalliance", "versionInfo": "1.0-8.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aopalliance-1.0-8.fc44.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bbdaa454589ec768d516fefa81e2f833"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aopalliance@1.0-8.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-cli-x86-64", "name": "apache-commons-cli", "versionInfo": "1.10.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-cli-1.10.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 93801c268fdb5f74d1de6c63f467e7d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-cli@1.10.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-codec-x86-64", "name": "apache-commons-codec", "versionInfo": "1.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-codec-1.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: abdd0a2509ff59b6923dc3c51eac2424"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-codec@1.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-compress-x86-64", "name": "apache-commons-compress", "versionInfo": "1.28.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-compress-1.28.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d78a3aa33901a2f6d48b4b24c0cb0bfe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-compress@1.28.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-io-x86-64", "name": "apache-commons-io", "versionInfo": "1:2.20.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-io-2.20.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 071df2b159babe740e0f33792d16e903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-io@2.20.0-3.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-apache-commons-lang3-x86-64", "name": "apache-commons-lang3", "versionInfo": "3.19.0-3.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/apache-commons-lang3-3.19.0-3.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3778bd2bfa11e6ee3ae4e0bcd245d4fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/apache-commons-lang3@3.19.0-3.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bndlib-x86-64", "name": "aqute-bndlib", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bndlib-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d634280e90252a1fc55651316d67577c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bndlib@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-aqute-bnd-x86-64", "name": "aqute-bnd", "versionInfo": "6.3.1-31.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/aqute-bnd-6.3.1-31.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 OR EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 44c749a2ebc0d9acce2b01260ae20737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/aqute-bnd@6.3.1-31.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 25236c26c96434cd2c084d5df98e55cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-x86-64", "name": "authselect-libs", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-libs-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b14a21f672fb8a2b32fa25dee98404bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-x86-64", "name": "authselect", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4c9189f00d4ea34aaac756cff82ccdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 35c598d1f15aba91f61b244abf8d0fbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bcel-x86-64", "name": "bcel", "versionInfo": "6.10.0-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/bcel-6.10.0-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6e5291a1b0a758031886f416f2326655"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bcel@6.10.0-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-beust-jcommander-x86-64", "name": "beust-jcommander", "versionInfo": "1.82-29.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/b/beust-jcommander-1.82-29.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f84e8aada4d5d00ce0e221d811d9b88b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/beust-jcommander@1.82-29.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: af80d8495b28db44fe34df5474e26f80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: eed9f8d38229149ee3ba920f26ec2634"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: ed5ad98a73dbc065c211ed6d9a6be8bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2025.2.80_v9.0.304-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2025.2.80_v9.0.304-9.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8280885c60ebda1b9261bdb611c6bf85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d2aee0d1bb96b62e637baca6ed52bda3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: de0c31a752b4c84fe8355fc07d7c7e73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-x86-64", "name": "cracklib", "versionInfo": "2.10.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cracklib-2.10.3-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3f9ad52e2eccdefe42c677227d92f9f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 879e05f9fee2fffc9b0863b62ee0784c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 01283c07f63751da93fa1cfe352e124f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.21.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.21.0-5.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 35d1b8abbb8539146cc00f42b41e5486"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.21.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 266c623e6d845c8594aa574261208db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-default-fonts-core-sans-x86-64", "name": "default-fonts-core-sans", "versionInfo": "4.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/default-fonts-core-sans-4.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 86921a0e77b0846c3b4c5197b0ed205f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/default-fonts-core-sans@4.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dola-bsx-x86-64", "name": "dola-bsx", "versionInfo": "1.3.2-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/d/dola-bsx-1.3.2-10.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5eafd60d39ae15ef7d17269f6e650ccf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dola-bsx@1.3.2-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ecj-x86-64", "name": "ecj", "versionInfo": "1:4.23-16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ecj-4.23-16.hum1.noarch.rpm", "licenseDeclared": "EPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 38dc05bbd70ac42f51d4be14c0b168f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ecj@4.23-16.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.195-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.195-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3e46c72b25370aadf6ea97b67fcbfb50"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.195-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.195-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.195-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e3c8836f4e7c49d50f0a21972bc664ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.195-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.195-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.195-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 439cb26f836784db8cbb6fd4fd5b1ad1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.195-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.195-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.195-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1531ad6654e0a28edf7a188d86896f67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.195-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.3-0.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.3-0.1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 396a9fcf9e262692518f4645ec91e389"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.3-0.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3011bd0b02ede9edac71a65e99147e3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a6149e4767a7cf4d382b9c7363233909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e149bc26d884bf5a5ee6102ad3247a1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: fe5a4416f64ae8bf85a0f6da30837f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fontconfig-x86-64", "name": "fontconfig", "versionInfo": "2.18.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fontconfig-2.18.3-1.hum1.x86_64.rpm", "licenseDeclared": "HPND AND LicenseRef-Fedora-Public-Domain AND Unicode-DFS-2016", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8040218e1f79b34c1fa979a5b843ec47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fontconfig@2.18.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-filesystem-x86-64", "name": "fonts-filesystem", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-filesystem-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 51b74135abe35cee598865729a7c346d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-filesystem@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-freetype-x86-64", "name": "freetype", "versionInfo": "2.14.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/freetype-2.14.3-2.hum1.x86_64.rpm", "licenseDeclared": "(FTL OR GPL-2.0-or-later) AND BSD-3-Clause AND MIT AND MIT-Modern-Variant AND LicenseRef-Fedora-Public-Domain AND Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f83520986455d13c893c08f081949538"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/freetype@2.14.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bc6234f1f13c2975b1d28e47af9678a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.23-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 16d5cf0e1a204da7d8dfec016f321ee0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-8.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-8.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e2b087ab513060862eb9a06e73d259bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-8.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-8.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-8.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2652f3f091bb8a4fc243e4bb372adfaf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-8.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-8.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-8.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7aa2b6a69b5549829fa7318f0dd9e015"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-8.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-8.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: dadd156c1f298ed7a3170c689263450e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-8.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8333c5d90507e9736f0e303c1d522bc7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9f2721ea3da813f95e0ad372005b7529"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: cacaf2b33174d8b69711aa44ccc468fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f03517c24814af85fc2cf0c88c52cc3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1558980b4762e26e31e9250935327328"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 29926505c40dfc97edbcac3739fa6fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8d857842147cc33655aa852ce16a6d0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4465107c8a805de52d68f9358bfc23f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-gson-x86-64", "name": "google-gson", "versionInfo": "2.12.1-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-gson-2.12.1-6.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4ca5ccf49194732e4664592a320185ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-gson@2.12.1-6.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-guice-x86-64", "name": "google-guice", "versionInfo": "5.1.0-33.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/google-guice-5.1.0-33.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a0a76b4165c7e37992253e5272e02667"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-guice@5.1.0-33.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-fonts-common-x86-64", "name": "google-noto-fonts-common", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-fonts-common-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d529a78da911404bd76fe292007af60c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-fonts-common@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-x86-64", "name": "google-noto-sans-vf-fonts", "versionInfo": "20260601-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/google-noto-sans-vf-fonts-20260601-3.hum1.noarch.rpm", "licenseDeclared": "OFL-1.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d73b2c01493c0a291f525b8549dafc65"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/google-noto-sans-vf-fonts@20260601-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e9b48d78eb8bf0c4148539f2d7590630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-guava-x86-64", "name": "guava", "versionInfo": "33.5.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/g/guava-33.5.0-1.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: de6ba95a6bfd36c3838bd3bd24e3d398"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/guava@33.5.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-client-x86-64", "name": "httpcomponents-client", "versionInfo": "4.5.14-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-client-4.5.14-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1bafcfae5004435463e1364739e3e242"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-client@4.5.14-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-httpcomponents-core-x86-64", "name": "httpcomponents-core", "versionInfo": "4.4.16-30.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/h/httpcomponents-core-4.4.16-30.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5bf74ba6d5dd745c3332abcd92e308d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/httpcomponents-core@4.4.16-30.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.15.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.15.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 006417301712d7c41ffee0679e8c9e3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.15.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.15.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.15.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8e5029474823d751ba5f4bdd5d25d56b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.15.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.15.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.15.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c5d0fdea6ee5ed04bfa5295fbe8004d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.15.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 13293a1d14d37f008481dc8932e105a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-annotations-x86-64", "name": "jakarta-annotations", "versionInfo": "1.3.5-46.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-annotations-1.3.5-46.fc44.noarch.rpm", "licenseDeclared": "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2347161d72d8ba3f213287808c751383"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-annotations@1.3.5-46.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jakarta-inject1.0-x86-64", "name": "jakarta-inject1.0", "versionInfo": "1.0.5-12.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jakarta-inject1.0-1.0.5-12.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 57e0baf53b432ccdc006466f2f976b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jakarta-inject1.0@1.0.5-12.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansi-x86-64", "name": "jansi", "versionInfo": "2.4.2-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jansi-2.4.2-2.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b17661d6e19bee064d6402a7aac5eea6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansi@2.4.2-2.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-x86-64", "name": "java-25-openjdk-crypto-adapter", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e0da4608269ee77093544fe10a747413"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-crypto-adapter@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-x86-64", "name": "java-25-openjdk-devel", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-devel-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: caa63261573ce9c8595508ba0a1522f0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-devel@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-x86-64", "name": "java-25-openjdk-headless", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-headless-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2d362a4a05a90a0d4d24c8af022e2e1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk-headless@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-25-openjdk-x86-64", "name": "java-25-openjdk", "versionInfo": "1:25.0.4.1.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-25-openjdk-25.0.4.1.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d0c5debb4abd8cd627756fd5e39ea1f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-25-openjdk@25.0.4.1.1-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-common-x86-64", "name": "javapackages-common", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-common-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0c58747098275968eca3af2bce256a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-common@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-filesystem-x86-64", "name": "javapackages-filesystem", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-filesystem-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: dfb507d447bceb292455cfa3d3742fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-filesystem@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-x86-64", "name": "javapackages-local-openjdk25", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-local-openjdk25-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 32bdb8329469e93ed1221b42bee539b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-local-openjdk25@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-javapackages-tools-x86-64", "name": "javapackages-tools", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/javapackages-tools-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 248bd63f16318539e0ef4e6243948e92"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/javapackages-tools@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jcl-over-slf4j-x86-64", "name": "jcl-over-slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jcl-over-slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1615e220e97509ac77f2d7c2821503ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jcl-over-slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e77db91a34f0bbe04e9c920b4509229b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jsr-305-x86-64", "name": "jsr-305", "versionInfo": "3.0.2-44.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/j/jsr-305-3.0.2-44.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f4f880c3d5a22a484ed421f3bdb698b4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jsr-305@3.0.2-44.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f3314a91e4eea1720410bcd3b770ab81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-9.1.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: fcd0b9f63f73692d52c332ab30217e6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-common-x86-64", "name": "libX11-common", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-common-1.8.13-2.hum1.noarch.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: debe6e4308c8a575143b5f76b3bebcd4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11-common@1.8.13-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libX11-x86-64", "name": "libX11", "versionInfo": "1.8.13-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libX11-1.8.13-2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8d95a6ed42ae135faef90837e6b5bac8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libX11@1.8.13-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXau-x86-64", "name": "libXau", "versionInfo": "1.0.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXau-1.0.12-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8ac42f7764153997f1f83b4fe4a22c88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXau@1.0.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXcomposite-x86-64", "name": "libXcomposite", "versionInfo": "0.4.6-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXcomposite-0.4.6-8.hum1.x86_64.rpm", "licenseDeclared": "MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0c14126b353aaab5b82f92c4391d2805"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXcomposite@0.4.6-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXext-x86-64", "name": "libXext", "versionInfo": "1.3.6-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXext-1.3.6-6.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND HPND AND HPND-sell-variant AND SMLNJ AND MIT AND ISC AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4f60c3fb8c35590df93ecea57c2b7ce6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXext@1.3.6-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXi-x86-64", "name": "libXi", "versionInfo": "1.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXi-1.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND SMLNJ AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 75783990ac8d8cf50e298bb095ff1425"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXi@1.8.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXrender-x86-64", "name": "libXrender", "versionInfo": "0.9.12-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXrender-0.9.12-5.hum1.x86_64.rpm", "licenseDeclared": "HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7ae5ab05ae59ec072eba6c1300bf7be6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXrender@0.9.12-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libXtst-x86-64", "name": "libXtst", "versionInfo": "1.2.5-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libXtst-1.2.5-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND HPND-sell-variant AND X11 AND HPND-doc AND HPND-doc-sell", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a094f59851775fb31fcdc8224befe2cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libXtst@1.2.5-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 778d6a835f1bfcb1eba15772105b50dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.8-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.8-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0758bf73997040af83f49b583928ab2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.8-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3d2e4518c599f045df67f8766d514be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f2697d851b503d3e8b1fb13c46975197"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 04bf9b2dab99d0b0957ddc802b552a3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.5-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bee771867abba9896a92e8061074cbfd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 99e45918735b0a73e5d7fa59ca39d79c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f3c1be1d36e9f029f995536b6e55a86c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: efa036217a574dc291905e1d6787e5fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.21.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.21.0-5.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f58d874e942c2bdf5b31c288b565bd05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.21.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f286b987da4aba89effee118c74d63c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.12-19.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.12-19.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2cc9d9321d4def879c73c456fcc96746"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.12-19.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3aae8a7c114643ead858497040bf60a6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.5.2-3.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b379c80d092e884edca21229b22b9f0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.5.2-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 09d88d35bf7b1fdbe3596964d5a5b4d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfontenc-x86-64", "name": "libfontenc", "versionInfo": "1.1.8-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfontenc-1.1.8-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bfc90dd31704ddb48cc01007c7fb6b67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfontenc@1.1.8-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 714d39cacbaa2869cb8986837cc7c051"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7f44b3ed25c62af7fca7534bcb5503d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.2-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.2-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7e76c4be2288d8b74daf91e4bc1cceab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.2-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 656b1ba106369f9105acf64ed30e33fa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3c865a471949c8a9c6cb39d47d8f1352"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a39f7e39430a77e5e372eabb91b997cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 97c2ec2ec2c7c15552b2f9bfe8aaf020"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 47247cd1e51f648ad7c6e5e2e363e17d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 73db754d7827b9713fe898eca3d3a0df"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-5.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c6ae8f8b998ef4b924f4a7c483950da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5598615cbe06f72c2a2879a3aaf13699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-x86-64", "name": "libnsl2", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnsl2-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 738ea6cbd6499c2495aa28d665c043b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpng-x86-64", "name": "libpng", "versionInfo": "2:1.6.58-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpng-1.6.58-2.hum1.x86_64.rpm", "licenseDeclared": "zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1bd5b6396180ec2d447226eab0b14f27"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpng@1.6.58-2.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.1-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5a6a0c1c67a57c39de62b7e2a8e21504"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-x86-64", "name": "libpwquality", "versionInfo": "1.4.5-18.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpwquality-1.4.5-18.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 83fb1254a477bafd652ea86057ef79bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-x86-64", "name": "libseccomp", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e2bd5d7f7cc8c493f79e31a71757cf2a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3748a84ad738c24e62cdee896dd3096d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9791a4d8f1020cdbffc43dc8b0bf450d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 57bd130b5ca8c425e5201ae74113bfe8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 39bac19c684ef55d632a47c43bb878c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5b6231de9e13f5d6f3ebe61c7bbc1ddb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 149536546e1810f679ce19b1be42e58e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 786c9eb6cf16e70afac24b687a58a734"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e377a290a5c1a3fe6380be2a69a90fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-x86-64", "name": "libtirpc", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtirpc-1.3.7-3.hum1.x86_64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d270169aad39bef874590837735f6a1d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.7-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.5.4-11.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.5.4-11.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 70ba9283722c13dd220b62e0337e67b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.5.4-11.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1cc5ed6dc9abd644761b1394fa848349"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7e5e59833d66366a60c5c01481be2c39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 500214965ff84b543686443500c4a2ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1e2d449e326eb9c384e7665561d3bf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcb-x86-64", "name": "libxcb", "versionInfo": "1.17.0-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcb-1.17.0-8.hum1.x86_64.rpm", "licenseDeclared": "X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b65b0379db98877a8d53e1b8eed2fca1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcb@1.17.0-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 186f5d91cd0fb2f9753f3859f2eaca00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.3-0.1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.3-0.1.4.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7ea7c0586f45fcc50b5edb445ee9eccf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.3-0.1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-x86-64", "name": "libxml2", "versionInfo": "2.12.10-6.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/l/libxml2-2.12.10-6.fc44.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 580ab293715fe79dfd1d1ca00f335668"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2@2.12.10-6.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxslt-x86-64", "name": "libxslt", "versionInfo": "1.1.45-0.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxslt-1.1.45-0.1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e56e1a0838c6f6d4a4b84d62945555fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxslt@1.1.45-0.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d3302b977dc6fd5cb29412a7d358541d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lksctp-tools-x86-64", "name": "lksctp-tools", "versionInfo": "1.0.21-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lksctp-tools-1.0.21-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.0-only AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: de113f675e8eb42acd7085a585cae8e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lksctp-tools@1.0.21-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 202aef337d9998f9b16c9b81b42d4744"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lujavrite-x86-64", "name": "lujavrite", "versionInfo": "1.2.3-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lujavrite-1.2.3-4.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6a4340b7b1681b6bbcdd5492b9fac2dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lujavrite@1.2.3-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9d26849f5c070c53a3c0eb03d2a7b3da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-lib-x86-64", "name": "maven-lib", "versionInfo": "1:3.9.11-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-lib-3.9.11-11.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 06010a9ee38899f4508a7dfb1e5fe260"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-lib@3.9.11-11.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-resolver-x86-64", "name": "maven-resolver", "versionInfo": "1:1.9.24-5.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-resolver-1.9.24-5.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 210b4335f129aa62423b2854e52b4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-resolver@1.9.24-5.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-shared-utils-x86-64", "name": "maven-shared-utils", "versionInfo": "3.4.2-27.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-shared-utils-3.4.2-27.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9ecf41b89dea3030322e53754e4ad780"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-shared-utils@3.4.2-27.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-maven-wagon-x86-64", "name": "maven-wagon", "versionInfo": "3.5.3-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/m/maven-wagon-3.5.3-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 11788a192192c068f8990f624f535afd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/maven-wagon@3.5.3-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mkfontscale-x86-64", "name": "mkfontscale", "versionInfo": "1.2.4-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mkfontscale-1.2.4-5.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group AND X11 AND MIT AND HPND-sell-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e874c6a940690035fb739108f879b703"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mkfontscale@1.2.4-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 2510cb8c8936230f7136343d313013d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1f7dd08e1f7f3a21dea4d74150ca7e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: dec047659ca3ed7f2ade5edb5417768e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: ce32706efbf4cd25374b30a8c35c8b33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 53eeed67908e3a4eb1daa0c352dd6c6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 79832c509c9ece7d8af6a7967f6c6d36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nspr-x86-64", "name": "nspr", "versionInfo": "4.39.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nspr-4.39.0-4.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 396373e128a8a9c6f55ee96be904f162"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nspr@4.39.0-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-freebl-x86-64", "name": "nss-softokn-freebl", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-freebl-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a28591b689483ebff78b93f8e9460593"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn-freebl@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-softokn-x86-64", "name": "nss-softokn", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-softokn-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 846a54f364bbdda33fb6d4be581ab3fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-softokn@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-sysinit-x86-64", "name": "nss-sysinit", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-sysinit-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 288cb3a44497200d81c83be021173b2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-sysinit@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-util-x86-64", "name": "nss-util", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-util-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f8165f38432edc8e9fca461056d0840b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss-util@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nss-x86-64", "name": "nss", "versionInfo": "3.127.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nss-3.127.0-1.hum1.x86_64.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 64a3a265afb737a4f0b750a184d30cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nss@3.127.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-objectweb-asm-x86-64", "name": "objectweb-asm", "versionInfo": "9.7.1-15.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/objectweb-asm-9.7.1-15.fc44.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 867a2025c5f1033aacbda91b105a9366"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/objectweb-asm@9.7.1-15.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.13-4.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a2d4cf9dfcc75dc0b1203812c66474a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8369e6248ade4d151e67b35b4687a584"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 07b4fddbc7a905355706d23cb7793b8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-annotation-x86-64", "name": "osgi-annotation", "versionInfo": "8.1.0-23.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-annotation-8.1.0-23.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bbdb9a5437d12374dc5659d83c0bb03a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-annotation@8.1.0-23.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-compendium-x86-64", "name": "osgi-compendium", "versionInfo": "7.0.0-43.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-compendium-7.0.0-43.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 74164cab659544c0613c260e2d2e7ef5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-compendium@7.0.0-43.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-osgi-core-x86-64", "name": "osgi-core", "versionInfo": "8.0.0-39.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/o/osgi-core-8.0.0-39.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7f9e086639fc2c074e1d19304c0e3c55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/osgi-core@8.0.0-39.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 68257f4d7431d3b1885712f25b4f5058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 75311ea12371b64af16c0e5594ded602"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: fca8dc3ed64b8bdc9ea406b714989970"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-x86-64", "name": "pam", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 45e8bb3359f7a1bcea2cba7230567828"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0ae052d45ed91aae4aa901512b427f23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.47-1.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: df6d2e760944267916c19d5af1dbc84b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.47-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.47-1.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a3612da414f5ebd0589c219b97004eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-cipher-x86-64", "name": "plexus-cipher", "versionInfo": "2.0-34.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-cipher-2.0-34.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9dff9d0430ada3c1b9c43385f29c4202"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-cipher@2.0-34.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-classworlds-x86-64", "name": "plexus-classworlds", "versionInfo": "2.8.0-17.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-classworlds-2.8.0-17.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Plexus", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b7a7aa34fdb9222cd0c6b9f8cf572e6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-classworlds@2.8.0-17.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-x86-64", "name": "plexus-containers-component-annotations", "versionInfo": "2.2.0-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-containers-component-annotations-2.2.0-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND MIT AND xpp", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 770ea353ec5d4c24a4449ceda6edfcc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-containers-component-annotations@2.2.0-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-interpolation-x86-64", "name": "plexus-interpolation", "versionInfo": "1.27-18.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-interpolation-1.27-18.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0 AND Apache-1.1 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4705c06b5fbfd263128020e4793cba14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-interpolation@1.27-18.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-x86-64", "name": "plexus-sec-dispatcher", "versionInfo": "2.0-38.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-sec-dispatcher-2.0-38.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8903ab2bb8e4d7777424ca0ad6c3409d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-sec-dispatcher@2.0-38.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-plexus-utils-x86-64", "name": "plexus-utils", "versionInfo": "3.5.1-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/plexus-utils-3.5.1-26.fc44.noarch.rpm", "licenseDeclared": "Apache-1.1 AND Apache-2.0 AND xpp AND BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 26b442c05eeffefca09cd48c4f8a3fc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/plexus-utils@3.5.1-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3770c5ab4a851a9ca25915a7894f54c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-x86-64", "name": "publicsuffix-list", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6d2c45dd0a145579643b8b5a47dbe37e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-javapackages-x86-64", "name": "python3-javapackages", "versionInfo": "6.5.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-javapackages-6.5.1-6.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 3548fdaac08a2b434f1e132f1029b5e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-javapackages@6.5.1-6.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.7-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.7-1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: dbb48a623f2c1262dba82e0519ba7432"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-lxml-x86-64", "name": "python3-lxml", "versionInfo": "6.1.1-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/p/python3-lxml-6.1.1-1.fc44.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-CMU AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 327f8c3a232a6f97a49c06ef931d1232"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-lxml@6.1.1-1.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.7-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.7-1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 20b0bd0a5c5d3b81679a754d233b902d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: dad256ab45b2ff28db082647e11ab463"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "344-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-344-5.1.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1815a9cbb4a558b65281573b4b19ee12"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@344-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7b8006ab72d995ed9df2c603bafd4ba6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 55aafb3993eba97f35528cce9ac5d6c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a353e35a0b5f3fa4395d4450df788c6b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: e5636d0f7996ae59d14870b725d27b39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f8aaccff474ac2e0fb7c916a2869ae15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4d84b318db5c5e865614398d432cb4be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.0.1-6.2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.0.1-6.2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a96976bd17319ce4d0ea0cfa2c16d793"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.0.1-6.2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: a4c743d0bd5c5abe0e89da9d7acb245d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7108297ff41d86cc219a9827586570e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: ed31d3b586a0e9350f35005b7cef044f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 052953675603b8650e5d97c0f5faa6e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sisu-x86-64", "name": "sisu", "versionInfo": "1:0.9.0~M3-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/sisu-0.9.0~M3-20.fc44.noarch.rpm", "licenseDeclared": "EPL-1.0 AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 4e91904462eac78765d47b37960e7aa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sisu@0.9.0~M3-20.fc44?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-slf4j-x86-64", "name": "slf4j", "versionInfo": "1.7.36-19.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/s/slf4j-1.7.36-19.fc44.noarch.rpm", "licenseDeclared": "MIT AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 51d44615299eeb9aa462cfde8b1a12cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/slf4j@1.7.36-19.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b61e6927000756f1a7453e0ef6f79487"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c329708277b41fa5c79182b97dcd05ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-rpm-macros-261.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 787aadb981481eae0b75b1a0e8897e62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-x86-64", "name": "systemd-shared", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-shared-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5db9ca8fa6c1f8d290eef7d9a109416d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1c7264a08531500bedc072ac1026a49f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-x86-64", "name": "systemd", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 23fc880762b65a2cee0ec95528533e88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-9.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6b1aeadd15ff53837871b720b844c023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-9.2.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-x86-64", "name": "tomcat-jakartaee-migration", "versionInfo": "1.0.9-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/t/tomcat-jakartaee-migration-1.0.9-9.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6a86de8b35fe9b8b69e0f9768f388384"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tomcat-jakartaee-migration@1.0.9-9.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6e3945fdad8b17446f10429d0f919de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ttmkfdir-x86-64", "name": "ttmkfdir", "versionInfo": "3.0.9-75.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/ttmkfdir-3.0.9-75.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 5ee459bd40632217d96101034db082da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ttmkfdir@3.0.9-75.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-java-x86-64", "name": "tzdata-java", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-java-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: d9c2846961df5069696a40d2cbbd61f4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata-java@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bb9d0cac51e578dbd6858d7a3f69451c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: f5d59c35ed3db63020122b3d6b77fd42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.2-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.2-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 209ad77bad8ed488f4a38cb4cd479c28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.2-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xml-common-x86-64", "name": "xml-common", "versionInfo": "0.6.3-69.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xml-common-0.6.3-69.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 01a29366200f28727135436c000f206b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xml-common@0.6.3-69.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-core-x86-64", "name": "xmvn-core", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-core-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 6b8e81c9f0a3c8c41e5ca773f5450439"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-core@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-generator-x86-64", "name": "xmvn-generator", "versionInfo": "2.1.1-7.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-generator-2.1.1-7.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 65f4aa1d2d41b808fd4d5ae56cc0d093"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-generator@2.1.1-7.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xmvn-tools-x86-64", "name": "xmvn-tools", "versionInfo": "4.3.0-26.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/x/xmvn-tools-4.3.0-26.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 9e8ca0e64eba864777edb2192e587324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xmvn-tools@4.3.0-26.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-x86-64", "name": "xorg-x11-fonts-Type1", "versionInfo": "7.5-43.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xorg-x11-fonts-Type1-7.5-43.hum1.noarch.rpm", "licenseDeclared": "HPND AND Adobe-Utopia AND Cronyx AND MIT AND Lucida-Bitmap-Fonts AND Bitstream-Charter AND X11", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: b4e2af302f24d3b88806b9db795c99c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xorg-x11-fonts-Type1@7.5-43.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.3-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.3-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 8e8b69e91a6ab99c261f44d383efd2e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.3-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 40b31750471c626a59b9c50cf29d582a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0de88d5dbb3bbc77301612e918495548"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 1afc93af70228a741ab127580f779159"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-03T09:22:35Z", "comment": "sigmd5: 593ee2b10e36abc9883e112101c9b0aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"name": "rpm-extracted/tomcat10-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v4"}]}, {"name": "actions/setup-java", "SPDXID": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-java@v4"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "versionInfo": "v4", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v4"}]}, {"name": "bug69623-lib", "SPDXID": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623-lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623_lib:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623-lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bug69623:bug69623_lib:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/bug69623-lib/bug69623-lib"}]}, {"name": "contextCopyXMLFalse", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLFalse.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLFalse:contextCopyXMLFalse:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLFalse/contextCopyXMLFalse"}]}, {"name": "contextCopyXMLTrue", "SPDXID": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLTrue.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contextCopyXMLTrue:contextCopyXMLTrue:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/contextCopyXMLTrue/contextCopyXMLTrue"}]}, {"name": "h2", "SPDXID": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "versionInfo": "2.2.220", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:com.h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2database:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:h2:h2:2.2.220:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/com.h2database/h2@2.2.220"}]}, {"name": "junit", "SPDXID": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "versionInfo": "4.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:junit:junit:4.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/junit/junit@4.13.2"}]}, {"name": "non-static-resources", "SPDXID": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webresources/non-static-resources.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static-resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static_resources:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non-static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non_static:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non-static-resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:non:non_static_resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/non-static-resources/non-static-resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources", "SPDXID": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources:resources:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources/resources"}]}, {"name": "resources2", "SPDXID": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND CPL-1.0 AND EPL-1.0 AND Zlib AND bzip2-1.0.6", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:resources2:resources2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/resources2/resources2"}]}, {"name": "rsrc", "SPDXID": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rsrc:rsrc:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/rsrc/rsrc"}]}, {"name": "sample", "SPDXID": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/docs/appdev/sample/sample.war", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sample:sample:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/sample/sample"}]}, {"name": "taglibs-standard-impl", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "versionInfo": "1.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard-impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:standard_impl:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-impl@1.2.5"}]}, {"name": "taglibs-standard-spec", "SPDXID": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "versionInfo": "1.2.5", "supplier": "Organization: Sun Microsystems, Inc.", "originator": "Organization: Sun Microsystems, Inc.", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}], "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-http---www.apache.org-licenses-LICENSE-2.0.txt", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs-standard-spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs_standard_spec:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:taglibs:1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "versionInfo": "10.1.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@10.1.39"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "versionInfo": "1.1.0-SNAPSHOT", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:1.1.0-SNAPSHOT:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@1.1.0-SNAPSHOT"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "versionInfo": "10.1.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.39"}]}, {"name": "rpm-extracted/tomcat10-10.1.59-0.1.hum1.src", "SPDXID": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-admin-webapps-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "bootstrap", "SPDXID": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "22b3f6f88d25850c2da4288294cd1de428a3d9e6"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/bootstrap@10.1.59"}]}, {"name": "tomcat-bootstrap", "SPDXID": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "22b3f6f88d25850c2da4288294cd1de428a3d9e6"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-bootstrap.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:Bootstrap:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:startup:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.catalina.startup.Bootstrap/tomcat-bootstrap@10.1.59"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "f28918d28930d79dfd2a8d7ed8dd642d6bcf484a"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.59"}]}, {"name": "tomcat-juli", "SPDXID": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "f28918d28930d79dfd2a8d7ed8dd642d6bcf484a"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/tomcat/bin/tomcat-juli.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_juli:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.59"}]}, {"name": "rpm-extracted/tomcat10-common-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-docs-webapp-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "el-api", "SPDXID": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "versionInfo": "5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "21f87df40533b8425d1a687a5e125ce1faed7a0a"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/el-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el-api:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el_api:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el-api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:el:el_api:5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/el-api/el-api@5.0"}]}, {"name": "rpm-extracted/tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "jsp-api", "SPDXID": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "versionInfo": "3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "b135c0ee253269186331e8d5f0719d40026b2c87"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jsp-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp-api:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp_api:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp-api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jsp:jsp_api:3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jsp-api/jsp-api@3.1"}]}, {"name": "rpm-extracted/tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "annotations-api", "SPDXID": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "versionInfo": "2.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e30d3810c290351b6a37b39a50622bd6703875fe"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/annotations-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations-api:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations_api:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations-api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:annotations:annotations_api:2.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/annotations-api/annotations-api@2.1.1"}]}, {"name": "catalina", "SPDXID": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "b67fafd15ee4ea07e547c77b1eaa02e494de5a22"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina/catalina@10.1.59"}]}, {"name": "catalina-ant", "SPDXID": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "fb99838404748a307df9499a79242132d2cbe686"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ant.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ant:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ant:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ant:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ant/catalina-ant@10.1.59"}]}, {"name": "catalina-ha", "SPDXID": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "50e8e3675cab377bf012bb0e16a355d87253bba7"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ha.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ha:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ha:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ha:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ha/catalina-ha@10.1.59"}]}, {"name": "catalina-ssi", "SPDXID": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "42803e02a1e7969c6aee952a7d4071375b7786da"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-ssi.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-ssi:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_ssi:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_ssi:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-ssi/catalina-ssi@10.1.59"}]}, {"name": "catalina-storeconfig", "SPDXID": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "3676dfbfe9834e211796a66307c2c1abb983fdc4"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-storeconfig.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-storeconfig:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_storeconfig:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_storeconfig:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-storeconfig/catalina-storeconfig@10.1.59"}]}, {"name": "catalina-tribes", "SPDXID": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "c0462c353372b8a9ddc951a2ae0a0a1e02c5157b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/catalina-tribes.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina-tribes:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina_tribes:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina-tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:catalina:catalina_tribes:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/catalina-tribes/catalina-tribes@10.1.59"}]}, {"name": "jasper", "SPDXID": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "fb4a0bd3ba59a923fc939e512f766a0b9df786ca"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper/jasper@10.1.59"}]}, {"name": "jasper-el", "SPDXID": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "70eeb724c0f8960d9c9b8cd29414f3773315461f"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jasper-el.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper-el:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper_el:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper-el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jasper:jasper_el:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jasper-el/jasper-el@10.1.59"}]}, {"name": "jaspic-api", "SPDXID": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "versionInfo": "3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "973e1bcc67f524c3de86f13f027b8702915dd81b"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/jaspic-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic-api:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic_api:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic-api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jaspic:jaspic_api:3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/jaspic-api/jaspic-api@3.0"}]}, {"name": "tomcat-api", "SPDXID": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "2998dfd1adabbe836facb957cc8fc1ed45318be0"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-api:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_api:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-api@10.1.59"}]}, {"name": "tomcat-coyote", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "2feb0d5e9238ba264da2941a548d4d79d66ce21f"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-coyote:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_coyote:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.59"}]}, {"name": "tomcat-coyote-ffm", "SPDXID": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "32e50f85095c606bce250e7a6ef4690dd6038a7e"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-coyote-ffm.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote-ffm:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote_ffm:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat-coyote:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat_coyote:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat-coyote-ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tomcat:tomcat_coyote_ffm:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/tomcat-coyote-ffm/tomcat-coyote-ffm@10.1.59"}]}, {"name": "tomcat-dbcp", "SPDXID": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "40b66468d036a5db7348806db371ccf7deb304f3"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-dbcp.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-dbcp:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_dbcp:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-dbcp@10.1.59"}]}, {"name": "tomcat-jdbc", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "versionInfo": "10.1.59", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "7339505b0560df332d827668a300e16f7ef159c7"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-jdbc.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jdbc:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jdbc:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.59"}]}, {"name": "tomcat-jni", "SPDXID": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a93fca17cc249d7dcc5d38388490dc08e82193f3"}], "sourceInfo": "acquired package info from installed java archive: /usr/lib/java/tomcat/tomcat-jni.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-jni:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_jni:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-jni@10.1.59"}]}, {"name": "tomcat-util", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "e86576019453d4d8b821b5218d8e3eb28c49aafe"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.59"}]}, {"name": "tomcat-util-scan", "SPDXID": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "76b638fd065c8c04ff1a69d044f795bf21db573d"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-util-scan.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-util-scan:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_util_scan:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.59"}]}, {"name": "tomcat-websocket", "SPDXID": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "versionInfo": "10.1.59", "supplier": "Organization: Apache Software Foundation", "originator": "Organization: Apache Software Foundation", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "a0d04fada822c6fc92a6a86d9a73ad2271dc6e8d"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/tomcat-websocket.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat-websocket:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat_websocket:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache:tomcat:10.1.59:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.apache.tomcat/tomcat-websocket@10.1.59"}]}, {"name": "websocket-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "695cfe0b45d71c32bda630bd8a7077fe0c16c7d7"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_api:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-api/websocket-api@%40version%40"}]}, {"name": "websocket-client-api", "SPDXID": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "versionInfo": "@version@", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "98fda844f4e8740256f1d07cf908a2caed466e23"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/websocket-client-api.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client-api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client_api:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket-client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket_client:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket-client-api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:websocket:websocket_client_api:\\@version\\@:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/websocket-client-api/websocket-client-api@%40version%40"}]}, {"name": "rpm-extracted/tomcat10-lib-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "servlet-api", "SPDXID": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "versionInfo": "6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "4cd00b13860ebc16d8d98b62c59127a4e729cea0"}], "sourceInfo": "acquired package info from installed java archive: /usr/share/java/tomcat/servlet-api.jar", "licenseConcluded": "Apache-2.0 AND CDDL-1.0 AND EPL-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache-software-foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apache_software_foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse-foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:eclipse_foundation:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet-api:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet_api:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet-api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:servlet:servlet_api:6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/servlet-api/servlet-api@6.0"}]}, {"name": "rpm-extracted/tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-user-instance-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/tomcat10-webapps-10.1.59-0.1.hum1.noarch", "SPDXID": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.1.hum1.noarch", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "apache-tomcat-10.1.59-src/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "1a8086ae5986d2a06aa4730f0199042bc8b47add"}, {"algorithm": "SHA256", "checksumValue": "b34bf8d5d989d365160a8156d3531be3046555c7917c0abe874dd9aa4faef38e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/modules/jdbc-pool/pom.xml", "SPDXID": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a46944ddd4dbf9bec8dc4b59fd8a13c3470b1a5c"}, {"algorithm": "SHA256", "checksumValue": "184c647c9bdb9be2498f666d374d5f4c76c5430c36000473a1f81837c28d3b4f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/broken.war", "SPDXID": "SPDXRef-File-...test-deployment-broken.war-574070a24514f7d7", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/context.jar", "SPDXID": "SPDXRef-File-...test-deployment-context.jar-1b657119890d31b2", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/context.war", "SPDXID": "SPDXRef-File-...test-deployment-context.war-6fd6f555c6ee027b", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-6cdcb336c25339c9", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9039d1add9d30600c81b7788f3fd045ee6ab7590"}, {"algorithm": "SHA256", "checksumValue": "ee6c6b9f7ae1b5005cdfe3f0570cd8410b1a52176e40af48db1feeb8ec44e3ba"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextCopyXMLTrue.war", "SPDXID": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-00c93e6c19b1cb9a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c22b46c6f3ad8207499c982116ba0043b2dbb2f4"}, {"algorithm": "SHA256", "checksumValue": "a50f2fb9a0e5fa0a2ad47dbbe78671455dd3cce591991c13e69610eb136d7b86"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextUnpackWARFalse.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARFalse.war-68b854d3b5670d36", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/contextUnpackWARTrue.war", "SPDXID": "SPDXRef-File-...deployment-contextUnpackWARTrue.war-9c6966331ad7fb04", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/dir with spaces/context.jar", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.jar-fb6cfd6fd2c87dc5", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/dir with spaces/context.war", "SPDXID": "SPDXRef-File-...deployment-dir-with-spaces-context.war-fe064f156e404498", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/deployment/noContext.war", "SPDXID": "SPDXRef-File-...test-deployment-noContext.war-f19e9ab8d9700491", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments-empty-absolute-ordering/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-59a8cc5422dcfc91", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a562a3a4ab54005f0259c6e5b3cddee8e0672a18"}, {"algorithm": "SHA256", "checksumValue": "25917eeb22376c679e2fd8eb0aadd0b0e8441b2869c394c7bd3cb9de4ae8128b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources.jar-ac932e67073f5b15", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "997b6d7212a04d9fc595265bb21bb81640dba5be"}, {"algorithm": "SHA256", "checksumValue": "796fcef4c6b0e8dc3a8a9bc0a7970a3acf9ef8d54ad53a3c8daed0d0b03bdd53"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-fragments/WEB-INF/lib/resources2.jar", "SPDXID": "SPDXRef-File-...WEB-INF-lib-resources2.jar-84b0a4aa4872091d", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "50b2cc3295cd23238a94711fe472c16ecf83611e"}, {"algorithm": "SHA256", "checksumValue": "3684638824a5cafc0aa9bdae1812e9120a867f2103ebce051ba2043120cc23de"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp-virtual-webapp/src/main/webapp-a/WEB-INF/lib/rsrc.jar", "SPDXID": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-16bb268042ad90b0", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f9389bf571d4e9b2cf7ad92380929aa9c9941e86"}, {"algorithm": "SHA256", "checksumValue": "2e9e02e8a7688627091d600c62095ff7777cb0e61488df74a37fad7d590bc909"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69135-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69135-lib.jar-72809772e4b9df9a", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/bug69623-lib.jar", "SPDXID": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-7c156a08e377cb03", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e8a6af25c4685190f7ba675fafc69fb2fc2fa996"}, {"algorithm": "SHA256", "checksumValue": "2f9c89cd47816c1661c5d12aeeb92e9999946b7bb66d9c294414015d334b84f0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webapp/WEB-INF/lib/test-lib.jar", "SPDXID": "SPDXRef-File-...test-webapp-WEB-INF-lib-test-lib.jar-061c47ce30a61290", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/dir1-internal.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1-internal.jar-1e7fc7535ffbb1f2", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/dir1.jar", "SPDXID": "SPDXRef-File-...test-webresources-dir1.jar-0a3d05d453443aff", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/non-static-resources.jar", "SPDXID": "SPDXRef-File-...webresources-non-static-resources.jar-81aacadbe91f4552", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9c9f9ae8e3c7643005e2e94e8a6606d9951bc067"}, {"algorithm": "SHA256", "checksumValue": "f594fc2c53fd0a529ef4244ada35950db3743f020b5a3115c4b0499d5208c770"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/static-resources.jar", "SPDXID": "SPDXRef-File-...test-webresources-static-resources.jar-904bb2ab7d85f71b", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/test/webresources/war-url-connection.war", "SPDXID": "SPDXRef-File-...webresources-war-url-connection.war-7f84ea34eb5655e3", "checksums": [{"algorithm": "SHA1", "checksumValue": "0000000000000000000000000000000000000000"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/docs/appdev/sample/sample.war", "SPDXID": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-9c1d31d75b5e2020", "fileTypes": ["APPLICATION", "ARCHIVE"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8750f6b7a3a67488ca591dd32811e4e985e2613f"}, {"algorithm": "SHA256", "checksumValue": "3542637cdc55b620e7392e27d394d8d462245facd51c1182802f2185c61b7c7a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-impl-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-15b86718aa78ed84", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "6bc6265f361f8efd5f1fb230073983e2d2495cec"}, {"algorithm": "SHA256", "checksumValue": "1141c62a014ac1378079876f2c021ecd3b31d6021c6ef856e660d0b49188bbe2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "apache-tomcat-10.1.59-src/webapps/examples/WEB-INF/lib/taglibs-standard-spec-1.2.5-migrated-0.0.1.jar", "SPDXID": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-d0e86f0a60ee10e4", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a8dda6f938e91e18d47a6cb8593167222ba6abea"}, {"algorithm": "SHA256", "checksumValue": "71e6120f2f8a72a3cbecb4005732eda144ec658179c0c6c85336d9f6a37e451d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-bootstrap.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "22b3f6f88d25850c2da4288294cd1de428a3d9e6"}, {"algorithm": "SHA256", "checksumValue": "3c7ac6d2e0954e64e99b96087afe0fb8a49a0dac1056769be578017db9523cf7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f28918d28930d79dfd2a8d7ed8dd642d6bcf484a"}, {"algorithm": "SHA256", "checksumValue": "4d45e54d9298cb487e05554510e9e2b12297832fdc2cce6ecb5a6e32cb47b711"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/bootstrap.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "22b3f6f88d25850c2da4288294cd1de428a3d9e6"}, {"algorithm": "SHA256", "checksumValue": "3c7ac6d2e0954e64e99b96087afe0fb8a49a0dac1056769be578017db9523cf7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/tomcat/bin/tomcat-juli.jar", "SPDXID": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f28918d28930d79dfd2a8d7ed8dd642d6bcf484a"}, {"algorithm": "SHA256", "checksumValue": "4d45e54d9298cb487e05554510e9e2b12297832fdc2cce6ecb5a6e32cb47b711"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/el-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "21f87df40533b8425d1a687a5e125ce1faed7a0a"}, {"algorithm": "SHA256", "checksumValue": "1231e04b5dfe85bb6c0322a6f5477137e8fee27824da9fc271afeb98ca3ddd40"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jsp-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b135c0ee253269186331e8d5f0719d40026b2c87"}, {"algorithm": "SHA256", "checksumValue": "358576f78321865092e818150ea60f428b4bdcc598e825fa871745d587f3a047"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/java/tomcat/tomcat-jni.jar", "SPDXID": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a93fca17cc249d7dcc5d38388490dc08e82193f3"}, {"algorithm": "SHA256", "checksumValue": "4b9e15c8133837772325d431973833666c3d1867aadd34a34eceb80008377e88"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/annotations-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e30d3810c290351b6a37b39a50622bd6703875fe"}, {"algorithm": "SHA256", "checksumValue": "257801b84872a01b6df8a6c5b6c33b4f70f32297bf51e4cb57e2094fc6f314ce"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ant.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fb99838404748a307df9499a79242132d2cbe686"}, {"algorithm": "SHA256", "checksumValue": "2e574e26038a77ecfcd6a1b8d92fd8e7375ce102aa0d8143978c8d0d6e7650da"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ha.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "50e8e3675cab377bf012bb0e16a355d87253bba7"}, {"algorithm": "SHA256", "checksumValue": "c5eee60c2d6d8d9442847197ca2e318fc5b3c33f1342e5264c27229d353192cc"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-ssi.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "42803e02a1e7969c6aee952a7d4071375b7786da"}, {"algorithm": "SHA256", "checksumValue": "665aa1eb7aa623f5dda0c06d613552df471331619e10255bd43dfa49dff17f43"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-storeconfig.jar", "SPDXID": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3676dfbfe9834e211796a66307c2c1abb983fdc4"}, {"algorithm": "SHA256", "checksumValue": "6c4959b6bfa9ae767cd5bdf8eae5ddc99ac09b3f3579f0f0b83552937b8457e0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina-tribes.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c0462c353372b8a9ddc951a2ae0a0a1e02c5157b"}, {"algorithm": "SHA256", "checksumValue": "71b82e1c0e5f955dffc7aa5dd6d91a0ef6b95f952fe9a376a8b9ee875f8398fd"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/catalina.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b67fafd15ee4ea07e547c77b1eaa02e494de5a22"}, {"algorithm": "SHA256", "checksumValue": "5347e0780237e8a68ebf9ea40861a3983f40ab16262d95b71e2064a8a848c132"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper-el.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "70eeb724c0f8960d9c9b8cd29414f3773315461f"}, {"algorithm": "SHA256", "checksumValue": "94ffabf8705040f5709974f5435e797ecbeeba78364ae40cbf030287a481d116"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jasper.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fb4a0bd3ba59a923fc939e512f766a0b9df786ca"}, {"algorithm": "SHA256", "checksumValue": "75f7cb2b9bdc6aa374496c067251785bc5ab341d1e48477fe1d1cbcc3f63e44b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/jaspic-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "973e1bcc67f524c3de86f13f027b8702915dd81b"}, {"algorithm": "SHA256", "checksumValue": "65b3ced384561cf2f1b427291098c31068cac302371ca30304142d346d50aba7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "2998dfd1adabbe836facb957cc8fc1ed45318be0"}, {"algorithm": "SHA256", "checksumValue": "d99b48780449f4d69dd9d1506511481f4ecc2f03a143a4fb3a34ad9221ceeec5"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote-ffm.jar", "SPDXID": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "32e50f85095c606bce250e7a6ef4690dd6038a7e"}, {"algorithm": "SHA256", "checksumValue": "40e6a918551fbae11554adffdb1fcf5a0795f6e7db95573bbe502fce47687d83"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-coyote.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "2feb0d5e9238ba264da2941a548d4d79d66ce21f"}, {"algorithm": "SHA256", "checksumValue": "b7a263b588bcc62a2cd270cd0be9fc1f12600594360e95d628a8a4da7ea3ef10"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-dbcp.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "40b66468d036a5db7348806db371ccf7deb304f3"}, {"algorithm": "SHA256", "checksumValue": "095e827aa61f1375ed5736322896abd90b70917bd604423fd2e774cac56e6de9"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-jdbc.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7339505b0560df332d827668a300e16f7ef159c7"}, {"algorithm": "SHA256", "checksumValue": "767f3335c4b98e5a95482cae928fd673c423799ba16f286fc76425d8af0a0c44"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util-scan.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "76b638fd065c8c04ff1a69d044f795bf21db573d"}, {"algorithm": "SHA256", "checksumValue": "afaeb83fcf726bd7a9c775a3e34ebe7cdedbf865fbdb42412023fc6e95ce5246"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-util.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e86576019453d4d8b821b5218d8e3eb28c49aafe"}, {"algorithm": "SHA256", "checksumValue": "70b40d0bb8b2a01d609be939b6a9fe917b2c1d2583eecd59236d9d912e8977c0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/tomcat-websocket.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a0d04fada822c6fc92a6a86d9a73ad2271dc6e8d"}, {"algorithm": "SHA256", "checksumValue": "b20bb775b72189b22825876d7a9728306b6008867790fe19cb1c42cd7373fce6"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-api.jar", "SPDXID": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "695cfe0b45d71c32bda630bd8a7077fe0c16c7d7"}, {"algorithm": "SHA256", "checksumValue": "c912a791b14092b2848f549d4c4017c4f30904a154977849be631bb5cee307d9"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/websocket-client-api.jar", "SPDXID": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "98fda844f4e8740256f1d07cf908a2caed466e23"}, {"algorithm": "SHA256", "checksumValue": "6715a6a562316a8ae067e2a6d9a1b69ab767d2feb2a9d2c86ea69334bf12e7a2"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/share/java/tomcat/servlet-api.jar", "SPDXID": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4cd00b13860ebc16d8d98b62c59127a4e729cea0"}, {"algorithm": "SHA256", "checksumValue": "b040061627b8db2e52278df5f4410c6af4574638e53faff7f43a48a87f21fcbe"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-admin-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-common", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-docs-webapp", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-el-5.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-lib", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-user-instance", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-webapps", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source3"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source4"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source5"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source6"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source7"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source8"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source9"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-abattis-cantarell-vf-fonts-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-openjdk25-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ant-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aopalliance-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-cli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-codec-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-compress-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-io-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-apache-commons-lang3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bndlib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-aqute-bnd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bcel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-beust-jcommander-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-default-fonts-core-sans-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dola-bsx-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ecj-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fontconfig-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-freetype-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-gson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-guice-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-fonts-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-google-noto-sans-vf-fonts-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-guava-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-httpcomponents-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-annotations-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jakarta-inject1.0-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-crypto-adapter-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-headless-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-25-openjdk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-local-openjdk25-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-javapackages-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jcl-over-slf4j-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jsr-305-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libX11-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXau-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXcomposite-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXext-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXrender-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libXtst-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfontenc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcb-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxslt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lksctp-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lujavrite-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-resolver-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-shared-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-maven-wagon-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mkfontscale-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nspr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-freebl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-softokn-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-sysinit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-util-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-objectweb-asm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-annotation-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-compendium-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-osgi-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-cipher-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-classworlds-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-containers-component-annotations-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-interpolation-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-sec-dispatcher-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-plexus-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-javapackages-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-lxml-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sisu-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-slf4j-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tomcat-jakartaee-migration-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ttmkfdir-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-java-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xml-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-generator-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xmvn-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xorg-x11-fonts-Type1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-tomcat10-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "relatedSpdxElement": "SPDXRef-File-...deployment-contextCopyXMLFalse.war-6cdcb336c25339c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "relatedSpdxElement": "SPDXRef-File-...webresources-non-static-resources.jar-81aacadbe91f4552", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-impl-1.2.5-migrated-0.0.1.jar-15b86718aa78ed84", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "relatedSpdxElement": "SPDXRef-File-...test-deployment-contextCopyXMLTrue.war-00c93e6c19b1cb9a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-59a8cc5422dcfc91", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "relatedSpdxElement": "SPDXRef-File-...taglibs-standard-spec-1.2.5-migrated-0.0.1.jar-d0e86f0a60ee10e4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources.jar-ac932e67073f5b15", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "relatedSpdxElement": "SPDXRef-File-...webapp-WEB-INF-lib-bug69623-lib.jar-7c156a08e377cb03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-a183a92fbac1d679", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "relatedSpdxElement": "SPDXRef-File-...src-main-webapp-a-WEB-INF-lib-rsrc.jar-16bb268042ad90b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relatedSpdxElement": "SPDXRef-File-...modules-jdbc-pool-pom.xml-bff36dfd6b12f4b0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "relatedSpdxElement": "SPDXRef-File-...WEB-INF-lib-resources2.jar-84b0a4aa4872091d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "relatedSpdxElement": "SPDXRef-File-...webapps-docs-appdev-sample-sample.war-9c1d31d75b5e2020", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-3ffe72809e61ef39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-java-84a5193057591bee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-9dcc18374fe68f1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-bug69623-lib-988923ba22fc7b4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLFalse-0269a2a621333a34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-contextCopyXMLTrue-81a937fb145164b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-h2-08cdd0b1367d6e0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-junit-af8b5b4f5d4a2ec6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-non-static-resources-34548c39dab4e898", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-855cc322fcfd0332", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources-90276fd807c40d4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-resources2-d9e7fd2ee1e97f06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-rsrc-a51d3d81fe78f8d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-sample-dff0b58bfa2a2503", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-impl-59503bc3e9dbce5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-taglibs-standard-spec-8cfe52a62e0af84d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-b53e34ac2547647e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-aef49b0fdad08f0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-d3aebb328ef4a57a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-10.1.59-0.1.hum1.src"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-admin-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-admin-webapps-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-bootstrap.jar-aea989a49e36782a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-bootstrap.jar-952a89156eaa2427", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "relatedSpdxElement": "SPDXRef-File-usr-share-tomcat-bin-tomcat-juli.jar-1e67646a3836a85a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-juli.jar-043a8705bb34f592", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-bootstrap-6c08c6e8c792e0e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-bootstrap-2e33412683aa8a62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-6f5ed4af78cf8904", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-juli-6d58a555f8d3c72e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-common", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-common-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-docs-webapp", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-docs-webapp-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-el-api.jar-d5d18dd33cff5325", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-el-api-c12a1694026feb56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-el-5.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-el-5.0-api-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jsp-api.jar-a6da8ca661e1c706", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jsp-api-95da20526ad76d62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-jsp-3.1-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-jsp-3.1-api-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina.jar-034d7b6716d0ccff", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-util.jar-61f49d936bd02154", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-tomcat-coyote-ffm.jar-a8ab2a878433afc8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-util-scan.jar-31a83ff99e772c28", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-api.jar-b02d819220590f77", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-dbcp.jar-21034eb8058aa3f8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper.jar-6d0de32f6beca482", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-tomcat-jdbc.jar-5c33a7866c1dae2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-websocket-client-api.jar-d7a4289eb44ab112", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ssi.jar-862e93bbf2f3bf2a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-catalina-tribes.jar-b2df8116e37bccb8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "relatedSpdxElement": "SPDXRef-File-...java-tomcat-catalina-storeconfig.jar-ec2c047fa9aa1f1f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-coyote.jar-6528be9f9b106a2b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-annotations-api.jar-fd9680d872b55a73", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "relatedSpdxElement": "SPDXRef-File-usr-lib-java-tomcat-tomcat-jni.jar-be91b41af23856c1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ha.jar-a39521fd69c6240c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jaspic-api.jar-7a64fe92313bccbd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-websocket-api.jar-7c35fd5ec66f39da", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-jasper-el.jar-19d2030cc7375316", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-catalina-ant.jar-ff69ae2b0c51697f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "relatedSpdxElement": "SPDXRef-File-...share-java-tomcat-tomcat-websocket.jar-d319cb8c335d7a24", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-annotations-api-b53a77f22d78c0db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-1b9f9014327f9731", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ant-eb7b4e4425810985", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ha-c4c58d31df72f6df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-ssi-5ddd8bf263d28ca5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-storeconfig-8afba9d5334bbd6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-catalina-tribes-650334f6546a386e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-4a117a22158ebed0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jasper-el-e4fdc6440929a65f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-jaspic-api-d665254de44b800d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-api-40685a4a7d0bb29d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-95160f22085fa22d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-coyote-ffm-36118fe8a4aaaec7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-dbcp-416283a0076c3a78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jdbc-551ef48212faec06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-jni-b6b3d375a8e20d66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-35186a42f33366cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-util-scan-3df1ff1742423578", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-tomcat-websocket-fbf599e64232865e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-api-d8f6df698c0b16fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-websocket-client-api-5d58290d20c373dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-lib", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-lib-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "relatedSpdxElement": "SPDXRef-File-usr-share-java-tomcat-servlet-api.jar-a710bf3856e24adb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch", "relatedSpdxElement": "SPDXRef-Package-java-archive-servlet-api-8dea7489e84f3219", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-servlet-6.0-api", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-servlet-6.0-api-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-user-instance", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-user-instance-10.1.59-0.1.hum1.noarch"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.1.hum1.noarch", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-noarch-tomcat10-webapps", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-tomcat10-webapps-10.1.59-0.1.hum1.noarch"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-noarch-tomcat10", "SPDXRef-noarch-tomcat10-admin-webapps", "SPDXRef-noarch-tomcat10-common", "SPDXRef-noarch-tomcat10-docs-webapp", "SPDXRef-noarch-tomcat10-el-5.0-api", "SPDXRef-noarch-tomcat10-jsp-3.1-api", "SPDXRef-noarch-tomcat10-lib", "SPDXRef-noarch-tomcat10-servlet-6.0-api", "SPDXRef-noarch-tomcat10-user-instance", "SPDXRef-noarch-tomcat10-webapps"]}